Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/3G5FaVllDbETSk9fskWR8haKEKw.roa
File: 3G5FaVllDbETSk9fskWR8haKEKw.roa (raw, json)
Hash identifier: nANvlaGTj6d8YAx0Gn/UgJV6ez/NG9UwrTH42g969HU=
Subject key identifier: DC:6E:45:69:59:65:0D:B1:13:4A:4F:5F:B2:45:91:F2:16:8A:10:AC
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 01A04877ABB69A04A52D71164EA6E2CF769A
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/3G5FaVllDbETSk9fskWR8haKEKw.roa
Signing time: Fri 28 Aug 2026 13:03:17 +0000
ROA not before: Fri 28 Aug 2026 13:03:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4913
IP address blocks: 212.39.160.0/19 maxlen: 24
212.39.161.0/24 maxlen: 24
212.39.170.0/24 maxlen: 24
212.39.172.0/24 maxlen: 24
212.39.173.0/24 maxlen: 24
212.39.176.0/24 maxlen: 24
212.39.177.0/24 maxlen: 24
212.39.178.0/24 maxlen: 24
212.39.184.0/24 maxlen: 24
212.39.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:77:ab:b6:9a:04:a5:2d:71:16:4e:a6:e2:cf:76:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Aug 28 13:03:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc6e456959650db1134a4f5fb24591f2168a10ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:89:91:4a:f8:13:31:80:fa:c9:31:2f:f5:
11:e9:11:42:98:74:99:6d:b5:86:e4:64:31:82:f2:
39:a6:0a:b5:bd:0c:b9:18:1c:bf:db:86:b3:64:98:
8e:d2:6e:2a:0d:05:47:14:2d:93:77:14:72:1e:4c:
a5:9f:83:28:ba:0b:b3:28:fb:ce:84:fe:e4:ef:33:
cf:f7:3e:1c:47:44:82:e5:da:95:28:e5:60:c1:ed:
a8:ce:30:f0:b0:b4:89:6a:09:07:9b:95:50:e3:a1:
72:ff:da:56:24:fc:cc:c6:d0:72:29:ba:d8:24:b1:
24:ed:ad:85:f0:95:74:cc:e3:53:66:1b:b3:87:8b:
bb:10:19:ca:28:11:8d:e7:04:6a:b5:2a:d4:43:66:
7c:5d:e4:7e:4d:ed:2c:cc:93:9c:a0:4f:69:6c:03:
6d:f5:a0:c2:77:f4:03:b6:32:62:af:3d:aa:35:92:
a1:7f:38:18:50:b1:b0:95:4f:46:e1:91:a2:88:e6:
57:04:59:fd:3e:d1:f3:6b:80:a4:06:6b:c8:36:a5:
85:d7:a1:6d:5f:c0:2f:d5:a0:ed:67:9d:5c:6b:10:
2a:aa:d8:a5:50:41:55:18:1b:9d:71:33:8b:a1:e8:
be:d8:b7:f3:f8:84:db:e1:8d:92:cc:27:5d:59:6f:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6E:45:69:59:65:0D:B1:13:4A:4F:5F:B2:45:91:F2:16:8A:10:AC
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/3G5FaVllDbETSk9fskWR8haKEKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.160.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:d2:5c:52:70:19:1a:b3:94:db:78:95:81:01:98:7b:53:c6:
04:f5:62:62:bc:42:4a:ff:8a:4e:ec:13:e3:ae:db:0d:95:7e:
aa:b4:12:a6:54:dd:94:94:ae:35:74:bc:17:9b:ab:8c:01:44:
94:5f:6f:ae:58:92:78:11:cc:25:5a:0f:2c:b1:13:47:35:76:
62:37:eb:9a:db:db:26:b2:ce:a3:ae:91:b8:1e:04:fe:79:0c:
68:6d:d4:ea:e2:c2:be:fd:4b:a4:b7:25:f7:11:93:3c:37:27:
22:83:7b:90:ae:d3:f7:79:12:ec:f3:30:37:0f:27:a4:8d:b5:
21:a0:70:bc:94:5e:13:c0:7d:b2:d7:5c:44:0b:80:f6:b7:75:
0a:d8:b6:db:3b:c0:a8:a0:04:30:e2:e0:eb:58:61:35:c7:72:
95:7c:e5:1e:d6:18:91:97:51:2d:75:f1:6d:8a:73:f7:96:49:
a2:0e:d3:e2:90:43:ae:fe:00:62:0e:b0:bb:b2:7f:f4:06:73:
cf:f0:ae:27:16:cb:9d:e9:2e:b9:7e:d7:a1:fc:07:91:69:51:
ae:75:02:2a:78:76:f1:99:b3:65:06:fa:14:10:cf:29:1d:ca:
a6:6c:86:61:d3:14:25:9c:bb:fc:23:1d:92:9c:a9:59:3b:65:
fe:d3:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:17:07 2026 by rpki-client