Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/3Z98bullxYAoXq_JWG2xtkPPNd0.roa
File: 3Z98bullxYAoXq_JWG2xtkPPNd0.roa (raw, json)
Hash identifier: CIewOmnQ2zpRnIi9PNxzn1nULPrelWEWwWNHI/BPMBs=
Subject key identifier: DD:9F:7C:6E:E9:65:C5:80:28:5E:AF:C9:58:6D:B1:B6:43:CF:35:DD
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019F692D55BF9B76D640EDB3B52DDC5E4A4B
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/3Z98bullxYAoXq_JWG2xtkPPNd0.roa
Signing time: Thu 16 Jul 2026 04:26:46 +0000
ROA not before: Thu 16 Jul 2026 04:26:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149457
IP address blocks: 185.142.29.0/24 maxlen: 24
193.107.218.0/24 maxlen: 24
202.71.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:2d:55:bf:9b:76:d6:40:ed:b3:b5:2d:dc:5e:4a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jul 16 04:26:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd9f7c6ee965c580285eafc9586db1b643cf35dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:c1:e7:15:50:c7:db:37:ec:3f:6e:90:0c:
50:71:1e:dd:bd:13:ea:44:5f:61:2b:d8:6e:04:34:
ac:30:c3:82:99:ae:ef:54:f1:c7:52:b7:77:f5:5e:
4a:72:fd:41:a9:d1:43:5b:ab:41:74:52:8f:c1:22:
bd:6d:c5:35:c0:ed:07:3e:dd:18:ce:f8:28:23:69:
2f:a2:19:8c:94:1d:ba:d4:72:9a:86:03:ff:37:27:
63:fe:3e:81:cb:4a:1f:9e:4b:1e:1b:21:3c:ec:51:
64:95:c6:14:e8:4b:ea:a2:85:9d:61:76:28:b2:e1:
37:27:24:78:3b:96:f4:43:51:e8:c5:5b:07:bc:d4:
c3:7f:52:68:b2:a9:2f:1b:4b:26:4c:ab:d7:66:07:
5a:0f:53:ea:41:12:c2:d7:0c:e6:73:c2:40:6b:3c:
18:0b:b1:d7:e6:06:da:12:1d:0a:06:01:ad:bc:f7:
2b:70:43:77:9c:ab:c9:c6:a4:96:77:ec:c6:c9:1f:
ae:ed:07:2b:30:76:3c:e8:53:96:f9:1e:27:fd:ca:
b1:d8:05:7d:4e:2d:fc:3d:84:4d:a7:f3:af:b6:29:
ff:9e:db:c7:21:09:05:67:15:1a:97:1f:2c:11:78:
e1:7e:b6:e5:d9:34:e5:b0:58:ac:66:9c:f6:77:c3:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9F:7C:6E:E9:65:C5:80:28:5E:AF:C9:58:6D:B1:B6:43:CF:35:DD
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/3Z98bullxYAoXq_JWG2xtkPPNd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.29.0/24
193.107.218.0/24
202.71.5.0/24
Signature Algorithm: sha256WithRSAEncryption
35:62:10:8c:d0:07:84:63:69:62:f8:c5:c8:ff:0b:d1:e1:5d:
38:11:3b:38:7b:e3:a9:2a:d7:7a:e0:68:7c:a2:9c:15:6f:05:
e3:8a:ac:14:78:d4:22:6f:7c:34:8d:53:ec:09:b6:03:c8:19:
bb:c3:af:fd:1d:fb:85:20:96:46:23:99:93:b0:41:4e:7e:25:
9a:5b:bc:86:2b:9e:1d:ae:92:9a:43:e0:da:0f:1d:1e:c0:9e:
fc:2f:bc:7e:40:1f:3c:cb:17:3a:f4:e4:39:fa:3b:db:c0:e4:
78:28:42:1a:33:d3:8a:e4:46:77:01:85:f2:1f:e1:dc:13:af:
8a:5e:59:9c:e2:e6:77:86:46:86:83:bf:d8:48:5b:f4:f0:e8:
80:86:39:11:f5:20:b2:8f:84:f3:b9:da:35:86:4d:ff:e7:94:
9a:53:72:18:48:19:5b:12:dc:18:cd:12:e7:89:59:74:1d:80:
3e:32:da:ba:8e:34:eb:c1:74:ff:92:ea:4a:b9:8e:73:0e:a0:
14:53:d8:f6:f5:32:06:15:03:c4:2b:65:88:db:49:2f:c4:8e:
e3:18:e2:9c:93:e3:12:84:d9:63:c5:4e:84:cf:61:98:72:12:
d8:80:0b:5b:66:39:98:bb:10:c6:da:94:8d:bb:84:de:cc:e2:
21:8a:c4:22
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ9pLVW/m3bWQO2ztS3cXkpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjYwNzE2MDQyNjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDlmN2M2ZWU5NjVjNTgwMjg1ZWFmYzk1ODZkYjFiNjQzY2YzNWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt7B5xVQx9s37D9ukAxQcR7dvRPq
RF9hK9huBDSsMMOCma7vVPHHUrd39V5Kcv1BqdFDW6tBdFKPwSK9bcU1wO0HPt0Y
zvgoI2kvohmMlB261HKahgP/Nydj/j6By0ofnkseGyE87FFklcYU6EvqooWdYXYo
suE3JyR4O5b0Q1HoxVsHvNTDf1JosqkvG0smTKvXZgdaD1PqQRLC1wzmc8JAazwY
C7HX5gbaEh0KBgGtvPcrcEN3nKvJxqSWd+zGyR+u7QcrMHY86FOW+R4n/cqx2AV9
Ti38PYRNp/Ovtin/ntvHIQkFZxUalx8sEXjhfrbl2TTlsFisZpz2d8N6jQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFN2ffG7pZcWAKF6vyVhtsbZDzzXdMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvM1o5OGJ1bGx4WUFvWHFfSldHMnh0a1BQTmQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuY4dAwQA
wWvaAwQAykcFMA0GCSqGSIb3DQEBCwUAA4IBAQA1YhCM0AeEY2li+MXI/wvR4V04
ETs4e+OpKtd64Gh8opwVbwXjiqwUeNQib3w0jVPsCbYDyBm7w6/9HfuFIJZGI5mT
sEFOfiWaW7yGK54drpKaQ+DaDx0ewJ78L7x+QB88yxc69OQ5+jvbwOR4KEIaM9OK
5EZ3AYXyH+HcE6+KXlmc4uZ3hkaGg7/YSFv08OiAhjkR9SCyj4Tzudo1hk3/55Sa
U3IYSBlbEtwYzRLniVl0HYA+Mtq6jjTrwXT/kupKuY5zDqAUU9j29TIGFQPEK2WI
20kvxI7jGOKck+MShNljxU6Ez2GYchLYgAtbZjmYuxDG2pSNu4TezOIhisQi
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:37 2026 by rpki-client