Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/P3-2IcujmyKhcj_-7d2qfRYIwgg.roa
File: P3-2IcujmyKhcj_-7d2qfRYIwgg.roa (raw, json)
Hash identifier: 5acQCCEoSrIBHz9zoGZGuHuvV2KR9/Lktujitfer9+g=
Subject key identifier: 3F:7F:B6:21:CB:A3:9B:22:A1:72:3F:FE:ED:DD:AA:7D:16:08:C2:08
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019EEFA03B122C94E6AD4CA876ED4A1745AA
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/P3-2IcujmyKhcj_-7d2qfRYIwgg.roa
Signing time: Mon 22 Jun 2026 13:58:35 +0000
ROA not before: Mon 22 Jun 2026 13:58:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200563
IP address blocks: 186.246.54.0/23 maxlen: 23
212.60.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:a0:3b:12:2c:94:e6:ad:4c:a8:76:ed:4a:17:45:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 22 13:58:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f7fb621cba39b22a1723ffeedddaa7d1608c208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ed:7f:13:9f:cf:4a:3c:ef:97:af:04:65:5c:
94:79:e6:5f:44:85:ee:7e:2f:3d:2c:6b:2b:67:00:
c8:9f:44:1d:24:22:af:95:20:83:97:fe:ca:47:c4:
3e:52:88:03:b1:f4:6e:7b:89:35:2a:e0:fb:6d:50:
91:dc:67:d5:e1:c5:28:75:84:6f:9f:cc:50:27:78:
97:f9:6f:4f:0a:10:d3:b6:ea:1a:af:6c:8f:1c:9b:
19:2f:46:3f:2d:ad:ea:f6:8e:57:89:21:10:15:50:
ef:aa:8a:4c:7b:54:db:83:1e:5d:72:43:7c:96:c9:
27:b4:cd:7a:79:4a:13:bd:50:76:a2:bf:20:76:7d:
77:87:d9:69:5a:ec:a7:74:56:82:97:90:d9:06:63:
69:9d:c4:31:a3:8a:a0:f1:75:11:84:d8:88:92:e3:
4e:0b:81:c9:97:a2:cb:84:23:c4:7c:2a:44:a5:51:
5b:bc:18:d0:64:d0:d6:80:cf:ec:6b:91:cb:55:f7:
bd:75:6e:7a:8c:64:8f:0c:03:f3:83:09:07:8f:f9:
6a:d4:d1:2d:b0:43:f4:46:c3:f6:41:c0:67:44:d8:
e6:1b:83:a0:7d:cd:2a:4d:ee:3f:b7:da:17:ab:ef:
26:03:9d:21:94:93:6d:8e:3a:fd:fb:17:2f:81:ae:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7F:B6:21:CB:A3:9B:22:A1:72:3F:FE:ED:DD:AA:7D:16:08:C2:08
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/P3-2IcujmyKhcj_-7d2qfRYIwgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.246.54.0/23
212.60.4.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c1:52:00:db:09:d7:af:95:5f:41:76:e2:91:30:12:3b:76:
06:de:04:42:4f:56:e1:4f:d8:4a:b2:9f:ba:91:67:1e:4b:0a:
b6:b8:38:80:a7:f4:4b:ac:9a:e5:89:e7:25:36:1c:42:dd:55:
a3:c5:41:83:79:d3:eb:bb:14:00:f9:c1:41:a7:85:67:bb:58:
29:cb:87:66:3a:52:13:ac:0d:06:52:02:0c:7a:c7:1c:a1:96:
c4:e7:35:81:50:68:f1:22:14:64:ce:f2:c8:9d:74:e1:27:73:
89:2d:c6:d7:92:63:46:c2:01:38:9f:eb:e1:28:57:06:70:89:
23:4d:53:80:4c:1a:0d:c2:9f:c6:4a:ba:33:06:6a:d2:37:0d:
09:7f:67:80:92:d1:33:22:a5:1b:4b:2f:d5:74:3a:01:39:61:
5a:4a:31:e7:82:4a:30:e3:55:59:01:aa:73:55:52:45:79:fe:
6e:15:3e:2c:35:69:49:03:ea:fa:3e:72:fc:70:9f:a1:b1:e6:
b2:22:6e:7c:89:ff:8a:69:b6:24:05:64:0c:35:37:21:88:37:
cf:46:9b:b7:2c:fc:89:98:d0:e0:0f:3c:26:19:23:8a:5b:b7:
d1:26:16:d1:f6:1c:a6:90:ea:05:2c:76:f4:d8:75:3e:b4:55:
7c:66:dd:25
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ7voDsSLJTmrUyodu1KF0WqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwNjIyMTM1ODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjdmYjYyMWNiYTM5YjIyYTE3MjNmZmVlZGRkYWE3ZDE2MDhjMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5O1/E5/PSjzvl68EZVyUeeZfRIXu
fi89LGsrZwDIn0QdJCKvlSCDl/7KR8Q+UogDsfRue4k1KuD7bVCR3GfV4cUodYRv
n8xQJ3iX+W9PChDTtuoar2yPHJsZL0Y/La3q9o5XiSEQFVDvqopMe1Tbgx5dckN8
lskntM16eUoTvVB2or8gdn13h9lpWuyndFaCl5DZBmNpncQxo4qg8XURhNiIkuNO
C4HJl6LLhCPEfCpEpVFbvBjQZNDWgM/sa5HLVfe9dW56jGSPDAPzgwkHj/lq1NEt
sEP0RsP2QcBnRNjmG4Ogfc0qTe4/t9oXq+8mA50hlJNtjjr9+xcvga7N6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD9/tiHLo5sioXI//u3dqn0WCMIIMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvUDMtMkljdWpteUtoY2pfLTdkMnFmUllJd2dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuvY2AwQA
1DwEMA0GCSqGSIb3DQEBCwUAA4IBAQBlwVIA2wnXr5VfQXbikTASO3YG3gRCT1bh
T9hKsp+6kWceSwq2uDiAp/RLrJrlieclNhxC3VWjxUGDedPruxQA+cFBp4Vnu1gp
y4dmOlITrA0GUgIMesccoZbE5zWBUGjxIhRkzvLInXThJ3OJLcbXkmNGwgE4n+vh
KFcGcIkjTVOATBoNwp/GSrozBmrSNw0Jf2eAktEzIqUbSy/VdDoBOWFaSjHngkow
41VZAapzVVJFef5uFT4sNWlJA+r6PnL8cJ+hseayIm58if+KabYkBWQMNTchiDfP
Rpu3LPyJmNDgDzwmGSOKW7fRJhbR9hymkOoFLHb02HU+tFV8Zt0l
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:24 2026 by rpki-client