Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/3WxphZ6dU-rZozii3h2B1aV3D28.roa
File: 3WxphZ6dU-rZozii3h2B1aV3D28.roa (raw, json)
Hash identifier: MkfMRqsBVguvCNPETgOBjmfdDQ++SwxpAXCCjxD5syo=
Subject key identifier: DD:6C:69:85:9E:9D:53:EA:D9:A3:38:A2:DE:1D:81:D5:A5:77:0F:6F
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01A13ED6BB85ED34CBE6E183ECAEACB3EED7
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/3WxphZ6dU-rZozii3h2B1aV3D28.roa
Signing time: Thu 15 Oct 2026 09:13:42 +0000
ROA not before: Thu 15 Oct 2026 09:13:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 80.46.128.0/24 maxlen: 24
80.46.136.0/24 maxlen: 24
80.46.137.0/24 maxlen: 24
80.46.138.0/24 maxlen: 24
80.46.141.0/24 maxlen: 24
193.39.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:d6:bb:85:ed:34:cb:e6:e1:83:ec:ae:ac:b3:ee:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Oct 15 09:13:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd6c69859e9d53ead9a338a2de1d81d5a5770f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6c:75:ad:92:6b:8c:e4:d5:16:87:81:32:2b:
d4:04:39:bd:57:9c:d1:2b:69:d7:f2:ad:1a:6d:0f:
c0:4d:81:05:6e:5b:68:41:0a:d5:5a:3e:69:98:86:
f6:0a:98:d7:8e:4c:ab:5a:1b:d5:82:06:7e:92:83:
da:22:27:e8:7f:ac:c8:c6:f8:5f:7f:4f:f1:fd:15:
cd:ef:ee:44:3b:80:f8:87:ab:88:83:44:d4:1b:3d:
10:71:45:a2:0c:a0:55:ea:30:1a:99:8f:e3:f3:d3:
27:5f:1a:61:52:ee:6c:1f:0d:f3:be:e4:9b:ec:27:
b0:ae:ec:9c:11:0e:86:c1:e3:12:a2:0b:ab:e8:b7:
4f:66:55:47:15:c6:9d:1c:0a:56:25:93:0a:16:b0:
6c:0b:19:cc:49:36:df:ee:cf:d1:99:ed:c3:5c:ca:
27:f2:49:b1:b3:8d:e8:90:5f:fc:6e:a4:61:38:97:
45:fd:14:a4:05:2e:01:5f:42:60:bb:70:58:41:94:
e6:77:2b:98:b9:d8:be:a4:39:16:39:7a:83:54:82:
97:a4:e9:bc:c7:11:7f:50:0a:d5:a0:56:2e:f3:55:
c6:a6:74:aa:93:e7:fb:01:c1:2f:c8:cf:64:73:36:
38:49:a6:dc:9d:b1:df:de:80:dd:a1:ad:ca:87:e2:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6C:69:85:9E:9D:53:EA:D9:A3:38:A2:DE:1D:81:D5:A5:77:0F:6F
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/3WxphZ6dU-rZozii3h2B1aV3D28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.46.128.0/24
80.46.136.0-80.46.138.255
80.46.141.0/24
193.39.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b6:04:f1:41:8a:8d:1f:a5:58:fa:9c:6d:db:55:8f:84:c0:
9f:51:3d:38:4d:de:3f:b7:32:09:be:11:92:e8:a0:d5:d8:ae:
d2:a5:95:27:79:81:2e:0e:e8:be:4a:54:1a:43:b4:ad:eb:45:
49:02:1f:e1:c7:13:41:14:de:ac:81:d5:84:b4:29:25:9d:89:
9e:62:67:ac:a9:43:44:0a:47:ec:f3:a0:b9:14:2f:3c:7d:30:
84:fe:bb:c7:95:a1:88:f1:1a:2e:e4:f6:36:eb:fa:c3:b4:25:
ac:6a:d6:0b:3c:f5:bd:11:99:86:30:ba:d8:c5:0a:1b:a3:68:
4f:0b:89:fd:dc:ab:76:86:45:13:b5:d0:bd:65:95:4b:f4:27:
6a:da:90:81:25:06:b3:10:4f:87:aa:05:f8:a3:13:b0:9a:99:
1f:b9:de:5c:0f:5b:03:59:96:c5:40:f7:05:08:f7:73:15:42:
a5:d3:03:fa:a8:af:3c:29:9b:a2:0e:55:12:f2:47:19:8c:33:
54:7d:ff:e3:8a:76:e4:00:34:fd:4d:63:bc:7e:7c:db:93:31:
41:96:40:55:b4:6c:a9:10:7a:a8:21:63:8d:ab:68:01:00:85:
01:3e:40:3e:39:5b:a3:07:b3:83:af:03:57:00:60:a4:19:28:
6c:70:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:34 2026 by rpki-client