Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3QBhKu5iZ_KD0Bsjz3-8Xnk3M-8.roa
File: 3QBhKu5iZ_KD0Bsjz3-8Xnk3M-8.roa (raw, json)
Hash identifier: d7gpbcVOIh6uoWX4ysly4HWGhouSMMJQIDdnv0eiV+c=
Subject key identifier: DD:00:61:2A:EE:62:67:F2:83:D0:1B:23:CF:7F:BC:5E:79:37:33:EF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019A4E30FAB75CDF5153E4DB1A8663301DEA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3QBhKu5iZ_KD0Bsjz3-8Xnk3M-8.roa
Signing time: Tue 04 Nov 2025 09:27:04 +0000
ROA not before: Tue 04 Nov 2025 09:27:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 77.93.137.0/24 maxlen: 24
77.93.149.0/24 maxlen: 24
82.152.174.0/23 maxlen: 23
82.153.208.0/22 maxlen: 22
82.163.19.0/24 maxlen: 24
89.213.58.0/24 maxlen: 24
89.213.60.0/23 maxlen: 24
89.213.108.0/23 maxlen: 24
89.213.110.0/24 maxlen: 24
89.213.122.0/24 maxlen: 24
89.213.126.0/24 maxlen: 24
89.213.194.0/23 maxlen: 24
89.213.198.0/23 maxlen: 24
89.213.200.0/23 maxlen: 24
89.213.202.0/23 maxlen: 24
89.213.204.0/23 maxlen: 24
89.213.228.0/24 maxlen: 24
89.213.240.0/23 maxlen: 24
89.213.250.0/24 maxlen: 24
213.210.16.0/24 maxlen: 24
213.210.18.0/24 maxlen: 24
213.210.33.0/24 maxlen: 24
213.210.51.0/24 maxlen: 24
213.218.220.0/24 maxlen: 24
217.144.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:30:fa:b7:5c:df:51:53:e4:db:1a:86:63:30:1d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 4 09:27:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd00612aee6267f283d01b23cf7fbc5e793733ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:38:83:21:d9:9b:2c:cb:b3:75:0e:d6:d4:
e5:bf:3e:fc:0f:06:70:3d:c6:59:c3:d8:a3:cf:ce:
80:f4:3d:fc:d1:a3:f9:04:23:89:ba:08:08:ba:52:
8e:c8:d0:89:7e:76:d3:6a:dd:7a:5a:b4:b0:c8:77:
d0:3a:e6:80:0a:ee:45:ee:ed:10:11:3b:1b:2e:e9:
3b:93:86:1c:6b:fd:1b:8a:b7:de:25:be:3f:99:2e:
37:ff:27:b3:a0:1e:a8:15:03:a1:1e:83:03:7d:af:
b2:e7:f2:26:be:2d:32:41:91:80:5f:2f:62:c4:85:
b6:e7:cc:3d:d4:22:29:3c:cb:08:5d:43:7a:71:72:
cb:f4:69:0d:08:07:4d:9a:8a:19:36:f4:24:a4:28:
d8:99:ed:8f:1a:37:ba:06:e1:05:3b:fd:d2:32:67:
1a:76:fe:b7:d4:40:7d:02:76:71:06:c4:77:d4:ec:
47:ca:e1:89:7c:bb:84:17:b4:5b:eb:92:37:42:3c:
4d:bf:fe:27:8b:16:a0:36:4b:0e:71:c6:88:bd:0f:
d0:e0:7b:e1:e1:bd:57:e9:3d:07:4d:e0:d6:7a:9b:
35:f3:d5:b2:cf:77:82:8e:32:df:75:5c:f7:69:72:
13:a8:88:76:1f:9c:10:4d:7a:52:af:17:33:67:88:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:00:61:2A:EE:62:67:F2:83:D0:1B:23:CF:7F:BC:5E:79:37:33:EF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3QBhKu5iZ_KD0Bsjz3-8Xnk3M-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.137.0/24
77.93.149.0/24
82.152.174.0/23
82.153.208.0/22
82.163.19.0/24
89.213.58.0/24
89.213.60.0/23
89.213.108.0-89.213.110.255
89.213.122.0/24
89.213.126.0/24
89.213.194.0/23
89.213.198.0-89.213.205.255
89.213.228.0/24
89.213.240.0/23
89.213.250.0/24
213.210.16.0/24
213.210.18.0/24
213.210.33.0/24
213.210.51.0/24
213.218.220.0/24
217.144.151.0/24
Signature Algorithm: sha256WithRSAEncryption
02:99:1d:e3:49:1c:64:dd:10:a8:63:1a:7b:5e:8c:32:17:91:
64:e8:bd:92:26:94:ec:ee:d3:85:43:93:ce:8a:13:ba:26:2d:
5d:cc:4d:af:81:61:cf:f2:b4:6e:11:3a:f8:11:4f:5a:38:3f:
1d:ab:30:6a:af:96:bd:c8:b2:b2:e3:ff:8f:03:0d:e4:85:53:
22:42:59:06:a0:69:ff:0f:51:5c:44:2d:45:8c:62:0b:00:07:
e5:db:c7:85:4e:96:45:ce:63:13:b2:79:3c:56:d0:6a:9c:25:
d0:53:b8:7d:f1:a3:68:52:bc:79:a3:bc:99:85:56:29:1a:4f:
38:cd:61:33:5e:22:db:4a:5f:8b:e9:da:cb:99:1f:d2:42:4d:
db:2a:bc:f9:8f:3c:09:90:bd:2e:a8:2e:ab:b5:28:43:c5:d8:
91:ae:42:c0:e7:96:8a:25:a7:d8:7b:83:56:27:f1:b4:75:70:
c2:1b:89:60:66:60:36:45:e5:92:a0:32:c7:fd:c2:db:26:df:
65:98:bd:85:d9:2f:db:89:57:a5:82:ab:97:f3:99:6a:74:aa:
b5:60:27:8b:bd:a8:72:63:3f:7c:eb:be:77:12:03:91:5f:7c:
b3:7d:00:50:9f:c7:54:fd:91:1b:1c:2a:fa:b1:f2:fb:4d:0c:
9c:02:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:48:07 2025 by rpki-client