Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/3wWxSXnn1AkR2FQz-cSLXCO25fE.roa
File: 3wWxSXnn1AkR2FQz-cSLXCO25fE.roa (raw, json)
Hash identifier: 9Mau/Rvq7d0nRIpqNv+3vxuSV8Oxqjuu2vQqrrKBRSo=
Subject key identifier: DF:05:B1:49:79:E7:D4:09:11:D8:54:33:F9:C4:8B:5C:23:B6:E5:F1
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 019F6B34710B9B252637F12E5ECA4A9BCEFD
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/3wWxSXnn1AkR2FQz-cSLXCO25fE.roa
Signing time: Thu 16 Jul 2026 13:53:46 +0000
ROA not before: Thu 16 Jul 2026 13:53:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201017
IP address blocks: 145.219.6.0/24 maxlen: 24
145.219.8.0/24 maxlen: 24
145.219.9.0/24 maxlen: 24
145.219.10.0/24 maxlen: 24
145.219.11.0/24 maxlen: 24
145.219.12.0/24 maxlen: 24
145.219.13.0/24 maxlen: 24
145.219.14.0/24 maxlen: 24
145.219.15.0/24 maxlen: 24
145.219.16.0/24 maxlen: 24
145.219.17.0/24 maxlen: 24
2a04:b0c0:30::/47 maxlen: 47
2a04:b0c0:30::/48 maxlen: 48
2a04:b0c0:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:34:71:0b:9b:25:26:37:f1:2e:5e:ca:4a:9b:ce:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Jul 16 13:53:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df05b14979e7d40911d85433f9c48b5c23b6e5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:0c:99:1d:5e:fa:0d:c0:19:a2:f0:5d:79:
0c:8a:e6:7a:d2:ed:0a:f1:e8:be:c4:d7:10:85:ce:
2b:35:1e:a3:5d:d3:6a:3f:d0:c3:28:ad:f7:16:dc:
9b:1d:55:21:10:58:d6:ce:3a:df:61:ae:02:91:8f:
3f:69:bd:45:c7:dd:fd:0b:66:0e:05:80:85:54:24:
c9:ca:77:d4:92:a2:74:76:9e:10:c0:84:5c:df:56:
53:f9:32:6f:08:05:ba:23:68:7e:e5:06:bb:21:38:
c8:4d:64:21:d2:f8:6e:75:d0:56:90:25:cc:22:d9:
81:bd:cf:8b:a4:c9:a2:21:71:06:43:ca:90:47:8e:
3c:fa:3e:bf:db:82:3c:98:07:a5:e0:f4:99:69:6d:
41:b7:65:e2:3c:f0:aa:b8:1f:0c:b6:42:bd:97:63:
bf:d9:5d:b6:5e:6f:fd:12:57:ba:e4:ea:0b:9f:75:
70:a7:73:74:5a:30:a4:58:f1:bc:45:32:b3:db:89:
7d:43:d9:e3:ab:0d:94:c1:5d:77:11:3e:be:53:1f:
a8:24:1c:1f:c9:99:ca:11:ec:89:38:52:14:ef:49:
24:77:b3:26:3d:9f:a2:71:a4:61:ae:c1:d2:5e:e4:
77:f3:0d:bc:4a:22:fa:96:97:da:9e:bd:6d:1b:2e:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:05:B1:49:79:E7:D4:09:11:D8:54:33:F9:C4:8B:5C:23:B6:E5:F1
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/3wWxSXnn1AkR2FQz-cSLXCO25fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.219.6.0/24
145.219.8.0-145.219.17.255
IPv6:
2a04:b0c0:30::/47
Signature Algorithm: sha256WithRSAEncryption
28:26:1f:6d:af:41:f4:82:f3:bf:9e:67:64:be:12:52:20:a0:
dd:77:00:e0:59:f2:32:08:aa:13:a7:2f:7d:3c:db:21:6e:da:
ee:ec:8b:b8:4b:e4:60:8a:79:b3:e3:63:65:f4:d8:86:ab:65:
dd:34:35:16:df:e4:e7:e0:74:b9:37:a5:33:3d:2d:7a:fa:32:
9c:af:6f:44:b0:e0:2b:37:94:af:0f:4c:e1:71:6f:51:2e:6b:
0f:74:99:a8:17:10:a7:8b:73:58:df:ae:98:27:93:7b:a8:e6:
cd:c4:94:87:13:e4:29:34:3a:72:8f:9b:bd:0b:bb:c1:65:69:
ba:a1:b5:46:7c:81:75:99:37:7d:41:cd:a7:06:b1:69:db:d7:
3b:5e:b9:51:7a:3b:20:89:58:1b:cc:5d:4f:b8:7d:79:59:b9:
79:32:0d:04:a2:3c:1e:4a:a7:11:00:84:1d:04:33:11:75:e8:
ea:5c:cd:c7:a7:38:2b:53:ed:d6:ee:03:6b:75:c4:ec:eb:b6:
c2:a0:58:99:67:26:0a:08:b8:c6:b9:d2:e7:db:d5:c1:9b:d0:
0e:9f:fe:2a:bf:cf:a3:ad:af:3b:af:2a:28:6e:96:cf:c7:87:
39:35:eb:33:d9:81:f4:80:2a:70:9e:a9:8c:22:05:16:d5:0d:
63:a1:1f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:54:11 2026 by rpki-client