Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3tglYFioxe_pv2TOewW36jIi6LQ.roa
File: 3tglYFioxe_pv2TOewW36jIi6LQ.roa (raw, json)
Hash identifier: qeFA7e6Kokdn6D/1jmXMH/3zqC+wSzFtdTNtDGZo47Q=
Subject key identifier: DE:D8:25:60:58:A8:C5:EF:E9:BF:64:CE:7B:05:B7:EA:32:22:E8:B4
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01A13749E13843404E78AE6D9805E988D95D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3tglYFioxe_pv2TOewW36jIi6LQ.roa
Signing time: Tue 13 Oct 2026 22:02:31 +0000
ROA not before: Tue 13 Oct 2026 22:02:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 185.115.206.0/24 maxlen: 32
185.133.195.0/24 maxlen: 32
185.137.181.0/24 maxlen: 32
185.146.195.0/24 maxlen: 32
185.205.68.0/24 maxlen: 32
185.207.212.0/24 maxlen: 32
185.240.238.0/24 maxlen: 32
185.251.234.0/24 maxlen: 32
194.113.164.0/24 maxlen: 32
194.113.169.0/24 maxlen: 32
194.113.170.0/24 maxlen: 32
194.113.172.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:49:e1:38:43:40:4e:78:ae:6d:98:05:e9:88:d9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Oct 13 22:02:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ded8256058a8c5efe9bf64ce7b05b7ea3222e8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:08:fe:50:61:d5:f3:dd:42:25:27:2a:27:
c7:b0:4e:5e:e4:03:d5:95:77:e4:55:03:47:7f:9a:
84:7f:b7:3b:97:04:55:1a:88:d7:fd:65:ec:d6:2e:
80:ab:2f:5a:ac:fc:0c:65:16:f1:96:1f:19:09:f6:
22:05:50:8e:93:f5:79:0a:a0:ea:00:fa:40:64:34:
2a:8a:ff:4e:c0:9d:0c:50:24:63:54:b9:1e:84:59:
67:36:16:8d:3e:85:6c:a6:01:ab:2a:3d:1a:5f:53:
ac:6e:89:ea:5d:1c:b5:f4:70:2e:51:18:5b:4c:a4:
a8:72:a8:82:3a:60:43:fc:42:91:a0:da:aa:2f:a9:
f1:1a:3d:7e:a6:15:bf:c7:bc:53:65:f1:a2:f7:f1:
f2:ff:c2:c5:2a:70:48:9f:41:cc:64:e5:55:c2:99:
e5:57:6f:a7:40:a7:43:78:fd:2b:22:e3:b6:9a:eb:
87:53:9c:49:95:9c:8c:30:3d:62:1f:1d:f7:bc:27:
fa:0d:cc:8f:15:ca:9a:e5:ce:d4:2d:47:61:00:a3:
8e:82:ab:e0:16:a3:98:83:f6:ee:01:ad:6c:5c:4c:
a4:84:5c:a3:6b:73:ca:36:f2:b6:23:ff:1b:b8:2f:
7a:03:71:c2:5c:d4:4a:97:6f:c1:45:13:6f:ad:f0:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D8:25:60:58:A8:C5:EF:E9:BF:64:CE:7B:05:B7:EA:32:22:E8:B4
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3tglYFioxe_pv2TOewW36jIi6LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.206.0/24
185.133.195.0/24
185.137.181.0/24
185.146.195.0/24
185.205.68.0/24
185.207.212.0/24
185.240.238.0/24
185.251.234.0/24
194.113.164.0/24
194.113.169.0-194.113.170.255
194.113.172.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:1e:3b:11:82:dc:46:77:18:fc:21:54:25:72:6e:90:07:61:
7a:8b:1b:f7:9d:77:e8:ce:30:82:e6:58:f6:e8:df:c7:1e:ed:
88:6a:be:93:a4:9b:fa:93:27:d9:4d:8e:41:de:95:30:af:10:
a6:ab:eb:0c:0b:2a:dc:4e:95:99:05:cb:64:39:b8:59:3a:4b:
7a:97:3e:03:c8:c9:08:f0:f2:d5:3f:d2:5f:3d:6f:c5:9b:15:
86:25:d6:b8:5a:51:ce:7e:8c:ec:20:c0:22:7c:cf:43:71:9b:
cf:6d:06:3b:dc:7f:b9:a2:a3:c1:a6:e7:c2:d6:74:7f:1b:12:
0a:f3:d8:5c:0c:e9:91:f9:2f:07:17:fb:30:ca:49:03:9b:96:
98:c9:eb:51:fe:3f:0a:d1:d2:47:e5:ae:f7:77:92:2d:02:38:
e7:fe:4c:09:3f:c0:3e:95:d9:67:b8:9e:ea:41:f6:26:31:97:
e1:21:e3:93:ae:9b:5e:b5:70:83:ef:0a:06:23:39:fd:46:88:
08:4c:02:b3:48:21:9c:98:50:f6:5f:ff:19:0e:48:df:6c:36:
ee:77:aa:37:df:c8:2b:3d:8f:71:1f:ef:0b:df:a1:35:4d:14:
e3:a9:bb:42:fc:ed:8c:6e:ff:ee:47:35:ca:bc:aa:a7:60:5e:
93:64:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 16:36:15 2026 by rpki-client