Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3Vx-uODeBf4i75vMDp2NerPw8GM.roa
File: 3Vx-uODeBf4i75vMDp2NerPw8GM.roa (raw, json)
Hash identifier: GRpANeKAkqPOjVGdAupv6Hw2nBaitZl4qoHN8MUT7wI=
Subject key identifier: DD:5C:7E:B8:E0:DE:05:FE:22:EF:9B:CC:0E:9D:8D:7A:B3:F0:F0:63
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E643643A67CD27A3E67021F1DEF020806
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3Vx-uODeBf4i75vMDp2NerPw8GM.roa
Signing time: Tue 26 May 2026 12:15:38 +0000
ROA not before: Tue 26 May 2026 12:15:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399486
IP address blocks: 45.88.91.0/24 maxlen: 24
79.110.49.0/24 maxlen: 24
80.76.49.0/24 maxlen: 24
194.59.30.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 May 2026 12:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:36:43:a6:7c:d2:7a:3e:67:02:1f:1d:ef:02:08:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 26 12:15:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd5c7eb8e0de05fe22ef9bcc0e9d8d7ab3f0f063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:af:6a:24:cf:4a:62:57:79:e3:3d:ca:f6:
7b:1c:61:c4:b2:11:c4:5c:9a:fe:c1:67:c7:4e:71:
7a:00:c1:64:6c:e1:8e:44:5e:6b:ba:72:ae:d3:b1:
ad:7a:ac:78:8d:f7:82:5a:f9:16:f4:7e:b2:e0:45:
86:13:eb:2d:16:2e:9c:e4:f5:bb:4c:55:03:9a:48:
f2:bd:6b:64:4f:43:44:a7:a0:90:b7:17:35:ef:34:
93:54:5f:b3:bd:44:5a:24:a4:da:53:b9:4f:14:8c:
95:a8:5a:33:51:31:a1:67:f5:b1:d0:97:67:f5:8d:
54:ce:34:91:01:fb:aa:d6:27:d5:91:f1:12:0f:1f:
c6:6b:6d:9d:cd:67:ab:a6:31:04:a9:ba:31:68:3b:
10:68:58:d0:2f:92:5c:a7:07:da:5c:c2:55:2e:8c:
52:1b:74:78:71:c6:08:1a:9a:a5:a9:7a:17:ff:51:
60:e4:7c:b9:ce:7f:9d:bc:03:18:0d:0a:eb:39:34:
5c:cd:55:26:79:c5:12:b4:2a:0b:9b:26:34:eb:ee:
79:09:5f:8f:70:8d:6c:b2:ee:37:bc:ba:df:62:29:
67:db:74:90:f4:be:65:aa:79:e0:00:9b:32:05:87:
57:b5:a6:b3:47:43:30:9a:65:5e:b5:20:56:20:24:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5C:7E:B8:E0:DE:05:FE:22:EF:9B:CC:0E:9D:8D:7A:B3:F0:F0:63
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3Vx-uODeBf4i75vMDp2NerPw8GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.91.0/24
79.110.49.0/24
80.76.49.0/24
194.59.30.0/23
Signature Algorithm: sha256WithRSAEncryption
36:e0:cf:60:a8:93:31:f2:77:fa:c1:24:e4:8f:60:e9:13:da:
9c:38:52:8a:55:0e:8c:c2:70:3e:54:3e:e7:3d:d4:fa:69:f5:
9e:99:db:32:15:ef:bd:0b:a9:39:32:d0:e6:76:60:44:4d:c6:
81:e2:3e:50:9d:ec:2f:07:af:e2:c1:d4:ce:b7:5f:5f:1b:94:
ec:38:c5:65:d8:de:dd:0a:db:36:48:47:0b:31:1e:99:b1:2d:
46:92:f3:e2:5b:f2:80:0f:ec:11:bb:b3:a5:fa:4f:f5:0b:74:
f3:b4:72:aa:21:1e:98:b6:84:de:c4:aa:72:7d:a8:98:b1:e4:
be:3f:4e:a3:57:8c:93:a1:2e:00:cc:22:82:d8:90:9e:64:94:
6d:b0:2c:c5:e2:a8:84:b7:0b:25:3b:ed:1c:38:a8:bb:4b:c6:
df:03:a2:c6:24:e9:bf:78:04:4b:34:d6:b3:6c:f9:8f:42:2c:
2a:d0:89:7b:c0:ae:ef:86:24:1a:0c:b0:3b:86:1d:fc:85:f8:
21:5a:91:c3:b9:1a:ea:98:5d:ec:42:29:69:60:1b:4a:ed:3d:
ac:ee:c3:92:ee:80:94:02:b2:54:26:f9:e8:15:a5:c1:69:5f:
9f:79:80:2a:c2:7e:6f:ae:2d:16:d6:18:c5:83:f1:17:d9:c7:
ef:44:50:cf
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ5kNkOmfNJ6PmcCHx3vAggGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNTI2MTIxNTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDVjN2ViOGUwZGUwNWZlMjJlZjliY2MwZTlkOGQ3YWIzZjBmMDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodyvaiTPSmJXeeM9yvZ7HGHEshHE
XJr+wWfHTnF6AMFkbOGORF5runKu07Gteqx4jfeCWvkW9H6y4EWGE+stFi6c5PW7
TFUDmkjyvWtkT0NEp6CQtxc17zSTVF+zvURaJKTaU7lPFIyVqFozUTGhZ/Wx0Jdn
9Y1UzjSRAfuq1ifVkfESDx/Ga22dzWerpjEEqboxaDsQaFjQL5JcpwfaXMJVLoxS
G3R4ccYIGpqlqXoX/1Fg5Hy5zn+dvAMYDQrrOTRczVUmecUStCoLmyY06+55CV+P
cI1ssu43vLrfYiln23SQ9L5lqnngAJsyBYdXtaazR0MwmmVetSBWICQ2mwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFN1cfrjg3gX+Iu+bzA6djXqz8PBjMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvM1Z4LXVPRGVCZjRpNzV2TURwMk5lclB3OEdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVhbAwQA
T24xAwQAUEwxAwQBwjseMA0GCSqGSIb3DQEBCwUAA4IBAQA24M9gqJMx8nf6wSTk
j2DpE9qcOFKKVQ6MwnA+VD7nPdT6afWemdsyFe+9C6k5MtDmdmBETcaB4j5Qnewv
B6/iwdTOt19fG5TsOMVl2N7dCts2SEcLMR6ZsS1GkvPiW/KAD+wRu7Ol+k/1C3Tz
tHKqIR6YtoTexKpyfaiYseS+P06jV4yToS4AzCKC2JCeZJRtsCzF4qiEtwslO+0c
OKi7S8bfA6LGJOm/eARLNNazbPmPQiwq0Il7wK7vhiQaDLA7hh38hfghWpHDuRrq
mF3sQilpYBtK7T2s7sOS7oCUArJUJvnoFaXBaV+feYAqwn5vri0W1hjFg/EX2cfv
RFDP
-----END CERTIFICATE-----
Generated at Tue May 26 21:43:13 2026 by rpki-client