Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/3geV6AQmnNE3--gs3xHupJZtVFw.roa
File: 3geV6AQmnNE3--gs3xHupJZtVFw.roa (raw, json)
Hash identifier: sNT96XO64aXnjNnHk7Dhs9S+Zq3PRzmgEqOTblaXNls=
Subject key identifier: DE:07:95:E8:04:26:9C:D1:37:FB:E8:2C:DF:11:EE:A4:96:6D:54:5C
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019ECB24E7E499BBCF60F8C3D5EE7740EEF7
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/3geV6AQmnNE3--gs3xHupJZtVFw.roa
Signing time: Mon 15 Jun 2026 11:57:33 +0000
ROA not before: Mon 15 Jun 2026 11:57:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43289
IP address blocks: 45.153.124.0/24 maxlen: 24
89.46.232.0/24 maxlen: 24
92.243.67.0/24 maxlen: 24
188.190.12.0/24 maxlen: 24
2a03:f80:373::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:24:e7:e4:99:bb:cf:60:f8:c3:d5:ee:77:40:ee:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jun 15 11:57:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de0795e804269cd137fbe82cdf11eea4966d545c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b2:7c:58:3b:3f:78:ec:2d:8a:b1:30:19:29:
b6:bc:80:b6:f9:be:37:3b:07:e9:d5:d7:fd:cf:1e:
b3:be:d2:4e:7c:35:0f:8e:f2:2f:ea:6a:9b:8c:3f:
1e:13:ea:84:35:1a:31:a2:e0:f1:8c:e7:9c:6a:fe:
c1:84:1e:57:92:81:93:b8:14:d4:10:e3:16:5c:6c:
5d:fa:a7:ec:57:2f:1f:6a:95:db:e3:e7:e8:ad:2f:
17:e0:13:2c:e3:f1:2d:ff:6c:e7:cb:49:70:97:6c:
d3:34:72:6b:15:6a:4e:a8:66:a9:71:fe:d4:24:20:
e0:33:26:46:3b:da:1c:88:78:2c:a0:a8:99:b2:fd:
03:75:57:f9:55:5f:5a:e1:9b:55:89:4e:b3:71:b6:
2d:59:f5:d9:ce:fc:f0:10:97:1e:89:58:b6:6c:6d:
90:ea:6a:85:47:70:51:cd:97:11:92:6f:d5:f4:d9:
f2:db:11:10:ad:67:37:d3:91:04:5b:e7:8a:5b:04:
6f:e3:a4:31:67:ea:33:37:cf:2f:94:cf:40:cf:82:
d9:ed:a9:66:22:7f:86:3e:57:f3:6a:76:cd:ac:a0:
a6:11:ee:83:3d:fa:2a:46:58:7d:dd:eb:09:e0:f0:
18:2c:59:40:71:32:28:56:13:2f:c1:c1:b8:cb:82:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:07:95:E8:04:26:9C:D1:37:FB:E8:2C:DF:11:EE:A4:96:6D:54:5C
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/3geV6AQmnNE3--gs3xHupJZtVFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.124.0/24
89.46.232.0/24
92.243.67.0/24
188.190.12.0/24
IPv6:
2a03:f80:373::/48
Signature Algorithm: sha256WithRSAEncryption
9a:06:76:c1:08:11:b4:84:22:96:e4:50:d8:4a:a5:53:03:56:
22:cf:23:de:c2:16:08:9f:23:a1:0e:8b:be:da:f8:85:0e:fd:
7c:61:06:26:36:0c:55:59:99:e7:b6:b7:20:31:af:79:e9:d4:
48:dc:07:6f:b9:4c:50:38:5e:a7:44:fc:78:e1:43:2c:f1:4c:
4a:6c:20:f9:ee:b0:5f:8f:b3:b3:52:80:44:af:04:e1:e0:c0:
d7:cf:8c:9c:78:5e:e7:ed:a7:77:d1:72:d5:71:ee:1c:6f:e0:
e7:8b:ff:1e:33:af:5b:71:85:c4:c2:c2:df:33:10:25:99:b3:
14:e9:5a:19:5d:08:de:71:19:22:52:63:5e:28:3f:c5:7f:d6:
1f:bf:4d:aa:2b:f4:a9:fb:d5:bf:9e:71:a1:fb:1c:54:96:39:
74:14:e7:6d:d9:ef:f6:32:d0:01:49:f6:4c:1e:2a:cf:52:88:
e0:08:f8:ef:8a:f9:42:d2:25:ea:e2:08:ee:d9:93:8c:30:81:
5a:82:aa:d0:cc:84:c0:f9:7c:f6:74:46:b8:33:e0:56:2d:21:
5b:eb:57:d7:ba:06:ba:1e:43:41:95:b7:24:6e:27:89:90:e3:
e6:b8:ed:ce:7b:d0:42:39:3d:f2:96:f8:ff:b6:70:86:2c:9e:
5f:89:57:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:18:27 2026 by rpki-client