Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3HKo5MaN75st5mx4EYfCCuAuNwY.roa
File: 3HKo5MaN75st5mx4EYfCCuAuNwY.roa (raw, json)
Hash identifier: mfT/D5v4aqz402mB4QhmeOD/1QTByM9PhvmwVcHw200=
Subject key identifier: DC:72:A8:E4:C6:8D:EF:9B:2D:E6:6C:78:11:87:C2:0A:E0:2E:37:06
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0133D2264624D73DF6543C4FB85AC3157
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3HKo5MaN75st5mx4EYfCCuAuNwY.roa
Signing time: Tue 18 Aug 2026 04:59:28 +0000
ROA not before: Tue 18 Aug 2026 04:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197411
IP address blocks: 5.230.31.0/24 maxlen: 24
77.90.21.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
2a02:2fc0:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:3d:22:64:62:4d:73:df:65:43:c4:fb:85:ac:31:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 18 04:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc72a8e4c68def9b2de66c781187c20ae02e3706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:dd:31:37:2b:cd:ae:96:f6:a4:74:cf:ba:
e1:90:a3:02:fb:4c:f0:58:48:ba:30:15:1d:de:48:
9d:e8:cf:4c:6f:ed:1c:7e:ec:99:81:d0:64:5c:6e:
9f:bf:b7:56:c7:29:c6:cf:95:ab:ce:6b:95:25:42:
f7:c3:99:dc:f9:1d:5f:55:69:4b:d2:ad:e6:88:b8:
5e:1d:ed:48:53:fe:21:86:1b:59:14:89:28:5b:f9:
78:10:a3:07:1a:36:c0:11:b4:cd:3e:65:5a:51:a0:
ed:b7:54:da:0a:21:d6:a5:df:99:7e:c6:27:6b:57:
d2:4d:28:3e:9b:60:c3:cb:42:30:13:d0:d1:a1:ea:
5b:dd:b6:d7:ee:4a:9c:d4:f7:7b:17:9a:6c:48:3c:
3b:4f:2e:99:87:7e:3a:ba:8d:6f:d4:8c:e7:6c:b7:
4f:bb:d2:b5:37:00:34:fd:d8:e6:cc:6a:45:1a:10:
00:39:6c:09:89:ed:ae:66:ca:a9:a4:85:53:3a:fe:
45:c1:ca:e2:7b:3f:dc:17:ed:0b:9d:9c:f7:91:a4:
de:1a:fd:62:c9:9c:6a:9f:de:a5:b7:57:93:33:b2:
3f:53:01:71:36:84:1b:1f:c6:38:64:ea:ef:2d:e8:
39:86:21:e7:fb:bf:4d:7f:46:d3:c1:a7:ab:3c:35:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:72:A8:E4:C6:8D:EF:9B:2D:E6:6C:78:11:87:C2:0A:E0:2E:37:06
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3HKo5MaN75st5mx4EYfCCuAuNwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.31.0/24
77.90.21.0/24
178.18.144.0/24
IPv6:
2a02:2fc0:22::/48
Signature Algorithm: sha256WithRSAEncryption
72:fc:9a:19:e0:c2:b7:dd:eb:32:f1:b7:57:4e:c4:08:85:c4:
dd:3a:e0:ef:8e:76:e3:d7:bc:a9:75:e7:07:50:ae:78:1b:af:
04:8a:55:dc:0b:9d:bc:61:27:4b:b5:8d:f6:a3:0f:3c:7b:9f:
48:a9:4f:92:64:99:10:ce:e6:ce:d4:69:b1:ce:07:4c:f9:05:
7c:7a:29:1e:e2:70:24:7d:72:d3:8b:07:80:17:0c:a4:60:5a:
86:94:8d:c1:8c:46:7f:b4:49:61:74:82:82:ca:35:75:38:6f:
e4:22:a5:c1:59:b7:f0:12:8f:d0:bc:8a:04:cb:74:a9:74:15:
3f:59:63:b8:88:db:66:91:34:a3:2f:e6:6c:f7:8b:c2:6e:88:
d6:d7:b5:01:91:a4:ab:04:a1:94:c4:55:a9:a4:3d:9b:bd:f9:
ac:12:e1:05:49:12:62:d7:2b:94:12:73:13:d6:4a:a4:3c:b5:
ac:e4:bd:90:ec:ab:d7:40:e7:a1:b6:2c:35:ba:12:0c:6f:b6:
fe:a9:18:f2:42:f4:75:f6:ae:db:10:ca:a3:01:be:37:22:3b:
0d:69:18:df:c6:0c:ff:92:09:9c:23:7e:76:10:b6:62:f6:e8:
00:0f:79:ac:31:12:26:f1:0c:80:0e:bb:1e:d2:88:3b:17:f5:
b5:05:1d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:51 2026 by rpki-client