Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3gR0drOdxXoi5u8DGhsYqQxEzpE.roa
File: 3gR0drOdxXoi5u8DGhsYqQxEzpE.roa (raw, json)
Hash identifier: vyaDUTeq8kK5irgXG6Xhdr5OfJ7O22/w+m9Lfrzs2fk=
Subject key identifier: DE:04:74:76:B3:9D:C5:7A:22:E6:EF:03:1A:1B:18:A9:0C:44:CE:91
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019FC6E5C98227FC457F3F0BBED171C5BFCA
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3gR0drOdxXoi5u8DGhsYqQxEzpE.roa
Signing time: Mon 03 Aug 2026 09:12:55 +0000
ROA not before: Mon 03 Aug 2026 09:12:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152586
IP address blocks: 2.58.200.0/24 maxlen: 24
2.58.201.0/24 maxlen: 24
2.58.202.0/24 maxlen: 24
45.11.230.0/23 maxlen: 23
45.11.230.0/24 maxlen: 24
45.11.231.0/24 maxlen: 24
45.67.84.0/24 maxlen: 24
45.67.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:e5:c9:82:27:fc:45:7f:3f:0b:be:d1:71:c5:bf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 3 09:12:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de047476b39dc57a22e6ef031a1b18a90c44ce91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:aa:b9:e0:12:f1:aa:61:17:20:c5:32:1c:
33:dc:f7:a2:59:99:42:3c:ba:5e:55:5c:c7:1c:08:
91:b7:b2:c9:60:34:fe:8e:32:a2:8a:21:a3:19:d2:
73:28:81:d9:59:66:b0:d8:fe:fa:4d:a8:a1:df:11:
51:06:bc:c3:f3:8d:40:68:61:48:70:0a:f1:88:ad:
b5:ce:16:fd:01:29:fb:61:7b:5c:a9:07:04:9b:b8:
e0:ee:95:2c:ba:db:9e:28:ac:6b:88:fc:bb:27:99:
11:ff:80:07:18:76:80:98:e4:e1:34:cc:0a:0d:ce:
c5:f2:ac:31:1b:b8:94:c0:91:32:64:81:73:06:2d:
0e:16:8d:3c:4a:5c:2b:f8:e5:a5:b6:b2:5e:cf:42:
7b:95:3f:18:57:ca:23:be:62:db:46:19:b7:ff:b5:
df:f7:2d:4b:c7:95:70:9b:c1:f6:5d:17:74:66:d0:
7a:16:5f:93:9e:5f:9b:60:34:5b:f8:1f:a9:f8:c0:
b0:53:e6:cd:00:13:ae:9b:52:ae:c0:b8:c2:01:fe:
64:de:f3:7c:6b:65:8e:91:ff:df:da:d2:9f:01:90:
47:70:67:32:55:b8:8c:d2:a2:04:d0:27:50:71:ef:
41:22:6c:86:bb:43:73:5a:17:b2:6a:71:44:23:0a:
cf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:04:74:76:B3:9D:C5:7A:22:E6:EF:03:1A:1B:18:A9:0C:44:CE:91
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3gR0drOdxXoi5u8DGhsYqQxEzpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.200.0-2.58.202.255
45.11.230.0/23
45.67.84.0/24
45.67.87.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:5c:0f:3f:bb:ac:63:1f:de:7c:21:b0:da:50:27:df:2d:90:
35:a8:c8:57:13:fe:84:fa:6c:14:c5:5f:89:6c:e5:c0:31:07:
6f:cf:6d:a9:63:61:fe:c7:a3:28:39:c1:c1:59:a6:55:5a:a3:
8a:2a:c2:d0:be:83:1d:e6:c2:6b:ff:ce:4a:17:38:86:f2:82:
a1:4e:4e:68:23:73:12:35:18:59:23:36:8e:c5:b6:ad:76:12:
62:3f:ee:ef:df:7b:f9:ff:8c:45:25:18:5e:42:25:89:18:33:
79:e0:b9:06:ea:27:95:44:77:76:51:aa:d2:e4:e9:13:82:82:
83:52:b4:21:f3:2a:3d:5a:13:c7:99:b5:5b:7c:b4:0c:84:09:
96:22:d6:a3:a7:6e:96:d1:c4:2d:4b:2a:1e:2a:ca:fc:2f:c0:
45:c9:f6:50:25:00:fd:57:cf:e4:29:76:52:b6:b7:d9:04:c5:
de:61:9e:3d:ca:55:96:19:27:3f:12:74:af:e2:9d:50:43:1b:
22:0a:10:97:b0:30:a1:f3:6a:94:3c:50:6c:b9:8e:22:bd:e5:
13:23:81:e2:7c:49:87:49:a8:e6:8e:cc:d2:0c:44:11:93:dd:
59:6a:38:0f:b9:2b:37:d4:3a:8b:72:4c:63:77:62:b4:07:4c:
4a:ac:7e:85
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ/G5cmCJ/xFfz8LvtFxxb/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjYwODAzMDkxMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTA0NzQ3NmIzOWRjNTdhMjJlNmVmMDMxYTFiMThhOTBjNDRjZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5mqueAS8aphFyDFMhwz3PeiWZlC
PLpeVVzHHAiRt7LJYDT+jjKiiiGjGdJzKIHZWWaw2P76Taih3xFRBrzD841AaGFI
cArxiK21zhb9ASn7YXtcqQcEm7jg7pUsutueKKxriPy7J5kR/4AHGHaAmOThNMwK
Dc7F8qwxG7iUwJEyZIFzBi0OFo08Slwr+OWltrJez0J7lT8YV8ojvmLbRhm3/7Xf
9y1Lx5Vwm8H2XRd0ZtB6Fl+Tnl+bYDRb+B+p+MCwU+bNABOum1KuwLjCAf5k3vN8
a2WOkf/f2tKfAZBHcGcyVbiM0qIE0CdQce9BImyGu0NzWheyanFEIwrPnwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFN4EdHazncV6IubvAxobGKkMRM6RMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvM2dSMGRyT2R4WG9pNXU4REdoc1lxUXhFenBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAMCOsgD
BAACOsoDBAEtC+YDBAAtQ1QDBAAtQ1cwDQYJKoZIhvcNAQELBQADggEBAIpcDz+7
rGMf3nwhsNpQJ98tkDWoyFcT/oT6bBTFX4ls5cAxB2/PbaljYf7Hoyg5wcFZplVa
o4oqwtC+gx3mwmv/zkoXOIbygqFOTmgjcxI1GFkjNo7Ftq12EmI/7u/fe/n/jEUl
GF5CJYkYM3nguQbqJ5VEd3ZRqtLk6ROCgoNStCHzKj1aE8eZtVt8tAyECZYi1qOn
bpbRxC1LKh4qyvwvwEXJ9lAlAP1Xz+QpdlK2t9kExd5hnj3KVZYZJz8SdK/inVBD
GyIKEJewMKHzapQ8UGy5jiK95RMjgeJ8SYdJqOaOzNIMRBGT3VlqOA+5KzfUOoty
TGN3YrQHTEqsfoU=
-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:48 2026 by rpki-client