Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/3FpaNUsc8mcx-Ib8oSSizkRATfQ.roa
File: 3FpaNUsc8mcx-Ib8oSSizkRATfQ.roa (raw, json)
Hash identifier: ObYD8tt+7rdZBauoMipJQYsm8/hKYkl44vas1c5JeLY=
Subject key identifier: DC:5A:5A:35:4B:1C:F2:67:31:F8:86:FC:A1:24:A2:CE:44:40:4D:F4
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 019FF60C08BAD51FA24B67A33ABD5EF9B8B0
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/3FpaNUsc8mcx-Ib8oSSizkRATfQ.roa
Signing time: Wed 12 Aug 2026 12:56:51 +0000
ROA not before: Wed 12 Aug 2026 12:56:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6659
IP address blocks: 87.119.194.0/24 maxlen: 24
194.64.31.0/24 maxlen: 24
195.180.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:0c:08:ba:d5:1f:a2:4b:67:a3:3a:bd:5e:f9:b8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Aug 12 12:56:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc5a5a354b1cf26731f886fca124a2ce44404df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f9:ea:16:d7:95:56:1f:0b:a0:a1:9b:16:4a:
f7:0f:5a:59:8a:9c:e3:47:49:e3:fe:00:35:66:16:
b8:c9:58:5b:89:cf:44:ff:6a:85:2d:f7:ca:c4:a0:
44:37:a3:df:54:cd:da:14:e1:77:af:12:e2:e9:e1:
cd:8d:25:e2:97:36:de:5b:e1:b8:df:14:59:e4:ff:
0a:71:91:e9:f8:51:ec:73:0b:1f:33:d6:3e:f6:a9:
cb:70:38:79:97:b1:99:ad:08:71:d2:4e:b7:27:fa:
48:61:67:7b:c1:70:07:8b:61:51:ce:8a:3a:41:1b:
a3:57:74:b9:f4:0e:11:04:74:44:78:c1:c9:b1:37:
de:4f:66:0f:61:7b:17:33:bb:29:fd:d3:b3:fc:07:
ac:8f:70:5f:d2:68:ca:a0:68:ea:dd:b0:9d:89:3e:
65:7b:55:81:08:47:88:63:47:91:59:77:33:44:31:
db:94:b7:a8:4e:e4:58:9b:75:1c:01:c0:2f:9a:93:
c8:c5:08:60:fc:c1:44:97:67:65:05:63:8c:83:3c:
55:41:3f:ef:cd:c1:98:d2:7b:93:fa:14:f0:19:1c:
c5:84:00:af:41:0f:21:0b:7a:97:b2:a5:fa:13:2f:
ba:d4:03:d8:5c:6e:0c:06:d8:c1:50:e9:dc:8f:40:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5A:5A:35:4B:1C:F2:67:31:F8:86:FC:A1:24:A2:CE:44:40:4D:F4
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/3FpaNUsc8mcx-Ib8oSSizkRATfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.119.194.0/24
194.64.31.0/24
195.180.249.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f3:45:3f:27:1c:e9:2a:b9:49:59:72:2e:92:b1:f1:d7:04:
b4:bb:86:d5:63:d0:d7:3d:4f:eb:cc:59:2f:00:3c:75:7d:2e:
bf:91:e6:1f:57:01:d9:72:65:91:e6:da:5d:9c:09:96:1c:55:
39:46:e1:c7:6a:6e:a6:7b:94:d8:ac:a8:00:bf:21:fe:f1:b6:
8c:d1:99:46:88:42:94:cc:bf:92:18:13:bc:30:6c:95:90:36:
bf:b2:d4:67:9b:36:2e:d3:82:d9:d6:e1:a7:4f:01:45:68:0b:
00:24:84:8b:c2:ef:97:67:b3:28:ff:54:ad:df:0a:3a:7d:7a:
74:c1:48:d1:eb:7a:de:d2:5d:fb:74:21:f9:0f:6a:08:b3:b3:
31:44:4c:fa:70:bd:9d:75:44:07:e4:57:32:7c:fd:ef:c0:88:
e2:8c:f1:91:6f:5c:6b:f1:3c:61:e6:87:b8:4f:8f:cc:58:c0:
83:80:7f:f7:87:0d:8c:17:a0:46:29:58:a0:89:ec:aa:a0:87:
5c:19:fb:43:43:31:3b:39:a2:cb:63:f1:cb:47:3f:0a:14:60:
3a:8b:e7:f5:72:6a:2c:71:be:58:12:25:d9:15:d5:c7:89:b9:
c7:d1:a4:26:8d:d9:25:e1:dc:59:31:58:d7:86:f8:8e:50:64:
8a:0b:b0:8b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ/2DAi61R+iS2ejOr1e+biwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjYwODEyMTI1NjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzVhNWEzNTRiMWNmMjY3MzFmODg2ZmNhMTI0YTJjZTQ0NDA0ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vnqFteVVh8LoKGbFkr3D1pZipzj
R0nj/gA1Zha4yVhbic9E/2qFLffKxKBEN6PfVM3aFOF3rxLi6eHNjSXilzbeW+G4
3xRZ5P8KcZHp+FHscwsfM9Y+9qnLcDh5l7GZrQhx0k63J/pIYWd7wXAHi2FRzoo6
QRujV3S59A4RBHREeMHJsTfeT2YPYXsXM7sp/dOz/Aesj3Bf0mjKoGjq3bCdiT5l
e1WBCEeIY0eRWXczRDHblLeoTuRYm3UcAcAvmpPIxQhg/MFEl2dlBWOMgzxVQT/v
zcGY0nuT+hTwGRzFhACvQQ8hC3qXsqX6Ey+61APYXG4MBtjBUOncj0DzpQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNxaWjVLHPJnMfiG/KEkos5EQE30MB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvM0ZwYU5Vc2M4bWN4LUliOG9TU2l6a1JBVGZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV3fCAwQA
wkAfAwQAw7T5MA0GCSqGSIb3DQEBCwUAA4IBAQCw80U/JxzpKrlJWXIukrHx1wS0
u4bVY9DXPU/rzFkvADx1fS6/keYfVwHZcmWR5tpdnAmWHFU5RuHHam6me5TYrKgA
vyH+8baM0ZlGiEKUzL+SGBO8MGyVkDa/stRnmzYu04LZ1uGnTwFFaAsAJISLwu+X
Z7Mo/1St3wo6fXp0wUjR63re0l37dCH5D2oIs7MxREz6cL2ddUQH5FcyfP3vwIji
jPGRb1xr8Txh5oe4T4/MWMCDgH/3hw2MF6BGKVigieyqoIdcGftDQzE7OaLLY/HL
Rz8KFGA6i+f1cmoscb5YEiXZFdXHibnH0aQmjdkl4dxZMVjXhviOUGSKC7CL
-----END CERTIFICATE-----
Generated at Tue Sep 8 18:27:27 2026 by rpki-client