Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/3Cc7zYr4wdMCZUe9g6dW_2i0ML8.roa
File: 3Cc7zYr4wdMCZUe9g6dW_2i0ML8.roa (raw, json)
Hash identifier: pg5Ed7h72zzvUZD3Dywps0w/tKRJFUdallc5ZvXhwdQ=
Subject key identifier: DC:27:3B:CD:8A:F8:C1:D3:02:65:47:BD:83:A7:56:FF:68:B4:30:BF
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019FD289D2401D8B676328B965DEAD4807F5
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/3Cc7zYr4wdMCZUe9g6dW_2i0ML8.roa
Signing time: Wed 05 Aug 2026 15:27:55 +0000
ROA not before: Wed 05 Aug 2026 15:27:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 85.204.255.0/24 maxlen: 24
94.177.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:89:d2:40:1d:8b:67:63:28:b9:65:de:ad:48:07:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Aug 5 15:27:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc273bcd8af8c1d3026547bd83a756ff68b430bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:fe:79:c9:88:39:61:dd:ba:0f:ee:44:85:
8f:40:7c:b0:3c:24:02:c0:fa:0a:1e:9b:2b:d9:b8:
4e:c7:6e:9c:19:ef:c1:78:62:f0:4c:7f:d2:f1:2d:
03:f4:ef:65:5e:45:40:8d:53:13:9b:3c:0f:3d:c8:
00:8f:22:b9:6d:1e:5b:b2:81:00:c6:7d:ac:98:cc:
81:06:32:c2:17:96:0d:9c:61:6a:ee:3a:7c:d1:e5:
dd:58:b9:fd:19:e8:a1:84:b1:a6:84:0d:dc:86:b0:
4a:00:c5:87:6e:cc:8f:f4:94:5f:a1:d3:83:58:92:
ec:69:c8:df:7a:bf:53:b7:93:3b:8a:e5:b3:7f:33:
c7:ca:12:75:d1:b2:8f:fe:3c:6b:aa:92:36:bb:91:
77:62:13:c3:9c:c2:bc:0e:9f:84:f4:df:7f:13:10:
0d:62:a2:b6:2b:2f:b0:f1:e3:9d:50:5f:8b:fc:d7:
74:bc:d6:40:71:74:a4:7e:07:e5:a4:de:01:63:13:
b1:3d:df:53:33:90:a3:de:aa:73:cc:a3:2e:c9:c9:
6e:ea:04:f2:2a:3d:19:ac:28:2f:45:d7:13:f7:6d:
b0:9f:71:4e:b2:f8:a8:2c:be:b5:ea:10:57:1a:6d:
84:73:a8:64:bc:f8:57:74:90:97:47:b2:73:8d:44:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:27:3B:CD:8A:F8:C1:D3:02:65:47:BD:83:A7:56:FF:68:B4:30:BF
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/3Cc7zYr4wdMCZUe9g6dW_2i0ML8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.255.0/24
94.177.97.0/24
Signature Algorithm: sha256WithRSAEncryption
80:47:33:23:d3:fc:06:27:34:6f:c8:e8:8d:69:c9:31:29:c8:
55:4c:eb:60:45:03:14:4f:7c:d4:33:00:a7:e2:ce:8d:41:5c:
9a:df:e8:57:0d:11:00:19:cf:29:53:84:22:06:eb:13:80:a8:
11:01:c7:18:43:7d:92:52:8e:a8:02:78:47:43:4e:52:ae:3b:
45:44:59:d2:e4:c5:61:53:ac:33:1d:8c:90:fa:f2:ed:c4:8a:
4c:13:94:7b:57:0b:71:44:75:cf:69:d8:c3:dd:6e:a7:3c:b7:
4a:5e:25:63:9d:0e:ec:c6:ef:77:24:48:32:a0:89:cb:c1:1b:
9e:90:d0:69:cb:38:bd:01:ab:a1:a6:c1:c3:96:33:84:d6:d2:
7d:6d:dd:09:e5:56:fb:b4:30:95:34:03:57:ad:73:9b:84:18:
a5:c7:bb:63:c6:d8:65:2e:8d:15:3f:9c:c8:e0:8d:d6:a7:74:
93:95:86:60:66:f4:9b:3d:49:a0:a8:21:c0:8b:ef:64:f2:88:
f0:9d:30:51:3e:3f:c5:e6:6e:82:5f:3c:9c:8d:e4:8f:55:97:
b0:9a:55:7f:ab:db:39:94:02:9c:8a:fd:71:28:76:3d:92:1c:
f2:28:6f:27:e8:ea:d8:d7:d6:05:a3:a1:7a:3d:2b:a5:0f:b9:
ca:93:a6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:06 2026 by rpki-client