Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/3nUsl4RKj2z8CbMrvpcEfFCm3Ec.roa
File: 3nUsl4RKj2z8CbMrvpcEfFCm3Ec.roa (raw, json)
Hash identifier: xOzepGbNFbatCq0zjXI/FXTlrydlg5FPTLxwydIci84=
Subject key identifier: DE:75:2C:97:84:4A:8F:6C:FC:09:B3:2B:BE:97:04:7C:50:A6:DC:47
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 019FF65C99AFCB7F81D5E1AD9DB81F611693
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/3nUsl4RKj2z8CbMrvpcEfFCm3Ec.roa
Signing time: Wed 12 Aug 2026 14:24:51 +0000
ROA not before: Wed 12 Aug 2026 14:24:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200414
IP address blocks: 178.219.128.0/24 maxlen: 24
178.219.131.0/24 maxlen: 24
185.11.108.0/23 maxlen: 24
194.29.180.0/23 maxlen: 24
195.110.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:5c:99:af:cb:7f:81:d5:e1:ad:9d:b8:1f:61:16:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Aug 12 14:24:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de752c97844a8f6cfc09b32bbe97047c50a6dc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:ed:9d:4b:e4:6a:ec:92:28:07:97:9c:96:
6c:a4:77:93:15:80:0b:42:9e:3e:7c:d6:d9:27:83:
73:7e:34:08:e7:f5:f6:74:7b:9d:f2:ba:d4:58:11:
99:5e:61:67:32:98:33:9a:4b:c6:8c:a2:94:a4:da:
f1:b0:4d:f9:93:ef:e0:2b:05:d2:87:7e:c5:f3:71:
fa:f6:70:b3:06:aa:bd:ec:b0:4d:6d:f7:a5:ce:d3:
f5:3a:4a:61:27:e6:aa:cd:1a:d9:90:19:d4:4f:40:
da:3a:2a:e6:48:ef:2b:57:ad:26:ce:5d:96:70:d7:
c6:fa:2e:59:fe:d9:28:dd:ea:c8:c3:24:6f:0a:25:
f3:f0:2a:d8:10:30:08:ee:2e:2e:dc:6f:42:67:b9:
53:2f:0a:8a:c0:83:d7:7e:58:d2:c1:97:eb:d8:09:
ad:8a:15:f2:e4:d4:55:b7:b0:63:60:ce:c7:a3:fc:
7d:c4:1d:86:38:3a:16:cd:7d:89:19:a6:ba:38:be:
c3:e1:57:46:ce:9b:53:97:28:80:6f:6e:c5:61:41:
63:e0:46:3a:b4:cc:77:52:36:6e:26:0d:f8:06:e3:
b5:fe:6e:42:bc:87:93:23:33:39:a4:57:f3:83:e6:
24:8b:4a:cd:0e:23:95:e4:ad:ea:86:3b:39:6d:53:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:75:2C:97:84:4A:8F:6C:FC:09:B3:2B:BE:97:04:7C:50:A6:DC:47
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/3nUsl4RKj2z8CbMrvpcEfFCm3Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.128.0/24
178.219.131.0/24
185.11.108.0/23
194.29.180.0/23
195.110.50.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:5a:0b:be:4b:46:ac:4c:0c:22:a7:34:0d:a6:1a:35:67:91:
fd:21:4d:8d:98:16:f5:57:52:0b:6e:1b:b6:c7:1e:b5:9b:8e:
eb:95:cf:43:53:23:8c:81:8a:f2:79:5e:64:b7:cc:db:58:35:
eb:7a:59:32:76:dd:56:ac:d9:db:10:c7:8a:fd:da:4e:db:62:
28:6f:8b:ea:97:71:b1:9c:2b:82:64:fc:56:e2:a1:ba:7e:ac:
9a:68:98:f4:02:25:77:b6:b8:4a:12:c2:98:10:ae:4b:32:22:
22:5e:a1:3b:4e:bb:73:e7:8c:f9:0e:bf:ba:f9:03:58:0c:fb:
d9:f7:50:6e:f2:24:71:9e:2b:3c:50:ea:23:54:de:78:d7:e7:
ac:a5:6b:a5:5f:86:1a:a2:72:b5:12:aa:6e:cc:39:b1:7e:4a:
05:ec:9b:0b:22:ba:c5:1b:4b:09:ec:12:03:b5:d9:05:dd:c6:
31:f0:64:fa:f0:18:8c:b5:bd:e1:20:bc:b1:42:01:fb:ac:39:
53:12:5b:55:c1:27:c0:68:e9:c5:db:30:b5:dd:9f:dd:85:22:
e1:71:8d:fd:55:a0:f5:5a:14:7f:71:93:6b:a8:42:db:7b:45:
2d:b3:86:c6:dd:4c:61:21:cb:9c:a9:fb:bc:a7:a8:96:e1:d1:
5a:1d:6a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 02:02:30 2026 by rpki-client