Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3LMAolZb5UdM06VGYKZ6z6tnoHU.roa
File: 3LMAolZb5UdM06VGYKZ6z6tnoHU.roa (raw, json)
Hash identifier: R8nad90ldf0lc1OnWhgV1IxD1DiP7kHu1ehkCFeFBE0=
Subject key identifier: DC:B3:00:A2:56:5B:E5:47:4C:D3:A5:46:60:A6:7A:CF:AB:67:A0:75
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EFB52E9AA6B0BD79CFABC34A2A46B66D8
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3LMAolZb5UdM06VGYKZ6z6tnoHU.roa
Signing time: Wed 24 Jun 2026 20:29:35 +0000
ROA not before: Wed 24 Jun 2026 20:29:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 212.189.28.0/23 maxlen: 24
212.189.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:52:e9:aa:6b:0b:d7:9c:fa:bc:34:a2:a4:6b:66:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 24 20:29:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcb300a2565be5474cd3a54660a67acfab67a075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:3d:a6:58:09:be:0b:d9:24:5f:45:1d:b6:
9b:ed:a0:be:e7:03:59:f5:a4:b2:f6:8c:ca:cb:54:
f7:11:fe:01:ae:4b:7b:fe:08:4a:dc:86:60:bb:fa:
f5:96:83:ab:eb:ad:6d:da:f2:92:1d:65:04:29:bd:
83:27:44:ce:43:c0:2a:14:b3:1f:2f:8e:dd:10:38:
de:d2:ba:55:39:fd:a7:3b:30:36:b5:af:9c:2a:c5:
e5:43:44:89:4b:6e:a6:d0:fe:56:a6:83:5e:6a:d9:
ce:25:b9:3b:45:48:3b:eb:d4:3c:2a:91:8a:1f:15:
df:cf:07:a8:61:52:6c:f7:f4:49:72:15:bf:48:33:
fe:9d:33:04:c4:b9:8b:f7:83:8f:8e:a0:e7:da:02:
4f:6e:af:68:e9:91:49:6c:61:41:63:1c:10:36:8d:
16:8b:fd:e9:04:ad:52:65:79:e0:11:a0:cb:5b:91:
ca:20:84:ba:e8:8c:b6:22:31:d0:3a:85:73:49:ad:
82:68:2a:15:c2:bb:77:28:21:fc:09:7a:71:2f:c8:
78:1e:e1:7f:4b:30:be:9a:75:7d:bf:8e:00:90:b5:
da:1a:82:93:eb:e0:cf:3a:49:d4:50:27:43:84:d5:
9d:21:f5:92:a6:c3:09:8c:42:79:25:82:01:03:30:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B3:00:A2:56:5B:E5:47:4C:D3:A5:46:60:A6:7A:CF:AB:67:A0:75
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3LMAolZb5UdM06VGYKZ6z6tnoHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.28.0/23
212.189.42.0/23
Signature Algorithm: sha256WithRSAEncryption
e1:b1:d6:12:31:f7:17:ed:73:6b:d6:12:27:c2:3b:2e:75:52:
44:b7:fe:61:6a:ba:4a:52:a2:d8:31:d6:60:8c:ec:c5:b1:32:
f4:49:04:21:e2:e6:41:76:c6:30:02:6d:0a:6d:66:93:e4:8f:
e7:c6:01:4a:5c:dc:5c:ce:31:02:93:2d:37:b9:38:73:c8:c0:
10:cc:52:82:66:16:ed:7c:f7:86:62:d8:ef:a4:51:0e:b3:7c:
ee:11:c5:89:fa:20:b5:fe:b3:3e:fd:71:f7:13:08:e8:74:53:
1f:20:66:3b:09:0d:64:9a:db:ca:cd:58:6c:8e:cc:cb:d3:bd:
51:a0:ca:10:85:ac:81:4d:86:e1:4c:65:9d:76:e4:08:24:45:
f4:a0:be:1f:76:71:d1:ef:30:a2:5b:e3:67:e1:75:ee:33:f2:
d2:18:7a:66:e8:b5:15:34:2c:0d:59:64:a6:85:19:06:c3:28:
0f:a0:e4:22:80:09:e8:e0:06:2d:ff:98:37:42:23:32:a2:89:
5b:7d:c3:81:3a:25:1e:6b:73:b8:82:4d:66:4f:b1:91:e5:9a:
43:1d:22:9b:d5:5c:62:75:4b:de:85:17:b5:23:87:2d:78:16:
52:a5:14:fc:e0:d3:9b:fd:37:f6:a3:8f:47:89:fd:45:bc:d9:
ca:28:85:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:09:51 2026 by rpki-client