Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/K3mAv4ENjdFvUb1ySwEcIqWxG_8.roa
File: K3mAv4ENjdFvUb1ySwEcIqWxG_8.roa (raw, json)
Hash identifier: TrWxwfXOHY5NB4elTvUPByLYubX+YUC3/aQn4/n7h2A=
Subject key identifier: 2B:79:80:BF:81:0D:8D:D1:6F:51:BD:72:4B:01:1C:22:A5:B1:1B:FF
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 019CDBFC4D351085A4AC93593ED254F40338
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/K3mAv4ENjdFvUb1ySwEcIqWxG_8.roa
Signing time: Wed 11 Mar 2026 08:21:11 +0000
ROA not before: Wed 11 Mar 2026 08:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5405
IP address blocks: 185.238.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:fc:4d:35:10:85:a4:ac:93:59:3e:d2:54:f4:03:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Mar 11 08:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b7980bf810d8dd16f51bd724b011c22a5b11bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:cd:98:dc:db:df:9a:e8:b9:6f:df:01:39:
b0:bd:44:a8:57:a3:f3:90:2e:6a:38:0b:61:d9:96:
70:ca:dc:71:17:98:02:e2:f6:8c:71:b0:76:ad:c2:
1b:4b:5e:9d:a0:ba:c7:82:72:45:91:9f:52:8a:02:
67:3e:13:59:f3:31:5e:75:a0:71:95:b9:59:1d:24:
e9:0d:1c:e8:b5:90:14:f9:9b:46:dc:2d:2e:fe:aa:
80:90:57:a9:87:c4:85:6b:6e:02:7d:df:3e:f4:2b:
88:38:72:28:80:6d:9b:d4:95:03:d3:81:d1:e9:1f:
e2:a7:4c:2b:5b:1f:7c:7b:99:13:ee:55:73:11:69:
01:73:8c:59:96:29:eb:1a:01:08:dd:1d:be:98:f2:
74:36:44:40:bc:b9:52:63:c6:6b:7e:9f:0d:fd:66:
34:da:f8:61:f4:af:4b:32:f5:0e:1c:c7:23:af:52:
30:d8:9d:88:ca:1e:25:cc:e4:20:93:0e:78:44:76:
35:8c:69:ac:f9:bb:4a:f4:e5:49:82:f7:86:65:20:
cc:5d:51:0c:e4:4f:d8:56:39:10:24:0a:41:a4:f9:
14:ac:77:c6:65:4b:a6:98:1b:c7:60:a5:70:fe:e9:
e8:d2:b6:b0:d7:99:19:ee:fb:be:76:cb:17:e8:42:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:79:80:BF:81:0D:8D:D1:6F:51:BD:72:4B:01:1C:22:A5:B1:1B:FF
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/K3mAv4ENjdFvUb1ySwEcIqWxG_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.217.0/24
Signature Algorithm: sha256WithRSAEncryption
51:37:c8:52:b0:80:cf:6c:4b:01:cc:fc:5e:b6:1d:05:b9:ad:
ef:4c:16:a1:af:bf:7a:aa:50:80:d6:6f:ae:72:b4:e2:6a:27:
55:97:1e:c3:24:5b:78:d5:fc:a1:15:3b:71:f5:be:80:1f:35:
c2:4d:23:0b:9c:ea:48:21:7c:23:a8:7d:f9:9d:c1:02:59:a9:
8d:18:27:5e:11:9b:41:a2:a9:b0:64:ab:97:f4:cd:76:99:73:
7a:35:61:5c:fc:cb:65:08:4c:6e:ff:57:a7:92:6b:f4:4b:db:
5e:8c:96:12:ac:90:2e:52:fd:6c:61:09:42:0d:2b:e9:4d:8b:
e6:92:83:de:c5:96:bb:68:16:b0:88:60:1a:cb:45:16:c4:6d:
a8:c3:5b:44:b3:fc:fd:96:44:b8:7b:fb:ed:92:e9:dd:9f:92:
93:af:05:c6:08:ad:17:dc:6a:e4:d0:24:bd:bc:28:f0:10:e8:
77:4b:cd:08:e3:88:f5:62:77:da:5b:66:e1:d4:76:b3:e9:6b:
67:28:7c:3c:3b:9a:d1:03:d4:bb:fc:3e:47:91:1a:f4:01:ab:
09:dc:51:d3:67:20:07:84:54:04:f7:52:49:28:38:9a:e7:a6:
6d:58:3d:96:5f:ab:ec:e6:e7:16:3f:6d:8d:66:7d:cc:db:14:
2f:bc:5e:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzb/E01EIWkrJNZPtJU9AM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjg3YzZjYWY4MWRlMzYyNWZlMWNlMDU1OWYzOWUzMDUw
NWEwNTEwHhcNMjYwMzExMDgyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjc5ODBiZjgxMGQ4ZGQxNmY1MWJkNzI0YjAxMWMyMmE1YjExYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRXNmNzb35rouW/fATmwvUSoV6Pz
kC5qOAth2ZZwytxxF5gC4vaMcbB2rcIbS16doLrHgnJFkZ9SigJnPhNZ8zFedaBx
lblZHSTpDRzotZAU+ZtG3C0u/qqAkFeph8SFa24Cfd8+9CuIOHIogG2b1JUD04HR
6R/ip0wrWx98e5kT7lVzEWkBc4xZlinrGgEI3R2+mPJ0NkRAvLlSY8Zrfp8N/WY0
2vhh9K9LMvUOHMcjr1Iw2J2Iyh4lzOQgkw54RHY1jGms+btK9OVJgveGZSDMXVEM
5E/YVjkQJApBpPkUrHfGZUummBvHYKVw/uno0raw15kZ7vu+dssX6EKp3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCt5gL+BDY3Rb1G9cksBHCKlsRv/MB8GA1UdIwQY
MBaAFBK4fGyvgd42Jf4c4FWfOeMFBaBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEt
NjI4MDhiYmJkZDIxLzEvSzNtQXY0RU5qZEZ2VWIxeVN3RWNJcVd4R184LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEtNjI4MDhiYmJkZDIx
LzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue7ZMA0G
CSqGSIb3DQEBCwUAA4IBAQBRN8hSsIDPbEsBzPxeth0Fua3vTBahr796qlCA1m+u
crTiaidVlx7DJFt41fyhFTtx9b6AHzXCTSMLnOpIIXwjqH35ncECWamNGCdeEZtB
oqmwZKuX9M12mXN6NWFc/MtlCExu/1enkmv0S9tejJYSrJAuUv1sYQlCDSvpTYvm
koPexZa7aBawiGAay0UWxG2ow1tEs/z9lkS4e/vtkundn5KTrwXGCK0X3Grk0CS9
vCjwEOh3S80I44j1YnfaW2bh1Haz6WtnKHw8O5rRA9S7/D5HkRr0AasJ3FHTZyAH
hFQE91JJKDia56ZtWD2WX6vs5ucWP22NZn3M2xQvvF7J
-----END CERTIFICATE-----
Generated at Mon Mar 16 08:09:48 2026 by rpki-client