Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/3PZtOtEP32pxmagHDWpHuXtCCRc.roa
File: 3PZtOtEP32pxmagHDWpHuXtCCRc.roa (raw, json)
Hash identifier: bpJEOxuRCU5ZgS5FbAAwutvMDXKwEbHigoSaJaf1e2M=
Subject key identifier: DC:F6:6D:3A:D1:0F:DF:6A:71:99:A8:07:0D:6A:47:B9:7B:42:09:17
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0204D8A1A8F2D2F4B127FCE94E36CA118
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/3PZtOtEP32pxmagHDWpHuXtCCRc.roa
Signing time: Thu 20 Aug 2026 17:52:27 +0000
ROA not before: Thu 20 Aug 2026 17:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199775
IP address blocks: 45.94.32.0/22 maxlen: 24
46.36.192.0/21 maxlen: 24
185.6.152.0/22 maxlen: 24
185.42.0.0/22 maxlen: 24
185.65.164.0/22 maxlen: 24
185.95.108.0/22 maxlen: 24
185.168.132.0/22 maxlen: 24
185.182.52.0/22 maxlen: 24
185.208.240.0/22 maxlen: 22
185.242.218.0/24 maxlen: 24
194.126.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:4d:8a:1a:8f:2d:2f:4b:12:7f:ce:94:e3:6c:a1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 20 17:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcf66d3ad10fdf6a7199a8070d6a47b97b420917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:97:98:27:f1:f7:17:44:9c:a2:a4:85:14:
8b:fc:82:9b:b0:a6:d1:3f:6f:c1:82:59:71:48:0a:
ff:6d:79:9c:0d:ba:44:00:dd:48:b7:61:98:e8:7a:
74:93:1d:20:6d:e3:0e:3e:7b:11:35:a2:48:ee:93:
51:e6:7b:1b:e6:f7:74:b5:1e:fe:61:79:3a:9d:e6:
29:37:1c:4c:e0:0f:89:96:4d:2f:c7:ad:5f:4f:bf:
7b:c9:6b:3a:c4:72:cb:e5:c3:72:be:a0:76:5a:f2:
59:4c:36:c7:a4:7d:93:51:84:89:a7:52:e2:78:2b:
2d:c4:11:87:61:59:88:8b:3d:d7:a4:ba:08:30:91:
d6:b8:60:f2:d8:31:39:e5:0f:12:b5:bd:2c:84:5f:
ac:99:d8:e0:95:b9:f2:36:4b:31:64:d6:1e:63:90:
a9:76:07:fa:73:af:94:23:7f:c1:54:c5:a2:24:37:
07:96:ba:86:37:af:40:7c:2e:b8:a4:6d:3e:de:99:
47:db:28:db:bc:94:8f:f8:e8:42:37:f6:ef:05:20:
bc:50:7c:b5:a1:db:af:d3:6f:85:c7:e8:7e:cf:e9:
ec:3e:b0:5a:ab:bd:3f:70:04:32:04:f0:0b:d6:30:
45:5b:34:a9:96:93:8f:2f:a5:24:8c:30:3d:d3:54:
a5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F6:6D:3A:D1:0F:DF:6A:71:99:A8:07:0D:6A:47:B9:7B:42:09:17
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/3PZtOtEP32pxmagHDWpHuXtCCRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.32.0/22
46.36.192.0/21
185.6.152.0/22
185.42.0.0/22
185.65.164.0/22
185.95.108.0/22
185.168.132.0/22
185.182.52.0/22
185.208.240.0/22
185.242.218.0/24
194.126.152.0/22
Signature Algorithm: sha256WithRSAEncryption
83:51:92:02:17:69:28:7c:f9:e3:0c:33:15:41:85:4e:b7:d3:
6f:64:8a:5c:2d:d0:9e:e3:c5:6e:51:5a:f4:d8:e8:ad:93:33:
cc:62:90:f0:6f:98:7c:25:db:87:2e:26:03:9e:ee:f4:93:bf:
38:9a:8f:69:3d:0d:5b:1e:fb:f8:da:9b:82:69:21:c8:98:bb:
6f:2b:70:c0:fd:2b:db:1e:9f:c1:e6:9a:38:26:b7:8b:83:bb:
2e:81:74:67:81:6f:2e:1b:c4:a5:d1:d4:4f:22:87:66:26:8d:
6c:fc:49:4b:2b:e4:ca:31:44:7c:cd:b7:5b:bd:14:a9:44:e0:
e0:68:35:f0:68:b0:85:37:6a:22:ad:f6:aa:4f:28:7e:ab:b8:
42:e5:e9:29:18:4e:60:91:c4:f2:f3:e2:42:38:60:ef:5d:6d:
36:17:75:54:d5:0c:3b:86:fb:a6:88:25:7f:43:68:16:06:1f:
5c:7e:54:c5:f7:0d:60:65:a3:00:27:0e:28:70:af:6c:f6:d1:
e4:5c:4e:d9:17:0c:5a:ab:29:4e:e8:3e:6c:47:9d:d1:c9:1c:
95:fc:e6:36:c2:34:30:6b:72:1a:72:b5:3f:a6:d5:0e:85:20:
e5:98:60:cd:54:ee:35:d2:26:76:9f:23:fb:a3:54:02:c1:23:
9d:e2:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 15:29:46 2026 by rpki-client