Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3ZxcElTm74IY4hLXoaznvPxzZTw.roa
File: 3ZxcElTm74IY4hLXoaznvPxzZTw.roa (raw, json)
Hash identifier: sXN6nSxAXUKjXcPwKJZMQ1qZ1xbNBBM9Z4NnrUrF+SE=
Subject key identifier: DD:9C:5C:12:54:E6:EF:82:18:E2:12:D7:A1:AC:E7:BC:FC:73:65:3C
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01A0245D951AB240B19C99EBBF8FE5D15910
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3ZxcElTm74IY4hLXoaznvPxzZTw.roa
Signing time: Fri 21 Aug 2026 12:48:27 +0000
ROA not before: Fri 21 Aug 2026 12:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.51.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
78.135.92.0/24 maxlen: 24
78.135.111.0/24 maxlen: 24
188.132.166.0/24 maxlen: 24
188.132.167.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:5d:95:1a:b2:40:b1:9c:99:eb:bf:8f:e5:d1:59:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 21 12:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd9c5c1254e6ef8218e212d7a1ace7bcfc73653c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:b1:f3:f0:49:13:6e:55:c6:43:8c:bf:bd:
3d:bc:7c:cb:f8:52:a7:fb:ad:a7:4c:b7:32:66:e4:
7f:6b:f8:dc:ce:18:58:53:0b:3c:b8:5c:33:3a:fd:
eb:28:8e:f7:fd:b0:82:da:b8:98:24:81:d6:7d:da:
f0:4b:e6:ad:96:a4:d0:dd:47:e3:19:96:e4:5c:83:
59:2b:40:ce:2a:b2:6f:8d:9c:45:50:e0:3b:c3:9b:
bc:db:41:59:dc:85:17:31:7f:3a:bd:ee:42:c9:72:
ab:dc:51:9d:09:63:82:a2:fe:e9:d6:cb:b4:18:6b:
44:33:41:db:d7:a4:b9:d2:37:6c:da:8f:28:1e:2b:
10:85:09:42:c0:42:38:c6:a4:0c:5f:5b:a4:fb:a8:
d7:86:dd:bd:65:be:1f:2e:37:96:b8:26:e3:15:1e:
88:d8:52:39:c3:9b:52:ed:a4:5e:03:52:71:de:40:
c2:2d:94:d3:a1:f9:88:a7:6c:2e:9e:d1:e9:aa:c6:
cb:c3:fa:6d:c5:da:b5:65:0b:74:24:35:fb:4f:cd:
4a:0e:15:11:38:55:f0:eb:cc:7f:38:8d:da:2a:bb:
12:bb:85:ea:ce:16:c3:19:c5:67:4c:66:85:06:3f:
68:8a:a4:16:a7:5e:77:6e:89:99:f7:2e:07:d0:6c:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9C:5C:12:54:E6:EF:82:18:E2:12:D7:A1:AC:E7:BC:FC:73:65:3C
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3ZxcElTm74IY4hLXoaznvPxzZTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.51.0/24
77.92.143.0/24
77.92.148.0/24
78.135.92.0/24
78.135.111.0/24
188.132.166.0/23
188.132.170.0/24
188.132.191.0/24
188.132.227.0/24
212.68.36.0/24
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
02:16:7f:d5:9a:0e:94:d7:88:70:0d:36:48:83:0e:c5:7a:a6:
06:83:07:3d:10:f0:66:0b:c3:f3:38:45:93:18:9d:b0:9c:5d:
ec:24:7d:f5:cb:c4:f2:18:66:ed:f9:35:5a:be:91:09:db:b3:
9d:91:9e:7c:1e:ec:81:d5:c2:b4:b6:3a:08:8f:53:3d:21:66:
37:0e:02:8a:16:a3:9d:44:a8:d8:54:6e:27:9f:7b:1b:10:8c:
b9:d9:9f:4c:2c:e2:c9:f1:ed:2a:45:06:bd:9e:a2:e9:9c:b7:
c9:2c:a2:31:d6:e0:9d:7c:e3:3b:ed:21:d0:dc:88:08:57:ab:
82:56:c2:cb:d3:bd:c2:51:33:5b:0a:8c:b9:47:48:1e:23:01:
5d:9f:25:54:fa:ef:fc:08:c7:7b:5b:49:ce:fd:48:76:67:ea:
9b:48:56:71:23:e6:4a:bc:24:22:ba:ce:f4:43:ff:6c:10:a8:
72:70:6c:dd:8e:74:75:ae:67:33:f0:ff:96:60:ad:e5:2f:c4:
40:95:4f:70:da:b3:ff:7a:1e:11:82:f1:c3:f7:e0:04:52:b2:
73:49:7d:34:ad:56:6b:88:3b:a3:f5:6d:70:f8:27:7f:ed:f3:
9b:77:a3:6a:69:66:6f:08:20:bf:8d:45:13:0f:17:51:c8:d7:
2c:41:40:bc
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAaAkXZUaskCxnJnrv4/l0VkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjYwODIxMTI0ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDljNWMxMjU0ZTZlZjgyMThlMjEyZDdhMWFjZTdiY2ZjNzM2NTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOyx8/BJE25VxkOMv709vHzL+FKn
+62nTLcyZuR/a/jczhhYUws8uFwzOv3rKI73/bCC2riYJIHWfdrwS+atlqTQ3Ufj
GZbkXINZK0DOKrJvjZxFUOA7w5u820FZ3IUXMX86ve5CyXKr3FGdCWOCov7p1su0
GGtEM0Hb16S50jds2o8oHisQhQlCwEI4xqQMX1uk+6jXht29Zb4fLjeWuCbjFR6I
2FI5w5tS7aReA1Jx3kDCLZTTofmIp2wuntHpqsbLw/ptxdq1ZQt0JDX7T81KDhUR
OFXw68x/OI3aKrsSu4XqzhbDGcVnTGaFBj9oiqQWp153bomZ9y4H0GwdEwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFN2cXBJU5u+CGOIS16Gs57z8c2U8MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvM1p4Y0VsVG03NElZNGhMWG9hem52UHh6WlR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAH9IzAwQA
TVyPAwQATVyUAwQATodcAwQATodvAwQBvISmAwQAvISqAwQAvIS/AwQAvITjAwQA
1EQkAwQA1EQxMA0GCSqGSIb3DQEBCwUAA4IBAQACFn/Vmg6U14hwDTZIgw7FeqYG
gwc9EPBmC8PzOEWTGJ2wnF3sJH31y8TyGGbt+TVavpEJ27OdkZ58HuyB1cK0tjoI
j1M9IWY3DgKKFqOdRKjYVG4nn3sbEIy52Z9MLOLJ8e0qRQa9nqLpnLfJLKIx1uCd
fOM77SHQ3IgIV6uCVsLL073CUTNbCoy5R0geIwFdnyVU+u/8CMd7W0nO/Uh2Z+qb
SFZxI+ZKvCQius70Q/9sEKhycGzdjnR1rmcz8P+WYK3lL8RAlU9w2rP/eh4RgvHD
9+AEUrJzSX00rVZriDuj9W1w+Cd/7fObd6NqaWZvCCC/jUUTDxdRyNcsQUC8
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:39 2026 by rpki-client