Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/3-lmGgWrftzSuWTBfjyBrA-fzgU.roa
File: 3-lmGgWrftzSuWTBfjyBrA-fzgU.roa (raw, json)
Hash identifier: hrheSw2m7J6MmbNCwKAOgece8fUb5MS9eBN9WQJx6PM=
Subject key identifier: DF:E9:66:1A:05:AB:7E:DC:D2:B9:64:C1:7E:3C:81:AC:0F:9F:CE:05
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019F26EC3BABC69FEEFD57E3C096A138D4F0
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/3-lmGgWrftzSuWTBfjyBrA-fzgU.roa
Signing time: Fri 03 Jul 2026 07:40:43 +0000
ROA not before: Fri 03 Jul 2026 07:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 89.44.240.0/24 maxlen: 24
89.44.241.0/24 maxlen: 24
89.44.242.0/24 maxlen: 24
185.3.200.0/24 maxlen: 24
188.212.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:ec:3b:ab:c6:9f:ee:fd:57:e3:c0:96:a1:38:d4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 3 07:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfe9661a05ab7edcd2b964c17e3c81ac0f9fce05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:e7:97:8a:af:2d:56:e8:cc:e2:0b:dc:12:
95:7a:eb:ab:8e:87:4e:0f:50:a6:30:ea:26:6c:3f:
b0:53:b3:8e:19:8e:e2:4c:f4:49:df:b6:81:4b:e9:
d7:2f:3e:b4:9b:b3:f1:42:17:ca:0b:27:11:76:8e:
be:02:88:f4:7b:21:ac:2a:85:63:80:d1:67:91:63:
f6:b7:3f:96:76:dd:68:85:e0:50:61:82:71:6a:b7:
22:2e:47:eb:c4:b8:32:1d:56:fa:ff:a6:df:e2:c5:
39:f0:79:0e:8a:1a:d6:ea:bc:0e:9d:87:e0:9b:24:
df:1c:3b:92:aa:91:a9:a3:ec:ed:17:a1:56:99:a6:
68:8c:8f:1c:d4:c4:06:5f:b3:e7:d5:aa:fe:07:5d:
c2:84:14:0d:9f:9d:0d:eb:31:01:50:b0:cc:70:fc:
af:d9:5b:1d:bf:52:e0:56:81:0f:3f:86:0f:22:a3:
b6:39:11:84:0f:60:0d:7b:96:c5:b0:a0:ca:90:4a:
db:00:c7:94:74:53:a7:e9:58:a5:ac:4a:0c:a8:94:
af:e0:36:25:d4:d9:56:70:be:5d:c8:4b:e6:ba:f7:
95:b7:38:97:9c:29:be:10:2e:07:26:86:fa:79:aa:
ea:52:4a:79:be:42:05:5f:8e:1a:11:f8:58:1b:59:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E9:66:1A:05:AB:7E:DC:D2:B9:64:C1:7E:3C:81:AC:0F:9F:CE:05
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/3-lmGgWrftzSuWTBfjyBrA-fzgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.240.0-89.44.242.255
185.3.200.0/24
188.212.99.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e1:6d:f7:bf:9d:8b:9f:7b:f3:63:dd:35:29:cb:df:5a:b0:
51:86:38:bc:b4:5f:41:3b:26:27:d7:af:84:19:2d:81:3d:55:
3d:27:53:37:4d:a8:13:87:9c:e8:ac:47:18:87:5b:53:a9:f9:
74:f5:a6:74:88:f2:c6:30:27:0b:62:4d:63:30:d3:1f:5e:c0:
05:da:e3:57:c4:c3:5e:1b:6e:fe:b3:16:76:43:63:16:d0:8d:
ea:32:8c:5a:c4:5a:3b:c5:aa:6f:05:9e:54:84:e6:ed:6e:2b:
f7:a3:b9:a9:0a:d0:cc:f1:46:0c:13:05:51:86:7f:ef:8c:ba:
f1:d1:08:01:eb:80:ec:84:9f:6a:ef:f3:4a:95:87:98:a2:25:
d6:70:3b:69:6d:05:e4:c9:96:9e:73:3f:d8:5b:0a:c9:21:19:
01:f6:09:5d:e8:0d:d6:a5:09:41:c8:c4:38:30:f6:05:a6:c1:
24:24:d0:23:69:a6:b8:cd:6f:81:46:33:6c:d4:13:ef:f4:f1:
97:4a:bc:af:cd:ce:f1:8c:06:0a:eb:03:8c:c8:f8:02:38:12:
dc:2e:23:fd:c4:54:ef:1e:2f:09:f5:4b:41:83:a4:ef:02:8d:
d2:15:86:34:f5:a0:ea:35:45:37:35:c3:85:c3:63:2f:c0:9e:
ca:67:44:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:44:15 2026 by rpki-client