Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P3yjnPdRBWBNj-8pRrS74QlOpvU.roa
File: P3yjnPdRBWBNj-8pRrS74QlOpvU.roa (raw, json)
Hash identifier: oJ248bySe5p1PGqQ6D/7AU+0fQ5gUIitYMZDz3xu81Q=
Subject key identifier: 3F:7C:A3:9C:F7:51:05:60:4D:8F:EF:29:46:B4:BB:E1:09:4E:A6:F5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019DBF57606C442945E44706DC7C75F4DBB4
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P3yjnPdRBWBNj-8pRrS74QlOpvU.roa
Signing time: Fri 24 Apr 2026 11:54:27 +0000
ROA not before: Fri 24 Apr 2026 11:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41575
IP address blocks: 31.148.32.0/21 maxlen: 24
31.148.224.0/20 maxlen: 24
92.253.240.0/20 maxlen: 24
93.171.48.0/20 maxlen: 24
93.171.80.0/20 maxlen: 24
93.171.104.0/21 maxlen: 24
95.46.34.0/23 maxlen: 24
95.46.48.0/20 maxlen: 24
95.46.144.0/24 maxlen: 24
146.158.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:57:60:6c:44:29:45:e4:47:06:dc:7c:75:f4:db:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Apr 24 11:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f7ca39cf75105604d8fef2946b4bbe1094ea6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:c9:e0:cd:f4:25:63:62:86:d8:21:c5:50:
ab:a3:dd:84:0f:47:a2:c5:91:6e:32:7a:ba:45:bf:
6d:6c:33:06:8b:26:de:5e:9f:a4:e6:6e:61:f8:44:
cf:51:22:c7:7f:9a:8b:00:c4:43:ad:da:4c:05:d8:
76:af:5c:ac:ce:c4:14:65:ca:45:e5:7d:b0:4b:d2:
6f:42:79:1b:6f:f6:7d:c8:0b:51:62:72:35:f3:7b:
db:d3:73:1f:db:02:80:a3:79:58:2b:7b:fe:63:55:
e6:25:81:84:07:64:4a:b3:a3:35:a5:1f:74:65:83:
42:4b:b7:cb:c5:68:56:13:98:9d:72:5f:51:ec:00:
25:b0:28:21:ef:bd:f6:52:ba:18:77:cf:1b:e1:7e:
bf:50:ea:c0:b5:52:07:a3:89:07:dc:24:48:d0:09:
dd:3e:c5:14:3c:e2:2e:5d:b1:60:c8:b7:c0:56:b7:
68:ba:d8:e7:9e:4f:cc:58:ba:b2:d3:b3:01:28:01:
9e:f1:d3:e8:6e:ee:ca:7b:4a:5f:d4:2d:66:c4:b4:
33:05:4a:95:82:f1:93:2f:2e:67:2f:00:7e:b6:58:
be:3e:d8:4c:1e:2f:0d:81:8f:b1:d0:73:b2:4e:7a:
7f:f3:9b:3b:54:98:b6:34:c8:9f:eb:ec:03:13:53:
44:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7C:A3:9C:F7:51:05:60:4D:8F:EF:29:46:B4:BB:E1:09:4E:A6:F5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P3yjnPdRBWBNj-8pRrS74QlOpvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.32.0/21
31.148.224.0/20
92.253.240.0/20
93.171.48.0/20
93.171.80.0/20
93.171.104.0/21
95.46.34.0/23
95.46.48.0/20
95.46.144.0/24
146.158.32.0/20
Signature Algorithm: sha256WithRSAEncryption
16:88:ab:d9:14:07:29:f2:07:b1:95:ab:0d:16:0d:80:28:b4:
f2:32:d8:a1:13:62:24:92:72:18:48:4e:03:27:d8:4b:a1:de:
8a:fe:a8:19:08:83:ab:33:f3:31:b8:0c:1d:fb:56:99:f6:c6:
e7:b4:a1:54:e2:ed:a2:cd:e0:31:fb:d9:20:31:60:35:f0:3e:
fa:27:d5:ac:55:ea:5b:20:82:7e:81:b1:4c:9c:ec:89:4c:27:
4a:5d:1c:e0:5f:90:c6:42:d0:ca:dd:15:c6:22:9f:41:b6:3a:
36:6b:4d:8d:6f:9c:70:0d:1e:2e:66:9c:6e:9e:e4:1d:69:e7:
66:65:18:fd:5c:2c:f2:7d:9a:c7:b7:63:b6:3a:aa:0d:23:12:
44:31:36:17:21:51:f9:53:ec:76:8f:4c:39:62:c3:76:38:2c:
11:3f:3b:5f:7b:9e:04:81:15:e1:c9:5a:8c:e7:2e:c1:2d:6b:
0b:40:5f:fa:f7:c4:69:20:05:bc:2f:5e:5f:7c:07:ea:96:c1:
a9:39:e4:83:0b:7d:79:a1:4c:8f:a2:8b:0c:f7:1e:9e:4b:f0:
2e:0a:32:9e:cf:a4:3f:1f:09:d1:d9:64:d3:f7:66:8b:eb:b0:
de:77:32:f3:ef:53:1e:8c:70:9e:fd:42:69:03:2e:46:43:08:
55:71:dd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 06:44:53 2026 by rpki-client