Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/3j_bhRRfPa2r9UctZBUKepuv2hk.roa
File: 3j_bhRRfPa2r9UctZBUKepuv2hk.roa (raw, json)
Hash identifier: JOTwsdK2ByQFQk7trona6bFaUxr2pQFlQU1WHf1YkwU=
Subject key identifier: DE:3F:DB:85:14:5F:3D:AD:AB:F5:47:2D:64:15:0A:7A:9B:AF:DA:19
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368CC15C0825002470EE6943A16DE51
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/3j_bhRRfPa2r9UctZBUKepuv2hk.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 194.67.201.0/24 maxlen: 24
2a0e:d606::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cc:15:c0:82:50:02:47:0e:e6:94:3a:16:de:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de3fdb85145f3dadabf5472d64150a7a9bafda19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:ca:17:ca:7e:1e:ed:00:a9:f2:5e:a5:f1:
94:e5:f5:cb:17:70:a0:9d:2a:a3:94:74:e6:49:32:
94:70:fe:6d:4f:d5:3f:71:d4:0a:e4:83:a3:61:24:
97:2f:9e:1b:0c:2d:65:f2:fb:78:4d:6e:70:b2:23:
79:7c:93:27:e2:6e:63:42:70:b5:5b:9c:6f:5c:9a:
8d:32:b0:0b:30:e9:b7:72:89:5e:b6:44:d2:62:aa:
dc:23:c0:55:29:c9:db:a6:1a:d5:fe:cb:10:bb:f5:
5e:10:2b:60:10:ef:da:fc:10:96:52:e6:d6:ef:34:
be:b0:f0:05:31:fa:fb:c4:76:56:e0:cf:4e:6e:00:
80:7d:1c:b0:09:11:c5:c4:3a:a1:7f:d3:81:7f:a2:
a3:f4:28:d2:f0:13:4b:09:e2:6f:d4:5c:9f:8c:e3:
ff:54:39:4d:9d:a4:b1:d4:7f:db:d3:2b:25:09:79:
c0:53:e2:98:58:e8:b5:b1:86:95:51:f3:7b:d3:c9:
4f:a6:61:bb:21:1c:03:e7:26:53:33:81:de:7b:fe:
c9:77:55:02:9c:4f:5d:bd:14:30:e3:8e:f0:3c:2b:
e9:3c:83:56:54:dc:ed:fb:f9:ab:16:70:71:ac:fe:
26:9d:c6:c1:26:8e:bf:1e:e4:11:e5:5a:88:19:07:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3F:DB:85:14:5F:3D:AD:AB:F5:47:2D:64:15:0A:7A:9B:AF:DA:19
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/3j_bhRRfPa2r9UctZBUKepuv2hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.201.0/24
IPv6:
2a0e:d606::/48
Signature Algorithm: sha256WithRSAEncryption
1c:3a:07:2b:6f:0a:69:bf:e0:d5:82:1f:36:e0:3b:51:27:8d:
0e:7e:05:7b:9f:30:ae:c3:e8:c8:a7:98:42:48:be:f8:b7:33:
24:6d:b6:30:dd:e3:70:80:4c:3f:44:77:46:33:cc:ad:1e:4c:
6f:1d:5d:a8:65:49:f9:2a:bf:66:9d:be:54:21:a9:8c:78:02:
f9:6f:46:d0:6a:28:35:11:a4:1c:fc:9a:e3:76:95:b1:43:f1:
87:6f:68:75:32:13:02:4b:a1:7c:33:dc:d5:f9:2c:97:18:6f:
a1:3b:f1:4f:1d:d1:08:ca:a1:68:0e:13:ea:b8:8c:67:ce:a4:
a0:e0:cc:2f:87:e7:18:78:ea:b4:d0:0e:d7:ab:e0:ed:1a:3a:
c7:83:02:64:08:2f:d1:a0:95:eb:8b:1c:27:fb:ae:d8:de:09:
26:f3:55:48:b7:84:cd:1f:c7:cd:f2:bb:6d:5a:5e:0a:d5:a0:
13:33:37:5c:27:90:d0:c2:3b:38:49:31:bd:ea:88:54:ac:b8:
ab:b7:13:46:33:b1:1d:7b:21:d9:1f:76:f9:f6:36:62:65:10:
37:85:ed:bf:1d:87:d7:57:27:e3:f3:f1:85:9e:e6:86:52:77:
0f:d5:de:9b:8f:aa:c7:aa:fc:04:21:ab:b0:a8:bd:2b:f2:a6:
b2:2f:b6:60
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ8jaMwVwIJQAkcO5pQ6Ft5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwNzAyMTUxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTNmZGI4NTE0NWYzZGFkYWJmNTQ3MmQ2NDE1MGE3YTliYWZkYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/jKF8p+Hu0AqfJepfGU5fXLF3Cg
nSqjlHTmSTKUcP5tT9U/cdQK5IOjYSSXL54bDC1l8vt4TW5wsiN5fJMn4m5jQnC1
W5xvXJqNMrALMOm3coletkTSYqrcI8BVKcnbphrV/ssQu/VeECtgEO/a/BCWUubW
7zS+sPAFMfr7xHZW4M9ObgCAfRywCRHFxDqhf9OBf6Kj9CjS8BNLCeJv1FyfjOP/
VDlNnaSx1H/b0yslCXnAU+KYWOi1sYaVUfN708lPpmG7IRwD5yZTM4Hee/7Jd1UC
nE9dvRQw447wPCvpPINWVNzt+/mrFnBxrP4mncbBJo6/HuQR5VqIGQfMdwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN4/24UUXz2tq/VHLWQVCnqbr9oZMB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvM2pfYmhSUmZQYTJyOVVjdFpCVUtlcHV2MmhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwkPJMA8E
AgACMAkDBwAqDtYGAAAwDQYJKoZIhvcNAQELBQADggEBABw6BytvCmm/4NWCHzbg
O1EnjQ5+BXufMK7D6MinmEJIvvi3MyRttjDd43CATD9Ed0YzzK0eTG8dXahlSfkq
v2advlQhqYx4AvlvRtBqKDURpBz8muN2lbFD8YdvaHUyEwJLoXwz3NX5LJcYb6E7
8U8d0QjKoWgOE+q4jGfOpKDgzC+H5xh46rTQDter4O0aOseDAmQIL9GgleuLHCf7
rtjeCSbzVUi3hM0fx83yu21aXgrVoBMzN1wnkNDCOzhJMb3qiFSsuKu3E0YzsR17
Idkfdvn2NmJlEDeF7b8dh9dXJ+Pz8YWe5oZSdw/V3puPqseq/AQhq7CovSvyprIv
tmA=
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:57 2026 by rpki-client