Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/3GHhVMraDxdiiAskPewL35crdjo.roa
File: 3GHhVMraDxdiiAskPewL35crdjo.roa (raw, json)
Hash identifier: XPSOg6gcqzCXxPqB2AsSmHrynZ5hN5FT4lGxnzezIrw=
Subject key identifier: DC:61:E1:54:CA:DA:0F:17:62:88:0B:24:3D:EC:0B:DF:97:2B:76:3A
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019F395648D5341A17D571E3B3C2E7431EF1
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/3GHhVMraDxdiiAskPewL35crdjo.roa
Signing time: Mon 06 Jul 2026 21:29:43 +0000
ROA not before: Mon 06 Jul 2026 21:29:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 91.225.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:56:48:d5:34:1a:17:d5:71:e3:b3:c2:e7:43:1e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jul 6 21:29:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc61e154cada0f1762880b243dec0bdf972b763a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:0a:86:d9:11:47:16:37:2a:c5:e3:da:cf:
67:39:05:ea:71:b7:67:24:f1:42:71:35:29:6f:dc:
f4:27:72:17:c2:8b:20:00:15:c2:3e:e5:0d:72:e7:
18:51:38:e5:0f:8c:5b:75:16:0d:3a:4c:f7:90:cb:
38:a9:69:e2:50:fb:5f:60:ad:8c:17:44:f0:a1:41:
3d:7c:ed:84:72:38:bb:7e:f0:08:b2:96:98:8e:19:
64:c4:c3:ec:ab:35:39:34:d6:77:4e:4e:d8:cc:20:
dc:30:7a:0f:bd:c1:77:e0:1c:30:d1:59:57:b3:2c:
f6:3a:17:e7:fd:0a:82:cf:0f:a9:4c:b7:ef:a8:a9:
86:b7:14:50:f8:c3:38:e7:7f:0e:77:7a:9d:ee:ec:
01:fa:05:9e:c8:c2:04:d8:71:ee:23:5e:c7:fc:a3:
5a:d6:24:80:b6:82:5e:ab:a4:bb:ed:9c:a7:b0:66:
af:a9:15:48:df:ea:08:05:43:5f:91:89:2f:17:c6:
9f:f9:65:e0:60:1d:ae:f1:3c:64:a5:39:dc:84:40:
f4:0d:53:03:44:d7:1c:16:46:dd:a1:9a:64:b3:1c:
6c:a3:cd:67:71:77:ee:0d:ae:b0:05:6c:15:9d:e2:
c9:cf:4e:9c:da:d4:af:f7:d8:a8:06:da:4d:6f:4f:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:61:E1:54:CA:DA:0F:17:62:88:0B:24:3D:EC:0B:DF:97:2B:76:3A
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/3GHhVMraDxdiiAskPewL35crdjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:83:7a:14:c0:53:a6:32:90:39:bf:47:4d:06:18:56:56:98:
55:cb:f7:6d:a7:98:98:b5:f5:ce:99:3f:88:99:0e:24:5f:4a:
f2:df:b1:ba:d2:6c:24:42:9f:f9:d9:f5:f6:85:72:85:f2:41:
4d:9b:a8:00:68:4f:23:96:86:d5:d7:b3:e4:1d:c0:0f:da:3d:
a7:c0:68:2e:8d:14:aa:92:3f:ba:91:7e:06:24:0c:7a:20:a4:
f3:9f:d2:ef:7d:3e:b2:7d:6e:b7:92:31:11:fd:10:d5:ce:e8:
c0:85:38:46:24:91:70:ba:28:ea:af:74:df:45:2f:a2:ac:9b:
a5:7d:00:ce:c1:25:33:94:2c:a9:b6:ba:15:e0:2b:69:31:03:
ac:b4:06:d6:0d:80:fe:c1:71:cb:e8:98:12:66:d6:c6:32:6d:
76:ae:d6:d0:18:dd:14:35:5b:f6:ad:57:db:4e:77:de:c7:62:
47:34:38:43:db:fa:25:0e:bf:e1:af:86:e0:d0:96:af:03:ab:
13:23:3c:ce:3c:37:58:21:af:0c:2a:0c:60:0a:c6:0f:57:ef:
ff:22:63:c2:ce:71:5e:b9:90:1a:0f:f7:80:21:59:1b:6b:b0:
68:31:3e:63:af:58:46:39:0d:d6:c0:2b:0d:b0:2d:3e:2e:7d:
bf:f3:3b:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ85VkjVNBoX1XHjs8LnQx7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjYwNzA2MjEyOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzYxZTE1NGNhZGEwZjE3NjI4ODBiMjQzZGVjMGJkZjk3MmI3NjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiwKhtkRRxY3KsXj2s9nOQXqcbdn
JPFCcTUpb9z0J3IXwosgABXCPuUNcucYUTjlD4xbdRYNOkz3kMs4qWniUPtfYK2M
F0TwoUE9fO2Ecji7fvAIspaYjhlkxMPsqzU5NNZ3Tk7YzCDcMHoPvcF34Bww0VlX
syz2Ohfn/QqCzw+pTLfvqKmGtxRQ+MM4538Od3qd7uwB+gWeyMIE2HHuI17H/KNa
1iSAtoJeq6S77ZynsGavqRVI3+oIBUNfkYkvF8af+WXgYB2u8TxkpTnchED0DVMD
RNccFkbdoZpksxxso81ncXfuDa6wBWwVneLJz06c2tSv99ioBtpNb0/dPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNxh4VTK2g8XYogLJD3sC9+XK3Y6MB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvM0dIaFZNcmFEeGRpaUFza1Bld0wzNWNyZGpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+HhMA0G
CSqGSIb3DQEBCwUAA4IBAQA+g3oUwFOmMpA5v0dNBhhWVphVy/dtp5iYtfXOmT+I
mQ4kX0ry37G60mwkQp/52fX2hXKF8kFNm6gAaE8jlobV17PkHcAP2j2nwGgujRSq
kj+6kX4GJAx6IKTzn9LvfT6yfW63kjER/RDVzujAhThGJJFwuijqr3TfRS+irJul
fQDOwSUzlCyptroV4CtpMQOstAbWDYD+wXHL6JgSZtbGMm12rtbQGN0UNVv2rVfb
Tnfex2JHNDhD2/olDr/hr4bg0JavA6sTIzzOPDdYIa8MKgxgCsYPV+//ImPCznFe
uZAaD/eAIVkba7BoMT5jr1hGOQ3WwCsNsC0+Ln2/8zvH
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:21:06 2026 by rpki-client