Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3g3AwnbeaqZPr3A9brFAbY3P3dE.roa
File: 3g3AwnbeaqZPr3A9brFAbY3P3dE.roa (raw, json)
Hash identifier: 8aOH2/zU5FPPODRcb0ddkOMfY7MVnHVcuObzyJ5jOSg=
Subject key identifier: DE:0D:C0:C2:76:DE:6A:A6:4F:AF:70:3D:6E:B1:40:6D:8D:CF:DD:D1
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019F1CED55406F962BCEB48667CA475F410E
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3g3AwnbeaqZPr3A9brFAbY3P3dE.roa
Signing time: Wed 01 Jul 2026 09:05:43 +0000
ROA not before: Wed 01 Jul 2026 09:05:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 46.38.138.0/24 maxlen: 24
46.38.143.0/24 maxlen: 24
212.80.8.0/24 maxlen: 24
212.80.9.0/24 maxlen: 24
212.80.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:ed:55:40:6f:96:2b:ce:b4:86:67:ca:47:5f:41:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jul 1 09:05:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de0dc0c276de6aa64faf703d6eb1406d8dcfddd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:1d:02:2b:d3:93:51:86:a2:6b:36:2a:28:
26:63:70:b9:eb:3c:bb:05:20:60:0c:07:16:7e:0c:
83:8a:4e:b3:dd:fd:e1:bf:91:f1:04:1d:f2:1b:40:
1f:9d:be:01:19:26:7c:60:88:7a:cc:bf:52:7d:22:
fe:fa:d6:b7:45:ac:83:7e:ec:79:6d:d8:3c:b0:dc:
76:2d:0e:01:59:3d:8f:08:15:15:27:85:73:bc:7e:
de:ab:1b:35:5d:a2:16:73:bc:13:ae:33:75:47:ea:
6e:51:e1:66:3e:ab:2a:d8:0a:70:2e:84:51:0a:a5:
dd:8f:78:b3:99:ac:17:14:f0:04:e1:6c:23:c7:0e:
4a:c7:a5:3b:23:fb:94:90:9f:6b:72:6a:60:b8:8a:
4f:f0:79:92:91:77:35:6c:92:c2:d6:8c:54:6a:f4:
e7:e9:12:e8:1b:7e:aa:b8:3c:5b:5a:f0:53:c4:fa:
66:26:d0:e4:92:81:da:ad:e9:ce:60:73:15:7c:49:
62:6b:bb:e8:83:15:3d:6d:74:75:93:51:82:2e:9c:
a0:c2:67:13:5a:2d:6e:c8:af:c2:1a:49:48:b5:bb:
df:86:27:ca:44:ee:19:7a:32:1d:63:ed:3b:cd:6c:
57:5a:94:31:43:6d:95:b0:da:f1:35:f1:6e:ad:68:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0D:C0:C2:76:DE:6A:A6:4F:AF:70:3D:6E:B1:40:6D:8D:CF:DD:D1
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3g3AwnbeaqZPr3A9brFAbY3P3dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.138.0/24
46.38.143.0/24
212.80.8.0-212.80.10.255
Signature Algorithm: sha256WithRSAEncryption
a0:f0:b2:1e:f4:e1:64:f1:2d:08:ea:c7:f6:e2:c1:33:72:fa:
e4:f7:58:94:cf:34:75:3e:6f:fb:33:19:04:c7:3f:c6:6b:e8:
2c:cb:39:d4:a3:21:a7:1e:ed:80:c8:ef:7a:3f:77:fe:fa:5c:
6d:62:07:dc:f3:b0:b8:b5:d4:44:58:5f:36:53:ee:49:a3:90:
e8:d4:f1:bc:0b:4f:46:f9:e9:4e:2c:95:d7:5d:87:1e:ac:20:
f2:63:b7:c8:17:f4:5b:86:14:64:71:7f:7b:f8:9c:48:f5:f3:
f2:ab:72:26:f7:19:41:79:a8:72:6d:84:73:49:79:09:fb:c9:
cd:80:74:ce:00:b5:a9:ee:a8:78:00:4e:9c:2b:9d:e5:61:9c:
45:05:14:c9:a4:18:92:a8:7e:2e:fd:11:08:04:45:16:37:05:
dc:ea:d6:0d:f1:6f:d9:b6:ce:e5:59:85:12:2c:7a:0d:cb:f9:
08:63:5c:1d:05:b3:3e:09:2b:91:e5:a0:ce:21:4d:65:5d:47:
b3:a1:66:b8:c5:9f:25:6e:b7:d0:bd:f2:ef:09:35:12:58:df:
55:a6:ce:34:76:df:2d:8a:7f:67:08:09:5c:0e:ee:3c:e8:45:
ae:d9:4d:fa:38:9d:e1:78:0c:88:99:36:09:06:09:4a:65:ce:
97:f3:23:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:56:24 2026 by rpki-client