Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3BulW2Ci142fIkTkfuCbVIbDFyo.roa
File: 3BulW2Ci142fIkTkfuCbVIbDFyo.roa (raw, json)
Hash identifier: YtmkqHUtZ7fvyOgD8bwu7CMkFYvDWWpCHZwmmVI480g=
Subject key identifier: DC:1B:A5:5B:60:A2:D7:8D:9F:22:44:E4:7E:E0:9B:54:86:C3:17:2A
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A08046D60ECA4C6977AE4278D8AE2CE295
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3BulW2Ci142fIkTkfuCbVIbDFyo.roa
Signing time: Tue 08 Sep 2026 09:08:40 +0000
ROA not before: Tue 08 Sep 2026 09:08:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 134.49.65.0/24 maxlen: 24
147.90.202.0/24 maxlen: 24
158.173.240.0/24 maxlen: 24
170.62.239.0/24 maxlen: 24
170.62.244.0/24 maxlen: 24
170.62.245.0/24 maxlen: 24
173.209.0.0/24 maxlen: 24
193.142.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:46:d6:0e:ca:4c:69:77:ae:42:78:d8:ae:2c:e2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 8 09:08:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc1ba55b60a2d78d9f2244e47ee09b5486c3172a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:19:34:35:d5:dd:4b:78:56:54:96:a8:07:e3:
41:c2:c3:3e:77:5b:43:01:a3:da:25:39:95:c5:0f:
c0:a8:7d:45:ce:ac:ec:ea:c2:a6:94:85:f4:84:b8:
c8:80:6f:b5:d8:b9:27:ce:5d:8e:e3:a1:12:a3:9b:
9a:db:97:37:b1:32:7e:38:b5:1b:46:7c:26:5b:f7:
eb:ba:32:d9:53:91:16:f0:b4:33:47:1c:76:97:e2:
27:f0:5e:94:a4:ef:0a:b8:a4:61:18:6d:7a:7b:cd:
d4:c3:6a:84:38:af:89:2c:72:98:c8:f6:11:00:e1:
d5:8b:11:53:3a:b0:98:03:87:0c:84:1e:99:12:86:
e9:98:fd:86:f9:6e:a4:f0:a2:f2:22:c5:40:e7:5d:
ac:f3:57:05:d0:44:fc:b3:a3:4e:5c:db:1c:16:1c:
fb:9a:30:57:b4:31:69:7a:cd:07:21:99:57:77:77:
03:ad:e8:52:ff:31:4c:89:4c:e5:9b:26:cc:5b:ee:
04:25:ae:18:89:80:4b:d4:84:41:89:15:e3:18:41:
32:f8:56:61:b6:9e:a4:23:df:95:c6:e3:ff:7a:1e:
de:38:da:51:03:ce:9d:b6:e8:ee:85:ec:ff:49:e3:
d7:34:77:1b:4d:f4:a2:69:fa:e7:98:9d:c9:fc:93:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1B:A5:5B:60:A2:D7:8D:9F:22:44:E4:7E:E0:9B:54:86:C3:17:2A
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3BulW2Ci142fIkTkfuCbVIbDFyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.49.65.0/24
147.90.202.0/24
158.173.240.0/24
170.62.239.0/24
170.62.244.0/23
173.209.0.0/24
193.142.58.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:17:80:c0:32:83:07:64:d2:32:ce:b9:96:5d:8a:19:bf:01:
54:a0:72:5e:6e:e2:21:b2:b5:41:09:59:42:b9:a1:92:34:2b:
21:9a:b3:51:3a:1e:7a:fa:06:27:f1:64:db:38:c4:95:8d:5c:
69:05:15:5d:51:f9:ca:03:b3:42:fe:a5:f8:3c:fb:c2:19:f1:
6f:84:2f:65:8e:5a:50:2b:e8:9a:ff:88:04:cf:d9:d6:52:07:
17:18:f3:4d:3d:a9:70:a1:9b:eb:70:20:79:a2:b0:b7:b6:bf:
0b:80:41:26:9d:27:cd:a4:08:bd:5d:57:4d:6a:0e:b9:97:4d:
cd:0a:3d:b3:95:32:75:11:42:24:7b:40:30:71:2a:c8:17:4f:
5d:b4:f2:4f:40:8d:bd:36:b4:95:ee:a3:33:63:8a:b0:e5:77:
a4:5c:e1:1c:18:8a:e5:94:61:32:82:8c:d2:62:98:57:1e:d6:
10:b7:e2:e4:1c:17:d6:b0:6c:65:ab:4c:40:16:11:30:b3:de:
fb:08:3b:3d:4b:10:4c:9d:41:e4:f5:be:76:ac:74:32:7e:45:
2c:c5:f0:7c:ad:33:44:72:2d:0c:4d:ed:1d:01:a5:ae:5c:ff:
67:c7:e1:11:b0:b3:93:ca:f8:76:64:77:86:ef:37:80:a9:9b:
cf:fe:eb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:13:57 2026 by rpki-client