Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3Ponv4C6cBPBz1tnI33vHwRea8s.roa
File: 3Ponv4C6cBPBz1tnI33vHwRea8s.roa (raw, json)
Hash identifier: 1v1ouixFxKOCSn6g89B4K4WPO0CRSvOYK8xcslIt+m0=
Subject key identifier: DC:FA:27:BF:80:BA:70:13:C1:CF:5B:67:23:7D:EF:1F:04:5E:6B:CB
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A1CEECC48229796772E164FFCCB22B5227
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3Ponv4C6cBPBz1tnI33vHwRea8s.roa
Signing time: Thu 12 Nov 2026 08:43:05 +0000
ROA not before: Thu 12 Nov 2026 08:43:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 14.102.53.0/24 maxlen: 24
14.102.60.0/24 maxlen: 24
158.173.164.0/24 maxlen: 24
212.32.68.0/24 maxlen: 24
212.32.69.0/24 maxlen: 24
212.32.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:ec:c4:82:29:79:67:72:e1:64:ff:cc:b2:2b:52:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Nov 12 08:43:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcfa27bf80ba7013c1cf5b67237def1f045e6bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cf:2a:e4:a2:7e:72:d8:85:7c:ee:8f:0d:1e:
8b:01:53:86:b2:95:3a:52:99:20:46:ba:4b:48:90:
04:8d:52:a3:3a:80:4e:5f:ee:f6:ad:f7:f0:f7:88:
3f:3a:ab:f0:66:2e:88:81:9b:62:61:37:4d:9c:33:
d7:a5:02:a4:16:d6:9c:c7:e8:c0:09:4e:22:b2:ea:
f9:e0:ce:d5:75:e1:44:d8:2e:4e:48:e1:67:a2:7a:
eb:5a:4f:b1:7f:58:4c:74:bc:6e:84:c9:b4:8b:f0:
59:fe:4d:b9:63:24:5f:33:22:af:9b:14:cd:f9:52:
39:52:cb:06:e9:49:46:58:cd:4e:f2:e7:11:a5:76:
96:c4:ea:a4:d7:e3:24:a5:bb:91:7d:de:94:c8:43:
c2:d7:4f:19:01:32:8f:11:7a:f7:96:cd:66:cc:0d:
ef:32:aa:bd:89:30:b5:47:46:67:62:f5:7a:23:65:
20:b7:ed:71:56:33:a7:99:08:02:5f:ab:a6:67:ca:
97:54:d5:4a:8d:ee:02:9b:46:ac:5b:60:50:fc:c2:
34:bf:0f:45:bf:a9:40:0a:5e:18:42:ba:5e:f1:df:
a4:14:84:9b:84:cf:cf:d8:25:d2:ce:da:de:fe:2c:
5b:72:11:ab:4f:8a:c9:ec:c3:12:c2:d6:26:4b:d5:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:27:BF:80:BA:70:13:C1:CF:5B:67:23:7D:EF:1F:04:5E:6B:CB
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3Ponv4C6cBPBz1tnI33vHwRea8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.53.0/24
14.102.60.0/24
158.173.164.0/24
212.32.68.0/23
212.32.72.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cb:a6:32:aa:1e:90:c6:f5:c6:4a:34:84:97:a7:ab:20:85:
3c:6b:36:c5:f3:c3:06:06:20:f3:7c:b4:3e:00:ef:3c:cf:5e:
4a:b2:a5:5e:c7:fd:1f:b1:bb:a7:61:d4:4b:6e:94:95:f5:f6:
d5:6f:12:bc:c8:c0:29:c0:b7:b8:f1:d9:e2:bc:13:16:d9:5a:
44:ac:aa:eb:f7:6d:5d:8f:54:be:0a:0f:0c:5f:52:fc:1d:f3:
d7:c8:e4:bf:12:d5:97:fc:71:8c:aa:98:5b:2a:48:53:3c:a2:
d1:2e:f9:08:04:21:78:ca:6c:05:13:ff:e7:17:3e:c7:03:ad:
88:95:a3:0a:86:e8:80:00:f0:ac:2d:66:dc:bc:38:48:c8:cb:
4d:c2:c6:5a:a8:a8:6f:c9:9a:c9:60:9b:41:5a:c0:ca:3c:85:
9d:0c:2a:eb:14:b9:b1:7e:11:c9:0e:59:87:80:a3:ab:37:50:
57:17:d0:69:58:9d:0b:cd:97:60:4f:3f:b2:65:a8:16:40:f7:
2a:9b:db:20:47:5f:e3:0a:32:66:c0:7b:d0:f9:a0:a0:f8:ce:
71:e5:f0:53:b4:a6:92:e9:56:75:e6:f7:4a:d8:f1:67:83:9e:
7e:34:a1:18:29:b9:33:4c:1f:b5:57:3c:49:8a:2a:8f:05:a6:
ee:9c:11:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:49:57 2026 by rpki-client