Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/3PEhY1Ws9IOo3cWNjYy5yOIjYaE.roa
File: 3PEhY1Ws9IOo3cWNjYy5yOIjYaE.roa (raw, json)
Hash identifier: T/g5YfW0+zaGcZZDm52y51nspj0qwZi0sWsHMlKk/KI=
Subject key identifier: DC:F1:21:63:55:AC:F4:83:A8:DD:C5:8D:8D:8C:B9:C8:E2:23:61:A1
Certificate issuer: /CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Certificate serial: 01A048D8B27099EA0CFEE4A1F918B717F17D
Authority key identifier: B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/3PEhY1Ws9IOo3cWNjYy5yOIjYaE.roa
Signing time: Fri 28 Aug 2026 14:49:16 +0000
ROA not before: Fri 28 Aug 2026 14:49:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42128
IP address blocks: 94.46.204.0/24 maxlen: 24
94.46.205.0/24 maxlen: 24
193.33.104.0/24 maxlen: 24
194.0.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:d8:b2:70:99:ea:0c:fe:e4:a1:f9:18:b7:17:f1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Validity
Not Before: Aug 28 14:49:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcf1216355acf483a8ddc58d8d8cb9c8e22361a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:93:d7:2c:09:63:e8:50:cf:4f:4d:32:31:
9f:31:c3:e3:c7:27:18:b4:2b:d1:98:70:47:6a:af:
ea:d0:cd:b4:18:48:c9:cf:49:a0:24:d8:e2:4d:47:
7b:f7:7f:33:4d:27:fe:ea:b6:58:e0:4e:1a:e5:a2:
80:32:5e:e6:96:79:d4:7b:b8:65:88:9a:22:82:25:
99:ab:ab:6c:d7:63:e6:d2:0c:62:6b:40:cb:aa:a4:
8b:76:90:1c:5b:eb:d7:44:d1:a7:16:8a:14:35:c9:
29:08:1a:5e:95:59:9d:7d:de:a9:6a:f5:62:82:b1:
f7:7d:01:16:b3:f2:83:3b:8a:b3:61:97:96:62:06:
70:91:03:d5:2f:96:f9:01:a3:4d:09:9c:f3:13:e6:
f9:9e:9e:96:18:a0:4f:42:3d:15:28:68:47:c6:96:
19:22:ac:24:10:1a:be:e0:d9:6c:52:ae:fc:69:fa:
45:39:09:d8:06:93:71:64:af:16:7e:cd:af:f2:e4:
4f:8c:36:e3:45:71:97:c6:e7:a2:cd:5e:b2:48:fb:
b7:a0:7e:51:01:5d:2f:b8:70:66:59:69:11:9a:34:
58:25:9a:10:07:ee:2a:73:f2:19:f1:52:28:20:66:
60:ae:35:27:39:aa:4a:b3:23:37:4d:14:ef:85:bf:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F1:21:63:55:AC:F4:83:A8:DD:C5:8D:8D:8C:B9:C8:E2:23:61:A1
X509v3 Authority Key Identifier:
keyid:B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/3PEhY1Ws9IOo3cWNjYy5yOIjYaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.46.204.0/23
193.33.104.0/24
194.0.137.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c1:ad:0e:34:2a:03:5b:4a:5a:b2:b6:1e:15:80:ea:ab:91:
57:50:f9:18:d7:85:db:70:c0:67:04:f6:24:a2:57:a1:2c:55:
c8:70:c3:ed:b0:92:35:6a:d0:61:96:77:c1:48:51:3c:73:ad:
da:4e:99:2d:d4:0f:78:b7:90:36:bd:26:de:9f:8e:3d:24:df:
d4:77:a5:85:49:15:6f:02:46:56:c4:e4:5a:1e:a7:e2:c6:10:
4f:0f:1a:a6:74:4b:a2:bb:b2:da:62:1c:65:54:9c:1e:ee:b9:
63:4e:2d:a7:0a:f0:32:1f:8e:79:a9:e8:78:78:a4:e5:84:e5:
af:2b:f4:42:44:4c:08:83:73:f1:62:50:e4:15:9f:2a:aa:15:
6f:22:c0:bc:68:37:00:e7:0f:6e:ec:8c:19:ae:d3:2f:9f:2b:
bb:a8:2b:6d:cb:03:1a:fe:8c:74:09:7e:fb:a8:eb:bf:58:ff:
ab:3e:e8:fc:0e:97:7a:91:d3:f3:3d:17:e8:80:17:81:71:b4:
86:30:21:d5:f0:7f:cf:29:d0:92:75:7d:46:15:11:98:ea:46:
75:28:7b:34:8f:43:73:bb:a8:98:f7:8b:17:70:ef:c1:71:ea:
3c:9c:8d:fc:17:f8:a4:c1:16:a3:33:89:76:4f:85:ad:39:0a:
b1:36:3c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:27 2026 by rpki-client