Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3AD1DouK6YJWNLtDvXcNFg5AmYI.roa
File: 3AD1DouK6YJWNLtDvXcNFg5AmYI.roa (raw, json)
Hash identifier: HOY5Izvk/ZYlY7twnrUkTDJ8AuaAjmUvLOSf7YGmQKo=
Subject key identifier: DC:00:F5:0E:8B:8A:E9:82:56:34:BB:43:BD:77:0D:16:0E:40:99:82
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F9B15632DEB88E19039E33092BA224D3E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3AD1DouK6YJWNLtDvXcNFg5AmYI.roa
Signing time: Sat 25 Jul 2026 21:01:37 +0000
ROA not before: Sat 25 Jul 2026 21:01:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 87.83.80.0/22 maxlen: 24
212.74.16.0/22 maxlen: 24
212.135.104.0/22 maxlen: 22
212.212.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9b:15:63:2d:eb:88:e1:90:39:e3:30:92:ba:22:4d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 25 21:01:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc00f50e8b8ae9825634bb43bd770d160e409982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:27:6b:85:3c:3d:35:ec:20:91:16:e5:e1:
b5:ad:0d:94:bf:3a:71:ee:6a:c7:8b:5f:e5:4b:80:
e0:af:94:3a:6a:6e:a8:ee:a5:a9:47:34:bb:80:a0:
34:de:0d:dd:17:78:92:12:7d:14:e4:f9:0c:c4:d8:
6e:fc:b4:1d:94:eb:83:c4:66:32:4b:77:45:22:95:
e7:8b:95:da:9c:9c:42:d9:8e:28:1e:87:43:7d:74:
f2:73:9b:96:23:60:6d:ab:45:b4:e1:d9:0f:0d:7a:
be:96:19:75:4b:a8:9d:06:59:58:75:7c:f4:93:ab:
0b:ef:09:b3:37:5c:5d:ec:df:1e:05:95:1d:3c:75:
39:28:f6:36:cb:dd:6f:0f:76:b3:e7:db:28:00:46:
07:cf:e9:89:1d:92:4a:ff:92:9c:5f:d4:c1:dd:20:
ab:c7:e8:9d:e9:78:00:12:ed:1e:17:11:44:a7:c0:
68:7d:32:b8:c5:62:32:1c:1e:fc:1b:f0:48:8f:87:
77:11:45:1a:59:c5:9a:77:6c:ab:b5:52:54:6f:8d:
18:b5:3f:1a:93:97:3a:fa:ff:89:b6:3a:37:fc:27:
27:31:b4:d2:f9:b1:19:1e:31:75:85:7e:74:f6:6e:
09:00:5d:df:37:a0:a3:b1:f9:55:d2:c3:4a:38:f4:
b8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:00:F5:0E:8B:8A:E9:82:56:34:BB:43:BD:77:0D:16:0E:40:99:82
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3AD1DouK6YJWNLtDvXcNFg5AmYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.80.0/22
212.74.16.0/22
212.135.104.0/22
212.212.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:00:01:dd:5b:ca:07:35:64:4a:9c:37:5f:5c:fc:2f:bc:8f:
fd:a9:be:95:c5:3d:5c:48:9f:bd:d6:db:46:dc:38:ae:53:95:
a9:c1:db:81:37:8f:66:ac:1c:5d:c9:e3:66:09:18:f6:b1:88:
9f:d4:5b:c9:a4:59:0c:a9:ee:2b:30:37:21:6d:4d:d1:1c:67:
e6:11:62:ee:58:ae:cd:e9:9c:be:ce:e9:1c:ce:f9:ef:31:94:
86:3f:60:d5:09:2d:a8:ff:ef:b1:d3:60:d2:7d:f2:9a:4d:4d:
de:c2:a7:1f:0f:2a:d7:5b:66:75:24:f1:4c:4a:5c:29:0f:eb:
31:da:aa:9e:f0:10:e9:7d:e3:b9:85:ee:6d:77:8c:1c:05:65:
45:3d:fc:d0:04:68:d7:3c:17:ff:e4:64:4d:bf:26:e1:b0:c6:
58:27:2e:6c:37:9e:e2:ed:0b:0b:1b:bb:11:d8:9a:18:53:9a:
ab:72:b0:1d:c8:ca:02:fc:bd:96:06:b1:5b:0b:e7:31:f6:f3:
03:6a:58:85:a0:d6:b2:ca:e1:d0:b1:59:c1:23:b7:40:81:6c:
0a:af:f8:18:84:b4:75:1e:95:53:e0:b8:e5:61:96:3d:d9:15:
86:ad:7d:4e:ba:f3:5e:15:c0:62:0b:a2:bc:59:f6:83:17:9e:
3b:ae:ad:eb
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ+bFWMt64jhkDnjMJK6Ik0+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzI1MjEwMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzAwZjUwZThiOGFlOTgyNTYzNGJiNDNiZDc3MGQxNjBlNDA5OTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznUna4U8PTXsIJEW5eG1rQ2Uvzpx
7mrHi1/lS4Dgr5Q6am6o7qWpRzS7gKA03g3dF3iSEn0U5PkMxNhu/LQdlOuDxGYy
S3dFIpXni5XanJxC2Y4oHodDfXTyc5uWI2Btq0W04dkPDXq+lhl1S6idBllYdXz0
k6sL7wmzN1xd7N8eBZUdPHU5KPY2y91vD3az59soAEYHz+mJHZJK/5KcX9TB3SCr
x+id6XgAEu0eFxFEp8BofTK4xWIyHB78G/BIj4d3EUUaWcWad2yrtVJUb40YtT8a
k5c6+v+Jtjo3/CcnMbTS+bEZHjF1hX509m4JAF3fN6CjsflV0sNKOPS4UQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNwA9Q6LiumCVjS7Q713DRYOQJmCMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvM0FEMURvdUs2WUpXTkx0RHZYY05GZzVBbVlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCV1NQAwQC
1EoQAwQC1IdoAwQC1NQcMA0GCSqGSIb3DQEBCwUAA4IBAQALAAHdW8oHNWRKnDdf
XPwvvI/9qb6VxT1cSJ+91ttG3DiuU5WpwduBN49mrBxdyeNmCRj2sYif1FvJpFkM
qe4rMDchbU3RHGfmEWLuWK7N6Zy+zukczvnvMZSGP2DVCS2o/++x02DSffKaTU3e
wqcfDyrXW2Z1JPFMSlwpD+sx2qqe8BDpfeO5he5td4wcBWVFPfzQBGjXPBf/5GRN
vybhsMZYJy5sN57i7QsLG7sR2JoYU5qrcrAdyMoC/L2WBrFbC+cx9vMDaliFoNay
yuHQsVnBI7dAgWwKr/gYhLR1HpVT4LjlYZY92RWGrX1OuvNeFcBiC6K8WfaDF547
rq3r
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:43:29 2026 by rpki-client