Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/3Mq7IrsqKCuZPz6di5KH_L8QoLY.roa
File: 3Mq7IrsqKCuZPz6di5KH_L8QoLY.roa (raw, json)
Hash identifier: zo9xHzueo8NovnOEW+G83mDr5PhnmcU3M85VuJGKIVI=
Subject key identifier: DC:CA:BB:22:BB:2A:28:2B:99:3F:3E:9D:8B:92:87:FC:BF:10:A0:B6
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F236897094633207F292AD08ACA024BFA
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/3Mq7IrsqKCuZPz6di5KH_L8QoLY.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213005
IP address blocks: 46.253.138.0/24 maxlen: 24
185.119.112.0/22 maxlen: 24
188.93.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:97:09:46:33:20:7f:29:2a:d0:8a:ca:02:4b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dccabb22bb2a282b993f3e9d8b9287fcbf10a0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:33:c8:7b:e1:fb:95:ab:b5:94:dd:c8:d0:
b5:0b:4d:10:8a:cb:ca:84:ac:59:28:c0:21:ce:12:
9d:d6:be:0d:35:be:9d:ee:22:2a:77:45:8b:5f:eb:
d5:87:3a:6f:75:02:08:01:25:c7:c5:93:f7:87:f8:
88:bb:92:36:6b:ca:b3:bd:48:9b:3b:8e:e4:a9:1e:
65:35:a0:90:8e:49:87:95:7f:8c:03:3f:83:c1:e0:
25:68:d0:0f:22:38:c8:0b:dc:e4:55:0a:56:77:60:
d3:ac:e2:f5:56:d8:cf:cb:96:13:46:16:dc:37:2e:
7f:df:b1:35:9e:79:38:0c:8b:92:88:36:50:bf:4f:
f0:a9:9b:10:3f:53:ad:d1:13:35:9b:3c:33:4f:ad:
d1:ba:93:6d:83:3d:a3:37:ef:64:aa:d5:c9:85:bc:
b0:30:ca:f5:0e:db:3d:23:49:50:52:f4:e5:cf:70:
27:2a:22:9e:1c:27:1c:d0:bf:3a:24:8c:bc:a6:71:
70:dd:d0:10:cf:e4:f0:4f:c1:95:13:ba:7e:22:7e:
59:0a:2e:00:16:07:ed:3e:6e:a3:c2:56:30:79:7d:
e1:ee:b2:12:94:77:57:04:90:97:c1:04:e8:1f:30:
57:1b:d5:f8:5f:12:85:ad:b7:bf:72:3b:39:c8:be:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CA:BB:22:BB:2A:28:2B:99:3F:3E:9D:8B:92:87:FC:BF:10:A0:B6
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/3Mq7IrsqKCuZPz6di5KH_L8QoLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.138.0/24
185.119.112.0/22
188.93.117.0/24
Signature Algorithm: sha256WithRSAEncryption
43:dc:3f:e0:71:02:f3:be:a0:07:cf:10:54:0d:d7:22:e7:d5:
bb:98:cc:9c:a6:ee:a6:c5:13:5c:14:93:88:36:8f:51:d2:4a:
bc:02:d9:7d:53:db:fa:94:bb:37:75:a3:09:b9:fb:7e:7c:15:
c3:77:c4:48:b9:54:9e:d4:d4:df:62:31:4c:ed:ba:cc:7e:69:
e5:28:64:6b:bc:b3:3b:f6:24:6d:62:3f:84:57:d3:05:5d:72:
12:df:40:41:85:7c:4b:45:78:79:64:8c:2f:1c:73:a7:36:1a:
79:4f:32:2d:95:10:20:9e:04:fe:89:a3:83:4f:02:85:aa:72:
68:27:fe:28:1e:8d:ee:64:4d:3c:8d:f3:0f:62:3c:b6:e4:e2:
1a:1c:36:d9:f6:77:b1:9d:44:2e:f4:ab:39:14:85:42:44:c0:
65:ee:75:ed:2f:36:13:a6:07:81:d6:13:5c:fa:99:59:d3:bf:
65:96:07:fe:b1:97:49:72:1c:4a:4f:c9:1c:20:17:d5:e1:d0:
91:c4:ea:9d:f4:85:90:e2:14:94:98:c4:d9:83:a9:7a:78:49:
cd:b6:62:a1:a6:01:87:51:9b:8b:11:03:0c:de:38:b5:d6:e5:
77:ec:63:99:97:8b:ca:1e:04:93:bb:d9:f1:16:18:f8:d1:c4:
c7:04:b4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:46:24 2026 by rpki-client