Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/3W9GvJqlCnV-NKLJ9rVAOHtCNrU.roa
File: 3W9GvJqlCnV-NKLJ9rVAOHtCNrU.roa (raw, json)
Hash identifier: ePkwL8jRxNgBjdyYJ+ctG2Zs6spWExZYEY3n7zyAbrg=
Subject key identifier: DD:6F:46:BC:9A:A5:0A:75:7E:34:A2:C9:F6:B5:40:38:7B:42:36:B5
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F23689442FFF73D10982D3345483C42EC
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/3W9GvJqlCnV-NKLJ9rVAOHtCNrU.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210876
IP address blocks: 46.226.151.0/24 maxlen: 24
185.204.102.0/24 maxlen: 24
193.57.164.0/23 maxlen: 23
193.57.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:94:42:ff:f7:3d:10:98:2d:33:45:48:3c:42:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd6f46bc9aa50a757e34a2c9f6b540387b4236b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:94:97:49:54:9f:bc:bf:a6:f2:4a:ac:8d:b3:
de:ec:1d:8a:33:60:ca:26:2b:08:3f:61:a9:3c:80:
7e:39:62:2f:be:31:fc:ed:41:a6:3b:78:8f:cd:07:
14:a9:0f:71:15:d8:3d:30:fd:1d:f6:c8:6b:66:89:
02:1f:28:98:ed:24:71:11:fd:b7:46:64:60:e4:14:
c1:f9:47:38:a0:71:eb:e9:c2:4c:a0:d1:e6:e2:aa:
67:7c:13:10:91:ab:2b:a6:8e:ee:11:39:a0:28:6c:
53:7e:bb:50:ce:e0:37:f0:d9:22:ef:40:8c:84:44:
6e:bc:f1:58:2f:9d:ac:31:55:d6:62:34:49:b8:7f:
e6:51:f1:6d:98:7b:0d:15:ec:e3:9c:70:67:40:11:
0b:85:0b:8c:eb:30:7b:c7:33:5c:60:a5:ee:3c:07:
eb:1a:26:18:45:6c:91:f1:19:d0:43:6f:40:73:83:
f5:3d:37:53:57:21:64:ec:15:e6:a0:f1:fc:8f:9a:
0b:ef:2f:0b:7e:ee:a9:4d:e8:3e:6c:20:06:ad:a0:
12:de:2f:bd:83:ba:47:c7:8e:39:2b:6f:af:39:67:
68:2b:a7:e3:79:ed:f7:f0:5b:11:69:f2:d0:eb:ed:
58:f5:69:91:5d:3a:99:67:62:81:e0:20:38:03:84:
8d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6F:46:BC:9A:A5:0A:75:7E:34:A2:C9:F6:B5:40:38:7B:42:36:B5
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/3W9GvJqlCnV-NKLJ9rVAOHtCNrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.151.0/24
185.204.102.0/24
193.57.164.0/23
Signature Algorithm: sha256WithRSAEncryption
86:e3:f2:cc:d5:e6:e1:e7:e0:64:5e:71:2f:1a:80:d3:cf:0b:
6d:61:1b:c6:c4:6f:66:b6:c7:2e:4b:5e:c6:8a:ac:95:69:86:
c9:f6:5a:2d:de:20:5d:ff:67:0a:6b:17:90:9b:d5:f9:3d:b8:
2f:28:5b:bb:07:2b:e9:d0:6f:11:da:71:f4:7e:63:ba:de:f7:
b5:83:7f:55:67:ff:ca:9f:ab:0c:eb:93:47:35:a0:62:a4:17:
e7:90:92:44:48:b5:15:88:d6:8a:99:95:b4:ce:c1:64:8e:4d:
6a:59:63:f3:d9:1c:8a:a1:c7:72:26:61:6c:e6:79:ec:95:6b:
6c:25:81:a9:6c:69:af:3f:e1:03:39:ca:2f:c8:36:1c:ce:2f:
fb:6b:1a:03:3b:8e:19:75:81:16:f1:3b:f8:37:c7:d7:17:97:
03:50:b1:fb:4e:63:3b:47:e9:9a:9f:35:cb:25:52:c4:66:1c:
3a:dd:c1:f6:68:fa:19:af:76:d3:27:cb:e1:c5:b5:ff:36:31:
70:1e:d1:f4:96:aa:3f:08:81:55:93:13:48:f4:d2:0b:29:5a:
51:65:2e:9f:04:be:7c:e8:76:ac:95:b3:48:70:35:29:1d:80:
fa:b9:95:d2:78:f6:6c:85:40:e4:d9:d8:b7:ce:a7:2c:3b:df:
5f:85:db:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:48:23 2026 by rpki-client