Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3a_zm362S86bsVhMTGhAyixskRc.roa
File: 3a_zm362S86bsVhMTGhAyixskRc.roa (raw, json)
Hash identifier: p1u/Omyiz82I3G4UnDZ5Ch9pXzZ1k9JwdRFhiNGJGgU=
Subject key identifier: DD:AF:F3:9B:7E:B6:4B:CE:9B:B1:58:4C:4C:68:40:CA:2C:6C:91:17
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0421CF3CDF23F22E0C6EDA5B886A904A9
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3a_zm362S86bsVhMTGhAyixskRc.roa
Signing time: Thu 27 Aug 2026 07:26:28 +0000
ROA not before: Thu 27 Aug 2026 07:26:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 37.98.147.0/24 maxlen: 24
37.98.149.0/24 maxlen: 24
81.168.58.0/24 maxlen: 24
81.168.109.0/24 maxlen: 24
82.153.54.0/24 maxlen: 24
217.144.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:1c:f3:cd:f2:3f:22:e0:c6:ed:a5:b8:86:a9:04:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 27 07:26:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddaff39b7eb64bce9bb1584c4c6840ca2c6c9117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:74:ee:86:15:b1:e6:ae:4a:59:dd:41:17:
c8:9c:ca:8e:c4:91:c5:52:26:a0:98:a3:0a:28:6d:
ef:09:8a:10:7c:3c:df:b3:ec:f5:ae:79:93:b4:f8:
29:21:fb:c9:d9:b4:0d:ed:ee:7a:46:d1:74:bb:06:
48:7c:b7:aa:d1:04:02:56:9a:ab:05:ea:c3:a9:4c:
b1:2c:a7:74:1c:c7:08:7c:88:01:f2:2b:7e:10:a1:
d3:79:22:23:c2:90:61:73:d5:e4:37:54:db:74:38:
3b:d7:cc:59:bd:75:12:bf:92:71:3d:b6:3b:81:82:
56:a1:a2:ca:05:b0:71:5e:f6:f5:09:fd:cd:66:4c:
4d:1f:13:a4:1d:1f:ef:57:35:86:ed:ac:cf:08:c1:
53:2b:b9:55:2d:7d:5c:ee:be:7f:e4:8f:ee:d2:bc:
e9:bb:63:9b:25:e3:fc:64:05:17:d8:42:50:85:fb:
0b:58:4b:21:99:35:4f:88:19:dd:d8:7c:0c:1b:ea:
2b:be:be:7c:eb:21:28:1c:6a:70:d4:13:e4:1d:2b:
39:a8:74:65:9a:7f:12:58:75:b2:81:84:43:b4:59:
93:ba:3f:ba:52:ea:e0:52:01:76:79:fe:65:cc:4d:
2a:ee:a7:f3:f2:57:26:5c:6d:a7:82:99:8f:61:2e:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AF:F3:9B:7E:B6:4B:CE:9B:B1:58:4C:4C:68:40:CA:2C:6C:91:17
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3a_zm362S86bsVhMTGhAyixskRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.147.0/24
37.98.149.0/24
81.168.58.0/24
81.168.109.0/24
82.153.54.0/24
217.144.153.0/24
Signature Algorithm: sha256WithRSAEncryption
07:08:fb:9c:ff:b8:a3:03:9a:f9:1b:0e:66:03:28:e7:d4:f5:
90:55:1b:9a:60:d0:9a:56:2a:6e:c3:36:67:c6:7a:97:0b:5a:
ed:6d:d7:d6:c3:43:75:d9:e6:e8:58:47:13:99:dd:3c:fb:2f:
04:e7:e5:a7:32:47:33:ae:d4:0e:09:ae:2b:59:55:62:f1:d4:
34:9d:d6:4b:e4:0c:70:82:7f:bf:55:c1:c4:29:e8:6e:fd:fd:
57:14:8e:bb:84:89:a4:62:23:9c:4c:31:88:94:98:e5:f0:7f:
3d:25:09:6e:37:7c:a4:5b:09:4c:a2:51:6a:3c:4e:15:83:02:
4d:4f:c4:03:eb:23:05:23:a8:87:e1:7d:1f:cc:65:62:86:e2:
e2:ca:60:76:ff:ac:9d:7c:5d:14:b3:69:28:e7:cd:71:4e:94:
09:64:2e:d3:3c:92:0a:b2:3c:b2:c1:58:da:24:fb:c0:71:14:
89:f8:06:10:25:32:1a:f1:91:e7:53:19:54:cb:c8:00:85:fe:
ee:3d:88:3e:e1:fd:dc:18:87:c6:a1:f9:12:b4:ed:ee:10:9b:
be:cc:e7:d4:a1:a5:89:92:82:87:04:3c:45:93:2f:0e:72:7b:
ee:a2:24:e5:fb:be:4c:26:24:52:39:a4:0f:d6:56:de:42:1d:
7a:0a:64:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:08 2026 by rpki-client