Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/3bzICwbkowLXVE3DQanjIH5PzRo.roa
File: 3bzICwbkowLXVE3DQanjIH5PzRo.roa (raw, json)
Hash identifier: vdv2BX34cA9zfOUvck+cu7XQJJEi8LmDfNVC1P2M+0U=
Subject key identifier: DD:BC:C8:0B:06:E4:A3:02:D7:54:4D:C3:41:A9:E3:20:7E:4F:CD:1A
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 01A15376D44B2832105E89045CC83E91B609
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/3bzICwbkowLXVE3DQanjIH5PzRo.roa
Signing time: Mon 19 Oct 2026 09:20:58 +0000
ROA not before: Mon 19 Oct 2026 09:20:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51055
IP address blocks: 46.17.160.0/21 maxlen: 24
185.62.156.0/22 maxlen: 24
193.34.186.0/23 maxlen: 24
194.33.13.0/24 maxlen: 24
206.245.216.0/21 maxlen: 24
2a00:5f00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:76:d4:4b:28:32:10:5e:89:04:5c:c8:3e:91:b6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: Oct 19 09:20:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddbcc80b06e4a302d7544dc341a9e3207e4fcd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:c5:fa:f3:fa:66:46:30:2d:03:08:1d:bb:
b7:99:65:5f:51:38:ee:65:2a:2c:34:9c:6f:bc:2c:
ff:fa:3e:79:d2:5e:6e:bc:5d:37:08:29:19:f4:92:
e7:25:e3:e9:e4:61:e2:9c:ce:45:ff:1d:a0:ba:ed:
96:49:79:43:8d:1a:cf:48:cd:e8:96:fb:8a:5a:09:
1b:da:86:87:c8:a9:55:90:b5:8b:b4:4e:d0:de:69:
2c:ae:23:76:d8:18:09:2c:af:ae:b0:3c:bd:c2:d4:
61:dc:b4:06:25:5b:a8:5c:67:4a:c2:74:3e:49:b7:
4a:d3:25:f2:1e:9c:80:30:0f:0e:31:98:12:93:06:
bf:5b:04:83:a8:c1:41:97:d4:48:99:81:37:14:e9:
a0:75:3d:d1:d4:80:bb:8b:94:2e:21:fd:d3:a4:1f:
51:b5:c3:33:b1:21:ec:28:b9:75:56:1c:d8:3b:df:
b9:1c:53:2a:23:fd:a0:f9:cc:c5:09:8d:1e:47:aa:
49:0f:f4:a3:d4:bf:db:a6:48:78:f0:5e:f8:69:db:
8e:66:84:f5:88:c5:28:3d:2d:f1:ed:6f:32:4e:7a:
8d:d3:55:e8:84:31:c1:65:20:65:32:64:6e:de:88:
24:92:df:50:0d:12:f1:70:57:44:96:35:24:fd:14:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BC:C8:0B:06:E4:A3:02:D7:54:4D:C3:41:A9:E3:20:7E:4F:CD:1A
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/3bzICwbkowLXVE3DQanjIH5PzRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.160.0/21
185.62.156.0/22
193.34.186.0/23
194.33.13.0/24
206.245.216.0/21
IPv6:
2a00:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
02:d8:e0:04:b7:04:da:88:18:68:cd:bc:e3:9b:1a:bf:3a:5b:
73:25:2a:18:48:69:4c:93:21:91:39:3b:e6:38:e9:68:b9:d5:
aa:18:8a:ed:ab:b5:fe:ef:0e:e0:bd:b4:a7:aa:98:5b:37:21:
81:3c:6c:cd:67:92:3e:b2:32:e6:b7:fd:06:52:4d:3e:f9:9b:
d1:25:9c:63:15:cf:09:f8:ab:1b:dc:12:14:07:b9:f8:5d:bb:
73:92:ab:e0:42:ba:df:45:b3:1c:97:6e:10:16:53:97:8f:75:
e9:0d:9f:aa:6d:3c:81:b7:ba:9d:5f:16:ac:76:27:51:dc:91:
cf:1b:c3:c7:fe:42:8b:c0:45:3c:82:a8:22:13:11:f7:90:d0:
23:66:78:9e:38:ca:9a:3e:49:41:a4:e6:70:25:e7:db:cc:a2:
2d:7b:40:ce:ca:a4:98:f7:88:4e:24:59:3e:e7:32:33:80:19:
f0:3e:4a:38:6f:7d:6d:da:48:92:f5:da:d1:bf:65:c0:5b:80:
eb:18:e8:6e:1d:88:64:f4:13:ac:17:ce:33:fe:8b:09:87:c2:
5e:44:23:a3:cb:8b:5a:a9:19:9a:ca:a4:2f:b1:5f:e1:2a:df:
1d:3e:77:7f:93:17:5b:da:3b:f1:ff:55:60:88:e8:0f:15:c6:
d0:6e:de:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:29 2026 by rpki-client