Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/3RCDJt1deifEOXm02dSal3fDja4.roa
File: 3RCDJt1deifEOXm02dSal3fDja4.roa (raw, json)
Hash identifier: g0j28bx4768J7FBy17Gxo6hVJEp8aaXWdKKvas8FlM4=
Subject key identifier: DD:10:83:26:DD:5D:7A:27:C4:39:79:B4:D9:D4:9A:97:77:C3:8D:AE
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0198F1FFE57279CEDA535D6F213AC3990A97
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/3RCDJt1deifEOXm02dSal3fDja4.roa
Signing time: Thu 28 Aug 2025 18:45:36 +0000
ROA not before: Thu 28 Aug 2025 18:45:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.75.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.82.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.87.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.90.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.99.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.100.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.107.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.112.0/23 maxlen: 23
141.101.114.0/23 maxlen: 23
141.101.120.0/22 maxlen: 22
188.114.96.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.98.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c0:1c22::/48 maxlen: 48
2a06:98c0:1c23::/48 maxlen: 48
2a06:98c0:1c24::/48 maxlen: 48
2a06:98c0:1c25::/48 maxlen: 48
2a06:98c0:1c26::/48 maxlen: 48
2a06:98c0:1c27::/48 maxlen: 48
2a06:98c0:1c28::/48 maxlen: 48
2a06:98c0:1c29::/48 maxlen: 48
2a06:98c0:1c2a::/48 maxlen: 48
2a06:98c0:1c2b::/48 maxlen: 48
2a06:98c0:1c2c::/48 maxlen: 48
2a06:98c0:1c2d::/48 maxlen: 48
2a06:98c0:1c2e::/48 maxlen: 48
2a06:98c0:1c2f::/48 maxlen: 48
2a06:98c0:1c30::/48 maxlen: 48
2a06:98c0:1c31::/48 maxlen: 48
2a06:98c0:1c32::/48 maxlen: 48
2a06:98c0:1c33::/48 maxlen: 48
2a06:98c0:1c34::/48 maxlen: 48
2a06:98c0:1c35::/48 maxlen: 48
2a06:98c0:1c36::/48 maxlen: 48
2a06:98c0:1c37::/48 maxlen: 48
2a06:98c0:1c38::/48 maxlen: 48
2a06:98c0:1c39::/48 maxlen: 48
2a06:98c0:1c3a::/48 maxlen: 48
2a06:98c0:1c3b::/48 maxlen: 48
2a06:98c0:1c3c::/48 maxlen: 48
2a06:98c0:1c3d::/48 maxlen: 48
2a06:98c0:1c3e::/48 maxlen: 48
2a06:98c0:1c3f::/48 maxlen: 48
2a06:98c0:1c40::/48 maxlen: 48
2a06:98c0:1c41::/48 maxlen: 48
2a06:98c0:1c42::/48 maxlen: 48
2a06:98c0:1c43::/48 maxlen: 48
2a06:98c0:1c44::/48 maxlen: 48
2a06:98c0:1c45::/48 maxlen: 48
2a06:98c0:1c46::/48 maxlen: 48
2a06:98c0:1c47::/48 maxlen: 48
2a06:98c0:1c48::/48 maxlen: 48
2a06:98c0:1c49::/48 maxlen: 48
2a06:98c0:1c4b::/48 maxlen: 48
2a06:98c0:1c4c::/48 maxlen: 48
2a06:98c0:1c4d::/48 maxlen: 48
2a06:98c0:1c4e::/48 maxlen: 48
2a06:98c0:1c4f::/48 maxlen: 48
2a06:98c0:1c50::/48 maxlen: 48
2a06:98c0:1c51::/48 maxlen: 48
2a06:98c0:1c52::/48 maxlen: 48
2a06:98c0:1c53::/48 maxlen: 48
2a06:98c0:1c54::/48 maxlen: 48
2a06:98c0:1c55::/48 maxlen: 48
2a06:98c0:1c56::/48 maxlen: 48
2a06:98c0:1c57::/48 maxlen: 48
2a06:98c0:1c58::/48 maxlen: 48
2a06:98c0:1c5a::/48 maxlen: 48
2a06:98c0:1c5b::/48 maxlen: 48
2a06:98c0:1c5c::/48 maxlen: 48
2a06:98c0:1c5d::/48 maxlen: 48
2a06:98c0:1c5e::/48 maxlen: 48
2a06:98c0:1c5f::/48 maxlen: 48
2a06:98c0:1c60::/48 maxlen: 48
2a06:98c0:1c61::/48 maxlen: 48
2a06:98c0:1c62::/48 maxlen: 48
2a06:98c0:1c63::/48 maxlen: 48
2a06:98c0:1c64::/48 maxlen: 48
2a06:98c0:1c65::/48 maxlen: 48
2a06:98c0:1c66::/48 maxlen: 48
2a06:98c0:1c67::/48 maxlen: 48
2a06:98c0:1c68::/48 maxlen: 48
2a06:98c0:1c69::/48 maxlen: 48
2a06:98c0:1c6a::/48 maxlen: 48
2a06:98c0:1c6b::/48 maxlen: 48
2a06:98c0:1c6c::/48 maxlen: 48
2a06:98c0:1c6d::/48 maxlen: 48
2a06:98c0:1c6e::/48 maxlen: 48
2a06:98c0:3609::/48 maxlen: 48
2a06:98c0:3619::/48 maxlen: 48
2a06:98c0:361a::/48 maxlen: 48
2a06:98c1:40::/48 maxlen: 48
2a06:98c1:41::/48 maxlen: 48
2a06:98c1:42::/48 maxlen: 48
2a06:98c1:43::/48 maxlen: 48
2a06:98c1:48::/48 maxlen: 48
2a06:98c1:49::/48 maxlen: 48
2a06:98c1:4a::/48 maxlen: 48
2a06:98c1:4b::/48 maxlen: 48
2a06:98c1:4d::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c1:54::/48 maxlen: 48
2a06:98c1:56::/48 maxlen: 48
2a06:98c1:57::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:59::/48 maxlen: 48
2a06:98c1:5a::/48 maxlen: 48
2a06:98c1:5b::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f1:ff:e5:72:79:ce:da:53:5d:6f:21:3a:c3:99:0a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Aug 28 18:45:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd108326dd5d7a27c43979b4d9d49a9777c38dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6e:0a:ff:0b:90:a8:19:cc:00:27:f6:8a:d5:
14:c6:47:e0:0e:a5:99:51:91:38:7b:c8:07:00:8c:
b4:7d:46:ec:55:ee:ce:ae:bb:8a:05:af:0f:b0:a9:
73:1a:b8:24:61:53:a9:0d:7b:b5:be:31:7f:78:4c:
25:46:27:42:cc:ee:83:76:1e:cb:68:58:93:92:7b:
d0:31:1e:a9:21:42:e4:73:52:d5:ba:11:3c:f1:aa:
14:ea:4d:bc:ee:51:51:85:e8:d6:65:c0:f8:de:84:
1a:e2:86:b8:b4:1c:4e:76:4f:4c:da:9a:e7:91:d0:
bb:60:3f:bd:6a:ec:cf:78:ac:50:0a:dd:d8:d0:24:
ea:58:dd:b7:b1:23:79:1b:ba:86:d6:2a:f5:d4:30:
c5:46:8c:8c:a9:90:84:10:76:15:70:e3:0d:86:4f:
3c:4c:45:59:36:cf:25:22:bc:c4:28:bb:5a:e4:25:
fd:e6:c9:37:b7:20:62:d8:93:a2:86:97:7a:5b:05:
06:e4:79:66:6b:b3:a7:de:e0:da:67:32:52:57:28:
82:80:10:63:66:fd:8e:8c:be:4f:b2:75:6e:06:5f:
0b:dc:5b:88:ba:fd:0c:02:bb:5f:6d:ba:71:cb:18:
df:8e:4a:37:4b:07:43:89:2c:58:ce:ec:81:63:08:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:10:83:26:DD:5D:7A:27:C4:39:79:B4:D9:D4:9A:97:77:C3:8D:AE
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/3RCDJt1deifEOXm02dSal3fDja4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::-2a06:98c0:1c49:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c4b::-2a06:98c0:1c58:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c5a::-2a06:98c0:1c6e:ffff:ffff:ffff:ffff:ffff
2a06:98c0:3609::/48
2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
2a06:98c1:40::/46
2a06:98c1:48::/46
2a06:98c1:4d::/48
2a06:98c1:50::-2a06:98c1:5b:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
33:77:d0:21:0e:a1:97:f8:19:3e:6c:9b:ae:c7:f6:cc:87:59:
50:43:c3:a5:01:36:ab:6c:83:5b:1c:09:c8:43:f1:15:92:1a:
e6:1d:74:4c:07:00:db:c4:f0:5c:55:fb:1c:d8:4b:e4:87:d6:
ef:fa:80:c5:fe:2e:e3:18:53:39:8b:19:56:cb:61:ea:76:cb:
c1:59:0a:fc:6a:ef:95:4e:26:90:e7:f3:c6:e6:a9:1a:23:87:
84:e4:bc:18:16:58:22:38:9a:10:a1:b0:3f:2a:89:31:53:f2:
b9:61:2e:cb:30:6d:6a:c1:44:5a:9a:10:e7:ae:f5:4d:6c:57:
9c:61:01:61:8f:45:c8:9c:68:f1:c0:46:61:78:c2:84:a0:2b:
c2:26:2e:ba:60:aa:e4:7a:52:ed:af:00:a6:12:06:f8:88:d3:
63:f7:f2:a7:84:29:78:03:e0:93:dc:27:42:ff:bf:5d:cc:31:
ad:1d:c4:98:c4:14:71:66:8d:59:62:c4:c4:40:46:fd:ac:7a:
de:82:3f:13:ff:39:ae:fc:d4:d8:82:96:6e:cf:d1:5d:cd:45:
70:ce:bb:78:a8:bf:0e:2d:f4:5a:cd:26:cc:40:89:f1:e8:50:
db:53:03:04:a3:00:4f:08:c1:ee:56:ab:d9:f9:89:37:11:c4:
eb:16:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:18 2025 by rpki-client