Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/3I_TdDY_CFUZLxfCDh8c13Fijg0.roa
File: 3I_TdDY_CFUZLxfCDh8c13Fijg0.roa (raw, json)
Hash identifier: 0M6zqitb2dmVjZw8EoYFvEPiDuDW7NMYmtspEZdev3U=
Subject key identifier: DC:8F:D3:74:36:3F:08:55:19:2F:17:C2:0E:1F:1C:D7:71:62:8E:0D
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 01A12FC7EA7DE85A6221E8666E724C9FFD3A
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/3I_TdDY_CFUZLxfCDh8c13Fijg0.roa
Signing time: Mon 12 Oct 2026 11:03:13 +0000
ROA not before: Mon 12 Oct 2026 11:03:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25441
IP address blocks: 62.231.32.0/19 maxlen: 19
78.135.128.0/17 maxlen: 17
78.135.208.0/21 maxlen: 21
78.135.216.0/21 maxlen: 21
78.135.224.0/21 maxlen: 21
78.135.232.0/21 maxlen: 21
78.135.240.0/21 maxlen: 21
78.135.248.0/21 maxlen: 21
83.141.117.0/24 maxlen: 24
87.192.64.0/20 maxlen: 20
87.192.82.0/23 maxlen: 23
87.192.222.0/23 maxlen: 23
87.232.0.0/19 maxlen: 19
87.232.192.0/24 maxlen: 24
87.232.194.0/23 maxlen: 23
89.124.0.0/24 maxlen: 24
89.127.254.0/23 maxlen: 23
185.247.52.0/22 maxlen: 22
2001:4d68::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c7:ea:7d:e8:5a:62:21:e8:66:6e:72:4c:9f:fd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Oct 12 11:03:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc8fd374363f0855192f17c20e1f1cd771628e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:b9:56:44:69:e7:20:40:a5:eb:26:f2:dd:
46:7d:65:58:39:01:4b:b6:e1:f3:2c:36:0e:06:bc:
49:9f:35:f4:e5:07:5b:2a:e2:a8:95:6c:7f:95:55:
56:60:6c:6f:99:4d:60:c4:07:80:c4:68:02:fb:59:
37:03:28:1e:d1:22:87:c0:c6:5d:81:3f:5d:f3:b7:
13:fd:3a:99:f2:cf:d1:c6:8c:f3:91:e4:3a:3a:be:
a0:40:90:dd:c0:6b:89:cf:d0:c7:c7:5c:99:fb:54:
fa:fa:17:ae:c4:83:a0:1c:22:77:d9:a6:5c:0f:59:
6b:b5:0a:36:b7:5f:b4:1b:7f:a2:48:9d:bc:0a:b8:
53:3a:52:bc:66:f4:00:b3:ab:c9:f7:2e:89:19:e5:
a2:8f:15:e3:4e:b2:5f:a8:9d:80:a0:85:75:04:69:
8f:d3:5d:db:99:14:2f:2b:f4:53:1e:55:6f:ab:16:
88:22:c3:2a:aa:96:c1:4d:34:f2:fd:cc:91:aa:99:
1a:8f:f0:4a:f8:e6:b0:77:6a:c4:cf:64:d3:57:f3:
56:d3:7c:67:98:34:55:cc:44:cc:f0:43:3b:7c:88:
12:d4:e3:a3:02:e3:2e:3e:44:f7:1f:c5:f8:1c:22:
df:99:c3:03:f0:5e:3d:dd:50:97:3b:9f:2c:c5:b3:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8F:D3:74:36:3F:08:55:19:2F:17:C2:0E:1F:1C:D7:71:62:8E:0D
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/3I_TdDY_CFUZLxfCDh8c13Fijg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.231.32.0/19
78.135.128.0/17
83.141.117.0/24
87.192.64.0/20
87.192.82.0/23
87.192.222.0/23
87.232.0.0/19
87.232.192.0/24
87.232.194.0/23
89.124.0.0/24
89.127.254.0/23
185.247.52.0/22
IPv6:
2001:4d68::/32
Signature Algorithm: sha256WithRSAEncryption
8e:b7:a4:51:c7:8c:9f:12:b2:c7:43:17:20:a3:78:09:38:db:
7c:d3:d9:7a:92:51:06:25:d8:39:8a:02:ae:d3:65:c2:39:25:
8d:e6:c8:59:cc:3a:88:a2:56:54:8a:34:4a:78:06:15:37:47:
a3:4b:46:5f:31:40:d4:d7:7c:a8:78:2d:5e:6b:8e:6b:93:82:
bd:11:d8:d0:6e:08:8c:d5:5d:68:4a:42:97:78:b9:ec:31:55:
37:ed:69:4f:4f:54:1d:52:36:84:9d:c7:ba:b5:50:79:16:0b:
8a:1b:01:8d:b3:52:1f:ee:f4:9b:da:f2:b5:e2:cd:46:e0:8f:
46:2a:35:e0:2b:64:63:79:0a:23:90:1e:37:d5:65:5c:f4:af:
3b:4c:03:c0:9d:b3:5c:aa:f3:08:ce:3c:ee:2f:25:a4:cf:11:
76:35:9e:43:fa:68:2d:c5:dd:74:18:d0:da:89:2d:96:c9:ef:
ec:3b:2f:85:3f:86:33:84:b8:f3:79:e3:8f:e5:f2:e9:75:8e:
9f:ee:14:e5:92:6d:29:1c:07:77:83:c8:93:13:f3:06:20:2c:
98:22:17:7d:34:b3:a8:a1:6e:c0:ce:9c:0e:e5:0a:71:a5:00:
f3:ac:48:97:d8:27:84:68:5d:df:83:e2:be:97:87:02:0f:98:
da:7c:cc:51
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAaEvx+p96FpiIehmbnJMn/06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYTFjZmQ3NTdmNTFmMmZlYjc0NTA5ZTljMzliZTQ2ODA2
YmU2NDIwHhcNMjYxMDEyMTEwMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzhmZDM3NDM2M2YwODU1MTkyZjE3YzIwZTFmMWNkNzcxNjI4ZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMe5VkRp5yBApesm8t1GfWVYOQFL
tuHzLDYOBrxJnzX05QdbKuKolWx/lVVWYGxvmU1gxAeAxGgC+1k3Ayge0SKHwMZd
gT9d87cT/TqZ8s/RxozzkeQ6Or6gQJDdwGuJz9DHx1yZ+1T6+heuxIOgHCJ32aZc
D1lrtQo2t1+0G3+iSJ28CrhTOlK8ZvQAs6vJ9y6JGeWijxXjTrJfqJ2AoIV1BGmP
013bmRQvK/RTHlVvqxaIIsMqqpbBTTTy/cyRqpkaj/BK+Oawd2rEz2TTV/NW03xn
mDRVzETM8EM7fIgS1OOjAuMuPkT3H8X4HCLfmcMD8F493VCXO58sxbNq3wIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFNyP03Q2PwhVGS8Xwg4fHNdxYo4NMB8GA1UdIwQY
MBaAFCuhz9dX9R8v63RQnpw5vkaAa+ZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUt
NTc4OWRlNDI0YTQyLzEvM0lfVGREWV9DRlVaTHhmQ0RoOGMxM0ZpamcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUtNTc4OWRlNDI0YTQy
LzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQFPucgAwQH
ToeAAwQAU411AwQEV8BAAwQBV8BSAwQBV8DeAwQFV+gAAwQAV+jAAwQBV+jCAwQA
WXwAAwQBWX/+AwQCufc0MA0EAgACMAcDBQAgAU1oMA0GCSqGSIb3DQEBCwUAA4IB
AQCOt6RRx4yfErLHQxcgo3gJONt809l6klEGJdg5igKu02XCOSWN5shZzDqIolZU
ijRKeAYVN0ejS0ZfMUDU13yoeC1ea45rk4K9EdjQbgiM1V1oSkKXeLnsMVU37WlP
T1QdUjaEnce6tVB5FguKGwGNs1If7vSb2vK14s1G4I9GKjXgK2RjeQojkB431WVc
9K87TAPAnbNcqvMIzjzuLyWkzxF2NZ5D+mgtxd10GNDaiS2Wye/sOy+FP4YzhLjz
eeOP5fLpdY6f7hTlkm0pHAd3g8iTE/MGICyYIhd9NLOooW7AzpwO5QpxpQDzrEiX
2CeEaF3fg+K+l4cCD5jafMxR
-----END CERTIFICATE-----
Generated at Thu Oct 22 12:59:56 2026 by rpki-client