Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/3PP5cZHpE54hIGtHp8kbYyxaZFQ.roa
File: 3PP5cZHpE54hIGtHp8kbYyxaZFQ.roa (raw, json)
Hash identifier: H82bfxWmiHNRJ1H7gR7ROjYOhxBbx/o5pU/AxcHnke8=
Subject key identifier: DC:F3:F9:71:91:E9:13:9E:21:20:6B:47:A7:C9:1B:63:2C:5A:64:54
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 019CB9274EE653858FB2B55E1771C22EEC3B
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/3PP5cZHpE54hIGtHp8kbYyxaZFQ.roa
Signing time: Wed 04 Mar 2026 14:01:26 +0000
ROA not before: Wed 04 Mar 2026 14:01:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136258
IP address blocks: 46.16.128.0/24 maxlen: 24
46.16.129.0/24 maxlen: 24
46.16.130.0/24 maxlen: 24
46.16.131.0/24 maxlen: 24
109.104.152.0/24 maxlen: 24
109.104.153.0/24 maxlen: 24
109.104.155.0/24 maxlen: 24
147.78.0.0/24 maxlen: 24
147.78.1.0/24 maxlen: 24
147.78.2.0/24 maxlen: 24
147.78.3.0/24 maxlen: 24
185.126.236.0/24 maxlen: 24
185.126.237.0/24 maxlen: 24
185.126.238.0/24 maxlen: 24
185.126.239.0/24 maxlen: 24
185.213.20.0/24 maxlen: 24
185.213.21.0/24 maxlen: 24
185.213.23.0/24 maxlen: 24
2a11:840:1::/48 maxlen: 48
2a11:840:3::/48 maxlen: 48
2a11:840:4::/48 maxlen: 48
2a11:840:5::/48 maxlen: 48
2a11:840:6::/48 maxlen: 48
2a11:840:7::/48 maxlen: 48
2a11:840:8::/48 maxlen: 48
2a11:840:9::/48 maxlen: 48
2a11:840:10::/48 maxlen: 48
2a11:840:11::/48 maxlen: 48
2a11:840:12::/48 maxlen: 48
2a11:840:13::/48 maxlen: 48
2a11:840:14::/48 maxlen: 48
2a11:840:16::/48 maxlen: 48
2a11:840:17::/48 maxlen: 48
2a11:840:18::/48 maxlen: 48
2a11:840:19::/48 maxlen: 48
2a11:840:20::/48 maxlen: 48
2a11:840:21::/48 maxlen: 48
2a11:840:22::/48 maxlen: 48
2a11:840:23::/48 maxlen: 48
2a11:840:24::/48 maxlen: 48
2a11:840:25::/48 maxlen: 48
2a11:840:26::/48 maxlen: 48
2a11:840:28::/48 maxlen: 48
2a11:840:30::/48 maxlen: 48
2a11:840:33::/48 maxlen: 48
2a11:840:40::/48 maxlen: 48
2a11:840:41::/48 maxlen: 48
2a11:840:47::/48 maxlen: 48
2a11:840:48::/48 maxlen: 48
2a11:840:53::/48 maxlen: 48
2a11:840:54::/48 maxlen: 48
2a11:840:57::/48 maxlen: 48
2a11:840:60::/48 maxlen: 48
2a11:840:61::/48 maxlen: 48
2a11:840:62::/48 maxlen: 48
2a11:840:63::/48 maxlen: 48
2a11:840:64::/48 maxlen: 48
2a11:840:65::/48 maxlen: 48
2a11:840:66::/48 maxlen: 48
2a11:840:67::/48 maxlen: 48
2a11:840:68::/48 maxlen: 48
2a11:840:69::/48 maxlen: 48
2a11:840:70::/48 maxlen: 48
2a11:840:71::/48 maxlen: 48
2a11:840:72::/48 maxlen: 48
2a11:840:73::/48 maxlen: 48
2a11:840:73:1b::/64 maxlen: 64
2a11:840:74::/48 maxlen: 48
2a11:840:75::/48 maxlen: 48
2a11:840:76::/48 maxlen: 48
2a11:840:77::/48 maxlen: 48
2a11:840:78::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:27:4e:e6:53:85:8f:b2:b5:5e:17:71:c2:2e:ec:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Mar 4 14:01:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcf3f97191e9139e21206b47a7c91b632c5a6454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:ae:61:16:66:f2:d3:30:4b:e2:cf:0f:8b:
86:63:fc:e6:d3:f2:db:58:7e:44:4d:7f:aa:db:47:
fe:df:9a:19:32:54:c8:5a:80:e3:f9:fa:c1:94:ae:
82:75:61:dc:0c:64:6c:ac:de:84:70:35:5f:9c:bc:
d6:30:ad:d5:fa:f6:d4:1d:86:0f:8e:6c:fc:2c:19:
57:62:50:94:10:b7:ae:80:26:e8:ef:ec:d7:2b:be:
da:50:85:a3:e2:a0:69:40:9b:0d:36:e6:37:65:e6:
15:05:a7:1c:e7:bd:b2:c2:66:73:51:6c:3e:29:2c:
29:9a:e3:57:0c:49:76:84:98:17:b4:af:6f:9c:7b:
82:34:b3:59:15:d2:a8:71:15:72:4d:d9:03:97:0b:
52:59:79:dc:45:b4:74:cd:6f:9b:1f:f8:9b:3f:dd:
91:03:ee:d4:04:63:bf:e2:92:15:72:46:a3:a8:02:
40:0a:9a:a5:8f:9b:1c:ea:7c:37:ca:34:8a:c3:02:
3c:52:5b:b2:d5:40:4f:cf:19:b7:97:55:b3:45:3e:
5a:4a:69:d8:ff:2c:59:20:39:1e:b2:5a:39:b5:ee:
68:f0:a4:b5:f8:cd:37:5e:c0:ae:e0:7f:29:ac:77:
05:a6:17:48:da:00:11:50:f6:c3:c4:f3:c6:a5:5d:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F3:F9:71:91:E9:13:9E:21:20:6B:47:A7:C9:1B:63:2C:5A:64:54
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/3PP5cZHpE54hIGtHp8kbYyxaZFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.128.0/22
109.104.152.0/23
109.104.155.0/24
147.78.0.0/22
185.126.236.0/22
185.213.20.0/23
185.213.23.0/24
IPv6:
2a11:840:1::/48
2a11:840:3::-2a11:840:9:ffff:ffff:ffff:ffff:ffff
2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff
2a11:840:16::-2a11:840:19:ffff:ffff:ffff:ffff:ffff
2a11:840:20::-2a11:840:26:ffff:ffff:ffff:ffff:ffff
2a11:840:28::/48
2a11:840:30::/48
2a11:840:33::/48
2a11:840:40::/47
2a11:840:47::-2a11:840:48:ffff:ffff:ffff:ffff:ffff
2a11:840:53::-2a11:840:54:ffff:ffff:ffff:ffff:ffff
2a11:840:57::/48
2a11:840:60::-2a11:840:69:ffff:ffff:ffff:ffff:ffff
2a11:840:70::-2a11:840:78:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
06:3c:5b:4f:ac:6f:86:6f:68:ff:5f:d7:53:76:c6:0d:fb:5b:
e4:dc:bb:b4:c1:66:0c:45:79:01:1f:33:ae:d5:e4:68:66:2a:
7f:aa:b7:de:71:6a:cb:68:20:37:06:cc:8f:ae:48:bb:d0:69:
6d:a8:4b:53:3f:c1:54:40:51:2c:c5:5f:98:84:fb:06:8a:8b:
a2:9d:cf:c3:2b:d7:79:5b:fa:38:17:f7:16:17:11:6c:30:c0:
6a:e2:32:b1:90:5d:53:b5:45:d5:1d:71:4b:44:e8:35:5d:e0:
5b:f2:00:f1:3a:5e:82:4f:eb:f5:38:48:d8:58:16:d8:1a:d9:
24:b1:64:24:55:92:32:ae:4b:72:d1:98:00:86:f5:48:56:79:
4a:c8:7f:f5:48:f7:88:33:a8:85:e1:80:65:47:e0:0d:11:76:
95:da:32:4d:7a:d7:4e:54:a8:d4:8b:2a:d1:3b:73:26:60:b2:
1c:9a:31:f9:89:c8:ce:01:dc:0a:6a:4c:81:fe:22:45:a0:17:
cb:8c:94:65:28:bf:ac:13:63:b0:a2:be:b2:c0:c3:16:58:03:
99:8d:20:00:6b:96:9d:4c:d8:f4:f5:45:40:e7:cd:ef:d1:06:
17:33:96:e7:25:7e:18:3f:fe:88:9a:e7:c4:cb:d7:d7:75:5c:
b7:3d:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 20:42:46 2026 by rpki-client