Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/3VLY5D5jY6Fg74P9CPwHLDDacBs.roa
File: 3VLY5D5jY6Fg74P9CPwHLDDacBs.roa (raw, json)
Hash identifier: 6wXFx6QNzRp4ziQbCTHhGbk3alt7Zu9izUtYs34c2K0=
Subject key identifier: DD:52:D8:E4:3E:63:63:A1:60:EF:83:FD:08:FC:07:2C:30:DA:70:1B
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 019E63335BCAC4A3CE07EA6CDB092E73D84A
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/3VLY5D5jY6Fg74P9CPwHLDDacBs.roa
Signing time: Tue 26 May 2026 07:32:50 +0000
ROA not before: Tue 26 May 2026 07:32:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202918
IP address blocks: 185.76.74.0/23 maxlen: 24
185.150.159.0/24 maxlen: 24
185.246.28.0/23 maxlen: 24
2a07:71c0::/29 maxlen: 48
2a0d:7380::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:33:5b:ca:c4:a3:ce:07:ea:6c:db:09:2e:73:d8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: May 26 07:32:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd52d8e43e6363a160ef83fd08fc072c30da701b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:50:76:79:81:67:98:e6:71:c0:47:df:ca:
d9:8f:51:d4:a0:21:e1:83:9c:5e:cb:c0:de:c6:b2:
3e:ca:48:73:86:01:34:5f:a7:05:f3:50:39:d7:e9:
3e:a9:9f:95:d7:7b:f8:2d:47:59:bc:40:c1:24:eb:
d4:b8:8a:eb:b4:b8:83:82:7b:9f:da:7b:18:19:05:
fc:79:7d:e1:39:c2:24:94:cd:03:80:3a:24:44:e1:
b6:f5:89:48:5f:8a:91:2d:e7:22:fd:2c:60:b7:a0:
3a:c8:69:80:cb:cd:e0:b9:68:72:48:39:fb:ae:4f:
91:ae:2f:10:75:7f:c3:66:c6:94:a4:0b:62:33:3d:
12:06:e2:9c:08:7f:85:bc:8b:82:d0:84:86:a1:6f:
27:1b:e1:9d:ad:7d:c4:ed:db:6e:d9:01:eb:6e:e3:
ef:c3:20:c5:f9:68:c0:a7:66:e6:06:a4:f9:7f:f9:
b1:a1:23:d4:e4:41:68:ee:ad:8a:d4:0a:f0:3d:ad:
92:71:3e:99:d5:20:18:95:1d:ec:4b:1e:4b:f7:a6:
c3:69:25:f5:3d:be:fc:8a:ec:88:52:12:49:e7:71:
09:43:76:81:73:26:fc:f9:35:c1:69:0c:d4:72:67:
ee:2d:65:b3:c5:ab:6d:a9:cb:91:9f:1c:28:61:e9:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:D8:E4:3E:63:63:A1:60:EF:83:FD:08:FC:07:2C:30:DA:70:1B
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/3VLY5D5jY6Fg74P9CPwHLDDacBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.74.0/23
185.150.159.0/24
185.246.28.0/23
IPv6:
2a07:71c0::/29
2a0d:7380::/29
Signature Algorithm: sha256WithRSAEncryption
18:04:aa:3d:b7:f3:3e:33:2a:59:f0:c6:f2:c5:a4:26:6b:fb:
d3:7a:a3:f7:e3:d3:a1:fd:9e:a1:21:24:e8:d5:2e:2c:90:7e:
e2:da:82:8b:43:3c:65:eb:7c:26:1a:bb:18:6e:7e:e4:3e:6a:
25:a4:ab:e8:bf:e0:6f:5e:b8:7a:c1:80:b4:44:64:54:b9:4e:
b7:7e:24:ad:02:a1:91:b8:75:73:56:6f:25:e1:50:6b:c9:5d:
5d:08:c1:6a:1d:29:36:8c:eb:8a:2f:a4:a4:68:49:7d:75:68:
0e:ad:88:a0:b9:68:e1:ce:c1:0a:1f:4d:ae:25:c1:a9:03:1d:
a8:9c:90:f1:fd:64:79:18:66:72:3e:1f:5c:d4:dc:05:f0:26:
a6:6f:8d:f4:21:82:c6:38:8a:4b:86:fe:24:5c:df:c7:b6:0a:
28:3e:cb:7a:65:37:d9:24:ad:aa:e6:49:2a:60:ad:7b:2b:fc:
98:1a:c7:0a:de:90:11:1d:49:d2:fc:73:66:97:0d:d8:c7:be:
40:5d:97:a4:6b:07:a0:e4:2b:76:3e:26:8f:d4:78:b3:78:e7:
c6:da:a8:68:b2:96:72:a1:ce:63:27:c3:76:22:da:51:a8:8a:
89:bd:e6:d5:a5:69:f0:7d:57:39:73:0c:b1:73:db:a0:9c:99:
0a:1e:d0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:31:25 2026 by rpki-client