Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/3NYKAVMXxVgf7TsAiwdPWywZQKs.roa
File: 3NYKAVMXxVgf7TsAiwdPWywZQKs.roa (raw, json)
Hash identifier: g8rK7SnoDVJphE9pbIeGL2s6IpfHenSTeQYH+yMvx+E=
Subject key identifier: DC:D6:0A:01:53:17:C5:58:1F:ED:3B:00:8B:07:4F:5B:2C:19:40:AB
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 019E3A565556564F8B8D6533F2EC0E61960D
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/3NYKAVMXxVgf7TsAiwdPWywZQKs.roa
Signing time: Mon 18 May 2026 09:06:36 +0000
ROA not before: Mon 18 May 2026 09:06:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209836
IP address blocks: 5.160.46.0/24 maxlen: 24
77.104.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:56:55:56:56:4f:8b:8d:65:33:f2:ec:0e:61:96:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: May 18 09:06:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcd60a015317c5581fed3b008b074f5b2c1940ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:02:ef:52:ee:ca:e4:a7:9e:79:23:ce:58:
64:f0:27:48:d2:9f:23:7f:d4:99:5a:5d:b9:fc:a9:
a2:de:a5:bd:02:6e:1f:a4:44:cc:fd:8f:b5:79:71:
2f:a6:63:26:01:df:0c:08:15:9f:b4:03:c2:85:a6:
1e:f5:66:d1:2c:6f:a4:a1:7d:52:f6:5c:ba:9b:63:
8c:41:8c:de:5f:9f:87:73:8b:0f:d7:e7:f8:a9:0a:
7c:61:0d:4b:1f:cb:3d:7b:c1:74:2d:9d:e6:be:a6:
09:dc:35:c6:cf:d5:4f:5b:e5:7d:9d:3f:02:00:5a:
06:51:c7:94:67:c4:6e:cf:9b:71:c0:a5:5f:45:2d:
97:b3:4c:6b:bd:2d:5b:bf:ca:aa:ee:54:c4:5a:b2:
1a:51:ae:b0:6b:10:e6:eb:35:15:d6:af:d8:97:bf:
0a:83:b5:a1:04:1f:58:c7:90:18:6e:8e:23:f4:db:
c1:84:08:fd:3d:7f:cf:1d:6e:8b:46:ba:35:b1:ba:
9d:0c:27:82:45:49:e6:ab:8b:50:b3:05:4f:4c:c7:
d6:ee:c9:94:08:c1:22:36:05:06:96:c1:d1:a0:47:
44:0f:70:65:97:42:c2:70:85:58:05:c6:b4:ed:6a:
01:79:bb:03:f6:dd:ef:a1:7e:05:34:2b:59:4f:12:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D6:0A:01:53:17:C5:58:1F:ED:3B:00:8B:07:4F:5B:2C:19:40:AB
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/3NYKAVMXxVgf7TsAiwdPWywZQKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.46.0/24
77.104.94.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4b:15:4a:a4:8a:6b:c3:89:fb:3d:34:2b:15:b7:86:54:ed:
c6:e9:10:31:fd:95:55:0d:5d:46:89:ca:ea:d1:a2:05:94:5e:
46:38:4e:8c:45:90:0b:02:58:01:b6:91:5b:ae:b3:29:62:9f:
9f:8b:69:92:33:55:fa:61:89:e5:46:5d:f6:e6:9b:22:f8:9b:
69:82:d4:a0:1a:79:9a:2d:85:32:d7:74:87:d0:7c:4a:14:74:
58:77:89:3e:6e:51:28:a2:c7:51:df:8d:eb:a5:4c:9c:49:42:
37:3d:15:3f:b1:f2:bd:6b:69:6f:29:32:91:5a:33:83:fb:26:
b9:d6:de:13:fc:f9:ff:7e:0b:75:30:59:a5:be:aa:64:bb:19:
ce:ce:c7:ea:a1:e5:f5:96:37:02:41:18:1e:79:0f:c6:e7:88:
c6:bb:f1:e6:66:56:14:11:e1:f9:ee:3a:eb:ad:12:68:18:55:
40:ce:c5:c0:1c:04:58:96:60:60:f4:5b:45:dc:c9:98:92:b6:
c5:04:ca:c6:de:38:87:70:64:07:02:c5:6b:6d:b4:d4:d0:0d:
02:d5:1f:77:2b:55:9b:8a:ae:a5:f7:d4:9a:29:e8:ed:ef:ee:
2c:50:89:54:ef:ab:fe:de:c2:0e:16:76:92:03:d1:f4:7d:ff:
cb:88:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:42 2026 by rpki-client