Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/3jSCzeBKCqHKj3LBiqrpv2NSbdQ.roa
File: 3jSCzeBKCqHKj3LBiqrpv2NSbdQ.roa (raw, json)
Hash identifier: EikodknWnDSw3LBp6H1YfYKYjDOFn+n93bSMqghEjMk=
Subject key identifier: DE:34:82:CD:E0:4A:0A:A1:CA:8F:72:C1:8A:AA:E9:BF:63:52:6D:D4
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01A13F17FE2E31801EF77269F27C699E046F
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/3jSCzeBKCqHKj3LBiqrpv2NSbdQ.roa
Signing time: Thu 15 Oct 2026 10:24:59 +0000
ROA not before: Thu 15 Oct 2026 10:24:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56619
IP address blocks: 62.89.203.0/24 maxlen: 24
62.89.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:17:fe:2e:31:80:1e:f7:72:69:f2:7c:69:9e:04:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 15 10:24:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de3482cde04a0aa1ca8f72c18aaae9bf63526dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:14:44:7f:b6:fc:3b:90:e1:7c:61:8f:71:
42:26:28:28:aa:26:ff:12:56:90:8a:34:2a:dd:ef:
8b:29:95:4d:6c:91:18:30:b0:65:ec:33:b9:87:43:
06:6b:cc:46:90:4f:a7:c4:af:16:94:ce:be:11:37:
47:64:27:6c:18:58:76:bd:78:a2:e8:bb:b7:fb:43:
d5:31:04:d4:d5:a2:38:ae:69:ba:18:8b:d5:d5:07:
e4:cb:c7:c5:a9:e5:c3:c2:cd:87:0f:5d:1e:dd:ce:
ef:e2:ea:e5:49:f3:55:be:c7:c5:04:2a:92:1e:9d:
6c:22:38:d7:c8:06:ee:5e:d5:bd:a1:7e:8e:a8:0a:
f3:ce:7f:9a:50:2f:10:a6:1e:2c:e9:42:51:9d:bb:
73:4b:bc:54:e8:25:ec:8d:b7:32:00:63:0a:8a:9a:
bc:78:99:3c:87:88:35:b5:ba:67:04:77:97:f4:84:
c9:f1:be:09:2a:da:40:43:87:30:7a:ac:de:62:bd:
c8:d6:69:16:b5:01:2e:ec:90:7f:dc:55:3f:ae:fe:
6a:1e:aa:72:83:7a:66:e0:ee:61:e1:a0:78:ba:bb:
19:af:8c:85:be:9f:70:ef:09:fa:23:66:db:18:d9:
9d:83:3c:b6:a4:8d:9b:ae:0f:a8:b6:f9:f0:2a:bb:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:34:82:CD:E0:4A:0A:A1:CA:8F:72:C1:8A:AA:E9:BF:63:52:6D:D4
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/3jSCzeBKCqHKj3LBiqrpv2NSbdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.203.0/24
62.89.215.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3f:dd:18:37:1a:38:d2:e8:a4:1d:85:0d:e7:ea:ad:7c:79:
34:48:54:d1:93:83:8d:8b:19:93:66:76:a5:39:42:30:14:9a:
47:6a:87:4e:95:e6:65:d1:d4:39:fd:97:5f:17:81:11:fa:a3:
e2:3f:ea:07:88:f0:1a:e6:f0:d1:86:b4:c2:f6:02:76:ce:83:
ef:d9:31:86:ef:c7:c2:09:f2:b3:75:e1:05:0b:8b:82:69:30:
a4:cf:57:c7:ec:25:83:58:e6:87:c3:06:9f:3e:f8:8b:b5:8b:
46:d8:3c:25:0e:6b:1c:0b:6d:40:6f:dd:c7:78:2f:34:ed:b0:
19:83:4a:21:3c:dc:c6:e0:ec:ac:12:53:e4:4b:c9:9a:81:97:
1f:99:7c:56:05:7e:73:cc:84:7d:b0:c6:69:cd:30:33:82:9b:
57:da:dc:05:31:88:bd:4b:7b:68:83:6d:31:a4:4c:97:e6:fd:
d3:63:9f:53:e4:ec:b0:7d:c4:7c:af:dc:0d:2e:87:ce:59:f9:
f2:93:09:45:83:db:57:8d:39:72:33:0a:b0:c0:46:c1:97:77:
a7:cc:2e:c8:e4:76:d2:e8:45:81:29:a5:be:cf:e2:7f:de:70:
26:62:8e:5a:45:e8:02:98:1a:85:2c:6f:b0:46:6e:1c:65:64:
b1:63:60:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaE/F/4uMYAe93Jp8nxpngRvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjYxMDE1MTAyNDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTM0ODJjZGUwNGEwYWExY2E4ZjcyYzE4YWFhZTliZjYzNTI2ZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdgURH+2/DuQ4Xxhj3FCJigoqib/
ElaQijQq3e+LKZVNbJEYMLBl7DO5h0MGa8xGkE+nxK8WlM6+ETdHZCdsGFh2vXii
6Lu3+0PVMQTU1aI4rmm6GIvV1Qfky8fFqeXDws2HD10e3c7v4urlSfNVvsfFBCqS
Hp1sIjjXyAbuXtW9oX6OqArzzn+aUC8Qph4s6UJRnbtzS7xU6CXsjbcyAGMKipq8
eJk8h4g1tbpnBHeX9ITJ8b4JKtpAQ4cweqzeYr3I1mkWtQEu7JB/3FU/rv5qHqpy
g3pm4O5h4aB4ursZr4yFvp9w7wn6I2bbGNmdgzy2pI2brg+otvnwKrtVbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN40gs3gSgqhyo9ywYqq6b9jUm3UMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvM2pTQ3plQktDcUhLajNMQmlxcnB2Mk5TYmRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPlnLAwQA
PlnXMA0GCSqGSIb3DQEBCwUAA4IBAQCKP90YNxo40uikHYUN5+qtfHk0SFTRk4ON
ixmTZnalOUIwFJpHaodOleZl0dQ5/ZdfF4ER+qPiP+oHiPAa5vDRhrTC9gJ2zoPv
2TGG78fCCfKzdeEFC4uCaTCkz1fH7CWDWOaHwwafPviLtYtG2DwlDmscC21Ab93H
eC807bAZg0ohPNzG4OysElPkS8magZcfmXxWBX5zzIR9sMZpzTAzgptX2twFMYi9
S3tog20xpEyX5v3TY59T5OywfcR8r9wNLofOWfnykwlFg9tXjTlyMwqwwEbBl3en
zC7I5HbS6EWBKaW+z+J/3nAmYo5aRegCmBqFLG+wRm4cZWSxY2D2
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:29 2026 by rpki-client