Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/3RkoAAbl637xFHacZnP1dYbUl_Y.roa
File: 3RkoAAbl637xFHacZnP1dYbUl_Y.roa (raw, json)
Hash identifier: CFWB3BfKb8FIx/ctWEr3mFDr8pNbo6kHUjzRn85m4So=
Subject key identifier: DD:19:28:00:06:E5:EB:7E:F1:14:76:9C:66:73:F5:75:86:D4:97:F6
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A1AE49F32D3FA723B9C5602147D9B58301
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/3RkoAAbl637xFHacZnP1dYbUl_Y.roa
Signing time: Fri 06 Nov 2026 00:37:24 +0000
ROA not before: Fri 06 Nov 2026 00:37:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 5.182.184.0/24 maxlen: 24
104.232.37.0/24 maxlen: 24
185.187.213.0/24 maxlen: 24
185.230.120.0/24 maxlen: 24
2a0a:8f40:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ae:49:f3:2d:3f:a7:23:b9:c5:60:21:47:d9:b5:83:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Nov 6 00:37:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd19280006e5eb7ef114769c6673f57586d497f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:15:65:f8:90:f3:0d:09:73:67:7f:03:26:
63:05:68:2d:bb:a8:4a:5e:e5:40:0e:8a:72:9d:26:
fd:0b:20:5a:cc:f7:91:84:44:d0:04:89:7a:3d:10:
0e:ad:9e:5c:14:ad:1a:bb:22:a0:78:2a:1f:da:73:
ba:65:99:47:1f:f8:ee:e8:a3:66:cc:86:a3:92:82:
80:9e:bd:1d:94:db:4b:52:a7:0c:a1:be:d4:bc:33:
f9:c9:e9:a7:44:23:16:3c:22:51:60:f7:78:9c:6f:
21:24:9c:7c:bb:0d:5a:22:be:02:f3:45:7b:09:ed:
48:a9:95:06:7b:6e:64:c2:18:6b:8c:08:1a:49:6b:
1b:c2:06:4a:80:00:43:64:10:49:7d:ed:2c:7a:92:
64:52:d6:a3:20:12:82:c7:af:68:26:ee:dd:99:8b:
5f:b6:b4:c9:82:a7:bc:e4:96:27:4a:86:2e:3e:f8:
87:39:19:83:35:c1:ab:a8:ca:23:3c:d0:03:98:15:
49:7b:7b:09:82:0b:cd:ba:67:f5:d8:8a:5b:c8:a5:
59:0a:a8:26:cb:f7:24:8b:ac:35:43:16:ec:a1:b6:
ec:9c:c6:90:e9:8c:13:b8:9c:25:16:be:ae:e1:63:
92:a5:47:52:11:6b:80:9b:10:d7:b8:90:f1:34:13:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:19:28:00:06:E5:EB:7E:F1:14:76:9C:66:73:F5:75:86:D4:97:F6
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/3RkoAAbl637xFHacZnP1dYbUl_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.184.0/24
104.232.37.0/24
185.187.213.0/24
185.230.120.0/24
IPv6:
2a0a:8f40:31::/48
Signature Algorithm: sha256WithRSAEncryption
96:fa:50:62:2b:41:06:fb:34:b0:4e:b3:c7:f4:eb:50:6d:96:
45:56:84:b5:d5:c6:95:55:46:c9:3b:df:a9:d6:98:2b:e2:02:
bc:9c:54:1e:dd:e3:e6:c3:96:8f:88:15:bb:db:77:23:c4:cb:
5e:84:49:63:32:df:42:c4:1e:ac:0b:c1:c3:51:0d:bd:7a:91:
0e:7c:54:51:96:29:42:20:cf:e5:4d:28:2c:cc:28:20:9b:e3:
44:91:ed:fd:57:9b:e7:fc:ac:42:26:65:8d:13:19:fd:80:61:
ff:13:ff:23:25:96:32:ab:a9:ba:18:af:74:52:91:a7:30:88:
61:c7:36:ce:60:fd:51:29:66:95:5e:8a:e8:73:66:f4:2f:4d:
40:fb:1f:70:0b:6a:d6:fe:62:c0:b8:89:8e:0a:92:ca:bc:3b:
11:61:28:a0:be:f1:c5:83:f6:0c:81:90:fe:aa:56:9d:42:61:
ee:1d:d3:8d:14:ce:55:59:bf:d2:39:ff:fb:bf:c3:aa:f3:c5:
19:67:76:aa:62:21:d3:c2:bd:ad:b2:8d:76:59:53:a6:17:98:
56:d6:07:0c:93:74:69:40:b6:7f:f9:e0:63:a3:6a:fb:4a:3d:
7a:78:a7:c1:bb:0d:3b:cf:1e:20:a5:6c:35:b4:a3:01:e2:fc:
b5:f0:df:fe
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAaGuSfMtP6cjucVgIUfZtYMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjYxMTA2MDAzNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDE5MjgwMDA2ZTVlYjdlZjExNDc2OWM2NjczZjU3NTg2ZDQ5N2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofwVZfiQ8w0Jc2d/AyZjBWgtu6hK
XuVADopynSb9CyBazPeRhETQBIl6PRAOrZ5cFK0auyKgeCof2nO6ZZlHH/ju6KNm
zIajkoKAnr0dlNtLUqcMob7UvDP5yemnRCMWPCJRYPd4nG8hJJx8uw1aIr4C80V7
Ce1IqZUGe25kwhhrjAgaSWsbwgZKgABDZBBJfe0sepJkUtajIBKCx69oJu7dmYtf
trTJgqe85JYnSoYuPviHORmDNcGrqMojPNADmBVJe3sJggvNumf12IpbyKVZCqgm
y/cki6w1QxbsobbsnMaQ6YwTuJwlFr6u4WOSpUdSEWuAmxDXuJDxNBMnwQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFN0ZKAAG5et+8RR2nGZz9XWG1Jf2MB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvM1Jrb0FBYmw2Mzd4RkhhY1puUDFkWWJVbF9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQABba4AwQA
aOglAwQAubvVAwQAueZ4MA8EAgACMAkDBwAqCo9AADEwDQYJKoZIhvcNAQELBQAD
ggEBAJb6UGIrQQb7NLBOs8f061BtlkVWhLXVxpVVRsk736nWmCviArycVB7d4+bD
lo+IFbvbdyPEy16ESWMy30LEHqwLwcNRDb16kQ58VFGWKUIgz+VNKCzMKCCb40SR
7f1Xm+f8rEImZY0TGf2AYf8T/yMlljKrqboYr3RSkacwiGHHNs5g/VEpZpVeiuhz
ZvQvTUD7H3ALatb+YsC4iY4Kksq8OxFhKKC+8cWD9gyBkP6qVp1CYe4d040UzlVZ
v9I5//u/w6rzxRlndqpiIdPCva2yjXZZU6YXmFbWBwyTdGlAtn/54GOjavtKPXp4
p8G7DTvPHiClbDW0owHi/LXw3/4=
-----END CERTIFICATE-----
Generated at Sat Nov 14 23:48:02 2026 by rpki-client