Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/PYkH3nm9oCeaPeffcfOCu7l0HGE.roa
File: PYkH3nm9oCeaPeffcfOCu7l0HGE.roa (raw, json)
Hash identifier: m4pwIuVJ3y8NUptvnsMU6mbnxvELdH7N3oQzPcQ5G98=
Subject key identifier: 3D:89:07:DE:79:BD:A0:27:9A:3D:E7:DF:71:F3:82:BB:B9:74:1C:61
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A044839764608493867D31891922131CCB
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/PYkH3nm9oCeaPeffcfOCu7l0HGE.roa
Signing time: Thu 27 Aug 2026 18:37:49 +0000
ROA not before: Thu 27 Aug 2026 18:37:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 5.182.184.0/24 maxlen: 24
5.182.196.0/24 maxlen: 24
5.182.197.0/24 maxlen: 24
79.98.183.0/24 maxlen: 24
92.249.30.0/24 maxlen: 24
103.111.32.0/24 maxlen: 24
103.130.179.0/24 maxlen: 24
103.210.13.0/24 maxlen: 24
147.78.207.0/24 maxlen: 24
149.126.13.0/24 maxlen: 24
185.52.138.0/24 maxlen: 24
185.161.191.0/24 maxlen: 24
185.187.213.0/24 maxlen: 24
185.187.214.0/24 maxlen: 24
185.187.215.0/24 maxlen: 24
185.205.207.0/24 maxlen: 24
185.208.153.0/24 maxlen: 24
185.208.154.0/24 maxlen: 24
185.230.120.0/24 maxlen: 24
185.230.121.0/24 maxlen: 24
185.230.123.0/24 maxlen: 24
192.145.69.0/24 maxlen: 24
212.60.13.0/24 maxlen: 24
2a0a:8f40:1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:83:97:64:60:84:93:86:7d:31:89:19:22:13:1c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Aug 27 18:37:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d8907de79bda0279a3de7df71f382bbb9741c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:a9:24:a2:81:b5:53:7a:80:cf:ff:d7:cd:
b1:8d:9f:d5:fe:bc:a8:f5:12:12:8b:16:c6:77:f6:
ba:a5:ae:bd:86:5f:f0:1a:bb:cf:0e:48:56:95:30:
ed:7c:f7:2d:57:e3:9b:47:af:a5:77:68:29:e7:3e:
6b:ec:7c:99:f0:4a:85:2f:c3:ad:6b:f6:8e:20:70:
22:da:db:a0:73:fe:a2:33:4a:c7:81:6d:30:c7:cd:
40:4a:bc:37:55:2a:77:9b:17:0e:e3:b4:0d:e8:10:
80:a6:65:05:ea:78:c5:f0:35:17:06:fa:e9:8f:4e:
d9:0a:de:4c:8b:e4:89:00:53:2a:48:2d:e8:03:64:
6c:77:a2:25:64:57:23:6c:74:e5:63:f4:74:db:31:
41:3b:f6:24:fc:4d:d4:f1:c5:b3:57:91:40:01:c9:
97:14:a1:73:ad:39:1c:4a:16:13:d9:59:07:18:48:
8b:1b:57:8c:92:6b:83:12:ff:d4:56:2b:ba:b7:b1:
e6:aa:06:59:af:1b:36:57:84:13:87:2a:97:68:7e:
85:82:fe:2f:6f:10:fe:2b:88:11:4a:3c:53:5c:55:
3f:0a:a6:b0:94:8d:10:69:53:9a:b1:6a:ed:52:6e:
8e:55:c2:ff:13:54:e1:bc:63:83:1c:75:66:24:d3:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:89:07:DE:79:BD:A0:27:9A:3D:E7:DF:71:F3:82:BB:B9:74:1C:61
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/PYkH3nm9oCeaPeffcfOCu7l0HGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.184.0/24
5.182.196.0/23
79.98.183.0/24
92.249.30.0/24
103.111.32.0/24
103.130.179.0/24
103.210.13.0/24
147.78.207.0/24
149.126.13.0/24
185.52.138.0/24
185.161.191.0/24
185.187.213.0-185.187.215.255
185.205.207.0/24
185.208.153.0-185.208.154.255
185.230.120.0/23
185.230.123.0/24
192.145.69.0/24
212.60.13.0/24
IPv6:
2a0a:8f40:1c::/48
Signature Algorithm: sha256WithRSAEncryption
3b:dd:be:62:15:06:f7:32:99:d7:78:6e:39:a3:7f:6c:76:0b:
be:1e:96:79:a5:e4:8b:c9:3a:28:0b:0e:72:1a:f4:c9:e5:13:
8e:c6:d5:07:b3:6f:a9:01:77:25:6c:a0:ae:ed:34:da:19:6c:
95:31:1e:50:f9:59:5d:40:2f:fd:dc:03:02:8d:77:21:e0:b1:
06:35:bd:90:20:10:7d:c0:10:29:e8:72:2b:68:63:c7:0b:7a:
5e:5b:8a:7a:1d:24:d2:1f:70:77:a3:4f:38:3c:c7:91:7f:70:
21:e2:ac:dd:86:65:3c:c0:4f:4e:ed:dc:73:76:93:b0:0d:20:
64:b4:e2:83:c5:cb:6b:4d:90:bd:04:44:41:37:97:23:d0:6d:
48:c2:30:ab:c2:f2:2c:65:e8:36:8c:d3:fb:29:28:03:2e:c6:
9c:39:28:cb:fb:9b:13:fc:05:d3:f6:33:80:92:e7:4e:08:b8:
75:60:16:fc:25:3a:4d:00:0b:8b:40:02:71:41:2f:d1:db:3d:
a9:d1:ef:60:e4:5b:d8:45:4d:ca:f2:e3:b4:63:ac:98:85:24:
36:b1:ba:d3:51:a9:90:db:d0:e2:f9:44:68:4d:70:39:42:5d:
ae:66:99:00:f4:a2:19:5c:fc:6e:f6:2e:40:ad:46:03:7f:bd:
63:9e:65:f4
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAaBEg5dkYISThn0xiRkiExzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjYwODI3MTgzNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDg5MDdkZTc5YmRhMDI3OWEzZGU3ZGY3MWYzODJiYmI5NzQxYzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6KpJKKBtVN6gM//182xjZ/V/ryo
9RISixbGd/a6pa69hl/wGrvPDkhWlTDtfPctV+ObR6+ld2gp5z5r7HyZ8EqFL8Ot
a/aOIHAi2tugc/6iM0rHgW0wx81ASrw3VSp3mxcO47QN6BCApmUF6njF8DUXBvrp
j07ZCt5Mi+SJAFMqSC3oA2Rsd6IlZFcjbHTlY/R02zFBO/Yk/E3U8cWzV5FAAcmX
FKFzrTkcShYT2VkHGEiLG1eMkmuDEv/UViu6t7HmqgZZrxs2V4QThyqXaH6Fgv4v
bxD+K4gRSjxTXFU/CqawlI0QaVOasWrtUm6OVcL/E1ThvGODHHVmJNPulwIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFD2JB955vaAnmj3n33Hzgru5dBxhMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvUFlrSDNubTlvQ2VhUGVmZmNmT0N1N2wwSEdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBggQCAAEwfAMEAAW2
uAMEAQW2xAMEAE9itwMEAFz5HgMEAGdvIAMEAGeCswMEAGfSDQMEAJNOzwMEAJV+
DQMEALk0igMEALmhvzAMAwQAubvVAwQDubvQAwQAuc3PMAwDBAC50JkDBAC50JoD
BAG55ngDBAC55nsDBADAkUUDBADUPA0wDwQCAAIwCQMHACoKj0AAHDANBgkqhkiG
9w0BAQsFAAOCAQEAO92+YhUG9zKZ13huOaN/bHYLvh6WeaXki8k6KAsOchr0yeUT
jsbVB7NvqQF3JWygru002hlslTEeUPlZXUAv/dwDAo13IeCxBjW9kCAQfcAQKehy
K2hjxwt6XluKeh0k0h9wd6NPODzHkX9wIeKs3YZlPMBPTu3cc3aTsA0gZLTig8XL
a02QvQREQTeXI9BtSMIwq8LyLGXoNozT+ykoAy7GnDkoy/ubE/wF0/YzgJLnTgi4
dWAW/CU6TQALi0ACcUEv0ds9qdHvYORb2EVNyvLjtGOsmIUkNrG601GpkNvQ4vlE
aE1wOUJdrmaZAPSiGVz8bvYuQK1GA3+9Y55l9A==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:15 2026 by rpki-client