Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/x3aRmrUhs5_8xZ5L3wpeDYYh_b8.roa
File: x3aRmrUhs5_8xZ5L3wpeDYYh_b8.roa (raw, json)
Hash identifier: wuIq1b4apguXeKgoc0CUTn2f/ioGzCh0PWVLUinBaDw=
Subject key identifier: C7:76:91:9A:B5:21:B3:9F:FC:C5:9E:4B:DF:0A:5E:0D:86:21:FD:BF
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A07D421FB6E47970D666D19D5BA9BBBCDD
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/x3aRmrUhs5_8xZ5L3wpeDYYh_b8.roa
Signing time: Mon 07 Sep 2026 19:04:40 +0000
ROA not before: Mon 07 Sep 2026 19:04:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 5.182.184.0/24 maxlen: 24
5.182.196.0/24 maxlen: 24
5.182.197.0/24 maxlen: 24
79.98.183.0/24 maxlen: 24
92.249.30.0/24 maxlen: 24
103.111.32.0/24 maxlen: 24
103.130.179.0/24 maxlen: 24
103.210.13.0/24 maxlen: 24
147.78.204.0/24 maxlen: 24
147.78.207.0/24 maxlen: 24
149.126.13.0/24 maxlen: 24
185.52.138.0/24 maxlen: 24
185.161.191.0/24 maxlen: 24
185.187.213.0/24 maxlen: 24
185.187.214.0/24 maxlen: 24
185.187.215.0/24 maxlen: 24
185.205.207.0/24 maxlen: 24
185.208.153.0/24 maxlen: 24
185.208.154.0/24 maxlen: 24
185.230.120.0/24 maxlen: 24
185.230.121.0/24 maxlen: 24
185.230.123.0/24 maxlen: 24
192.145.69.0/24 maxlen: 24
212.60.13.0/24 maxlen: 24
2a0a:8f40:1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:42:1f:b6:e4:79:70:d6:66:d1:9d:5b:a9:bb:bc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Sep 7 19:04:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c776919ab521b39ffcc59e4bdf0a5e0d8621fdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:ba:71:68:47:05:58:bb:8c:00:60:59:0e:
45:78:f9:08:db:3f:06:36:90:d6:c3:5c:ac:92:3f:
f4:bc:36:c3:2c:18:1d:57:4c:f7:dc:31:d4:a4:20:
a1:49:86:45:ee:0c:1a:69:1a:84:bd:98:c5:d9:2a:
66:c6:b8:6e:03:aa:5c:f2:40:2c:9c:47:18:ef:89:
9e:0c:31:26:11:9e:d2:e4:eb:6f:3d:42:0b:33:a7:
b7:18:02:e0:c5:db:9c:91:93:04:e2:d3:a6:10:f0:
29:8e:83:22:22:19:3f:13:1f:71:1b:ec:3e:38:50:
7d:57:bb:58:13:90:10:a3:10:a1:79:6d:c2:b8:0f:
4d:1e:27:b9:87:1a:98:d4:7c:81:f5:3b:e1:2b:50:
b5:10:f2:21:6a:76:59:bd:4b:1b:e6:5e:f9:3d:fe:
41:0c:f8:99:dc:3d:b6:2b:49:de:eb:36:99:1f:a1:
70:e8:b8:f7:12:10:d1:fe:8d:83:d7:58:8a:3a:24:
57:93:d9:30:ef:80:80:cc:85:74:24:52:83:98:55:
16:e0:c5:87:d5:ff:aa:f7:66:48:8f:9f:70:e8:cb:
9b:7a:49:48:47:0f:96:46:fc:31:cd:9c:cc:de:d4:
66:29:78:fd:b6:15:6a:e0:31:79:7d:bd:c0:53:2a:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:76:91:9A:B5:21:B3:9F:FC:C5:9E:4B:DF:0A:5E:0D:86:21:FD:BF
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/x3aRmrUhs5_8xZ5L3wpeDYYh_b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.184.0/24
5.182.196.0/23
79.98.183.0/24
92.249.30.0/24
103.111.32.0/24
103.130.179.0/24
103.210.13.0/24
147.78.204.0/24
147.78.207.0/24
149.126.13.0/24
185.52.138.0/24
185.161.191.0/24
185.187.213.0-185.187.215.255
185.205.207.0/24
185.208.153.0-185.208.154.255
185.230.120.0/23
185.230.123.0/24
192.145.69.0/24
212.60.13.0/24
IPv6:
2a0a:8f40:1c::/48
Signature Algorithm: sha256WithRSAEncryption
72:db:12:e0:9d:0b:24:df:f6:f0:23:c5:13:13:6a:85:66:23:
b8:13:d1:1f:74:9a:a6:a4:1a:86:50:56:8e:ed:35:7b:2c:0a:
88:a7:f5:df:d9:2a:c3:ab:91:ef:89:06:67:8c:02:68:9f:e5:
5c:b0:43:63:fd:ee:0d:f1:7e:b9:55:45:e5:39:8b:67:00:a2:
a5:2c:99:1d:5d:11:5f:59:bf:3d:c2:1d:1b:95:2e:78:29:77:
28:9b:f0:00:b7:2f:03:17:e5:7a:87:c6:a4:ae:36:a6:ee:cf:
17:e6:29:b8:0f:75:93:99:b1:92:68:2e:b1:17:e0:ae:5a:27:
5d:c7:28:cb:ce:fc:07:f8:d8:a8:04:26:3e:3a:41:f1:a2:f8:
fa:10:85:0e:24:fa:07:7a:8d:67:b6:74:a0:9b:9c:64:b0:99:
5c:56:eb:4f:ba:18:6f:4b:69:63:85:0f:37:db:c6:22:ed:24:
56:de:b9:87:0d:1a:33:e6:16:f0:27:34:75:6d:54:fa:6c:9b:
09:19:d1:c7:00:5d:1a:00:41:d4:ea:a6:19:63:60:c3:86:45:
cd:7a:d1:d6:ca:c1:17:0c:9d:94:35:83:12:0f:45:ab:5c:8e:
68:c9:36:96:9e:a3:36:9c:d1:e9:9b:a1:77:06:6e:78:aa:16:
15:8d:02:2e
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAaB9Qh+25Hlw1mbRnVupu7zdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjYwOTA3MTkwNDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzc2OTE5YWI1MjFiMzlmZmNjNTllNGJkZjBhNWUwZDg2MjFmZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon26cWhHBVi7jABgWQ5FePkI2z8G
NpDWw1yskj/0vDbDLBgdV0z33DHUpCChSYZF7gwaaRqEvZjF2SpmxrhuA6pc8kAs
nEcY74meDDEmEZ7S5OtvPUILM6e3GALgxduckZME4tOmEPApjoMiIhk/Ex9xG+w+
OFB9V7tYE5AQoxCheW3CuA9NHie5hxqY1HyB9TvhK1C1EPIhanZZvUsb5l75Pf5B
DPiZ3D22K0ne6zaZH6Fw6Lj3EhDR/o2D11iKOiRXk9kw74CAzIV0JFKDmFUW4MWH
1f+q92ZIj59w6MubeklIRw+WRvwxzZzM3tRmKXj9thVq4DF5fb3AUyp1awIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFMd2kZq1IbOf/MWeS98KXg2GIf2/MB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEveDNhUm1yVWhzNV84eFo1TDN3cGVEWVloX2I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGwBggrBgEFBQcBBwEB/wSBoDCBnTCBiQQCAAEwgYIDBAAF
trgDBAEFtsQDBABPYrcDBABc+R4DBABnbyADBABngrMDBABn0g0DBACTTswDBACT
Ts8DBACVfg0DBAC5NIoDBAC5ob8wDAMEALm71QMEA7m70AMEALnNzzAMAwQAudCZ
AwQAudCaAwQBueZ4AwQAueZ7AwQAwJFFAwQA1DwNMA8EAgACMAkDBwAqCo9AABww
DQYJKoZIhvcNAQELBQADggEBAHLbEuCdCyTf9vAjxRMTaoVmI7gT0R90mqakGoZQ
Vo7tNXssCoin9d/ZKsOrke+JBmeMAmif5VywQ2P97g3xfrlVReU5i2cAoqUsmR1d
EV9Zvz3CHRuVLngpdyib8AC3LwMX5XqHxqSuNqbuzxfmKbgPdZOZsZJoLrEX4K5a
J13HKMvO/Af42KgEJj46QfGi+PoQhQ4k+gd6jWe2dKCbnGSwmVxW60+6GG9LaWOF
DzfbxiLtJFbeuYcNGjPmFvAnNHVtVPpsmwkZ0ccAXRoAQdTqphljYMOGRc160dbK
wRcMnZQ1gxIPRatcjmjJNpaeozac0emboXcGbniqFhWNAi4=
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:07:51 2026 by rpki-client