Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/3DDg52P7n4FePE0i47AwGrPv6dM.roa
File: 3DDg52P7n4FePE0i47AwGrPv6dM.roa (raw, json)
Hash identifier: JN+ncwPe3d1IMDKJefRKQ8fkZSEiIBJWK5qU4JCw5jI=
Subject key identifier: DC:30:E0:E7:63:FB:9F:81:5E:3C:4D:22:E3:B0:30:1A:B3:EF:E9:D3
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 01A057B13FD22180FDB5031D432692AA5665
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/3DDg52P7n4FePE0i47AwGrPv6dM.roa
Signing time: Mon 31 Aug 2026 12:00:29 +0000
ROA not before: Mon 31 Aug 2026 12:00:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1136
IP address blocks: 37.251.0.0/17 maxlen: 17
46.227.232.0/21 maxlen: 21
62.131.0.0/16 maxlen: 16
62.216.0.0/19 maxlen: 19
62.251.0.0/17 maxlen: 17
77.160.0.0/13 maxlen: 13
77.168.0.0/14 maxlen: 14
77.172.0.0/16 maxlen: 16
77.173.0.0/16 maxlen: 16
77.174.0.0/16 maxlen: 16
77.175.0.0/16 maxlen: 16
77.175.0.0/17 maxlen: 17
77.175.128.0/17 maxlen: 17
80.60.0.0/15 maxlen: 15
80.100.0.0/15 maxlen: 15
81.204.0.0/14 maxlen: 14
82.92.0.0/14 maxlen: 15
82.136.192.0/18 maxlen: 18
82.161.0.0/16 maxlen: 16
82.168.0.0/15 maxlen: 15
82.170.0.0/16 maxlen: 16
83.68.0.0/19 maxlen: 19
84.39.0.0/19 maxlen: 19
84.80.0.0/16 maxlen: 16
84.82.0.0/15 maxlen: 15
84.84.0.0/14 maxlen: 14
85.113.224.0/19 maxlen: 19
86.80.0.0/13 maxlen: 13
86.88.0.0/15 maxlen: 15
86.90.0.0/16 maxlen: 16
86.92.0.0/14 maxlen: 14
88.159.0.0/16 maxlen: 16
109.72.32.0/20 maxlen: 20
128.127.32.0/20 maxlen: 20
188.142.0.0/17 maxlen: 17
194.109.0.0/16 maxlen: 16
195.64.64.0/19 maxlen: 19
195.121.0.0/16 maxlen: 16
195.240.0.0/16 maxlen: 16
195.240.0.0/17 maxlen: 17
195.240.128.0/18 maxlen: 18
195.240.192.0/18 maxlen: 18
195.241.0.0/16 maxlen: 16
212.123.128.0/18 maxlen: 18
212.182.128.0/18 maxlen: 18
212.238.0.0/16 maxlen: 16
213.10.0.0/16 maxlen: 16
213.75.0.0/16 maxlen: 16
213.84.0.0/16 maxlen: 16
213.148.224.0/19 maxlen: 19
213.197.0.0/18 maxlen: 18
213.222.0.0/19 maxlen: 19
2a02:a400::/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:b1:3f:d2:21:80:fd:b5:03:1d:43:26:92:aa:56:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Aug 31 12:00:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc30e0e763fb9f815e3c4d22e3b0301ab3efe9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:3e:e3:89:1d:52:57:2b:43:ad:92:c6:6b:
b8:f5:12:83:99:d6:de:57:f9:09:3a:00:5c:21:a2:
9f:1b:87:90:21:6d:18:bf:b3:6c:83:ec:96:29:40:
74:3c:2d:38:df:80:6f:1b:65:41:74:15:b4:59:fe:
e6:bf:2f:fd:ce:33:3e:e0:bb:a0:ed:cd:2d:44:df:
6e:dd:cb:42:81:c1:e0:c2:74:87:ff:5d:9a:48:d4:
52:cb:6d:02:b7:47:76:ab:90:b2:2f:9a:06:90:86:
a7:6d:28:95:95:d4:83:ac:ea:ce:aa:74:01:7e:60:
ea:0c:6d:1a:64:c7:15:65:3f:bc:4f:81:0f:a2:b2:
c6:07:41:96:bf:d9:85:31:62:e5:c0:c6:5e:68:27:
25:96:36:7a:e5:fc:39:ec:09:2d:a6:cb:9a:c7:54:
4c:f8:0a:92:2f:b3:54:e8:3d:21:23:4d:31:0f:23:
e5:e6:cf:08:25:f6:92:50:b7:5c:45:54:4c:4c:95:
0f:2d:b4:12:44:c5:0f:45:da:5e:8e:03:38:e6:7a:
7d:c4:76:28:d8:46:75:02:3f:5a:03:4e:d5:ab:cb:
5a:55:43:40:d6:bd:c1:7d:6a:61:b0:4a:6b:6d:ad:
cf:7e:7c:37:28:a0:87:ee:67:95:8f:71:8c:d2:3f:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:30:E0:E7:63:FB:9F:81:5E:3C:4D:22:E3:B0:30:1A:B3:EF:E9:D3
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/3DDg52P7n4FePE0i47AwGrPv6dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.0.0/17
46.227.232.0/21
62.131.0.0/16
62.216.0.0/19
62.251.0.0/17
77.160.0.0/12
80.60.0.0/15
80.100.0.0/15
81.204.0.0/14
82.92.0.0/14
82.136.192.0/18
82.161.0.0/16
82.168.0.0-82.170.255.255
83.68.0.0/19
84.39.0.0/19
84.80.0.0/16
84.82.0.0-84.87.255.255
85.113.224.0/19
86.80.0.0-86.90.255.255
86.92.0.0/14
88.159.0.0/16
109.72.32.0/20
128.127.32.0/20
188.142.0.0/17
194.109.0.0/16
195.64.64.0/19
195.121.0.0/16
195.240.0.0/15
212.123.128.0/18
212.182.128.0/18
212.238.0.0/16
213.10.0.0/16
213.75.0.0/16
213.84.0.0/16
213.148.224.0/19
213.197.0.0/18
213.222.0.0/19
IPv6:
2a02:a400::/24
Signature Algorithm: sha256WithRSAEncryption
61:62:14:d8:cd:48:3d:00:e9:27:13:75:9b:11:3f:63:e3:dc:
9d:03:6a:ec:26:c2:93:8b:83:85:d6:e0:91:1c:5a:fd:2e:25:
4d:22:d5:12:a7:c3:59:22:15:f3:43:0e:77:d1:ff:ac:57:18:
5c:ff:2b:4d:25:d0:ae:60:3c:2f:eb:29:fc:db:af:4e:14:c0:
8c:c9:17:f8:ae:b2:24:7f:4b:1b:de:1e:51:b4:f0:4e:e2:91:
38:9d:3e:db:06:ad:93:3e:4a:99:91:d3:ea:77:ed:71:aa:86:
0e:df:10:58:a7:67:cb:8c:74:e6:1e:7c:98:56:dd:10:88:57:
be:3d:50:48:a3:cb:1a:da:7d:6b:a2:d9:35:b3:76:3c:2d:49:
cb:88:6c:05:15:52:03:3e:34:eb:48:c8:ae:d7:4d:8b:7a:d9:
d2:9b:df:eb:2f:b1:44:a2:74:a6:35:9d:cf:0e:c1:87:c7:27:
7d:ea:b2:20:2d:d5:a8:d7:ab:e0:99:15:d2:a2:b3:a1:fd:5d:
6a:24:cf:6a:a3:86:ab:35:3a:98:5b:d6:62:2c:33:e6:97:9c:
4c:ff:55:dd:9a:37:f8:a3:c0:1b:b2:85:67:2c:3d:0c:da:57:
68:81:45:b2:70:84:1c:60:f3:6d:63:ed:de:c0:8c:0e:51:65:
4e:6e:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:13 2026 by rpki-client