Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/3UxXNfbXuz8i0p4qeOcbr6GGK7g.roa
File: 3UxXNfbXuz8i0p4qeOcbr6GGK7g.roa (raw, json)
Hash identifier: hZgmhd7rTwkIKlbrCrKQZLJjwcORc7pG4gvvo+Rcs3Q=
Subject key identifier: DD:4C:57:35:F6:D7:BB:3F:22:D2:9E:2A:78:E7:1B:AF:A1:86:2B:B8
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019E4BBE34EB6E8C38D7D640C2650907A1A4
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/3UxXNfbXuz8i0p4qeOcbr6GGK7g.roa
Signing time: Thu 21 May 2026 18:13:37 +0000
ROA not before: Thu 21 May 2026 18:13:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 45.159.149.0/24 maxlen: 24
45.159.150.0/24 maxlen: 24
62.106.95.0/24 maxlen: 24
91.217.166.0/24 maxlen: 24
146.19.212.0/24 maxlen: 24
217.114.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:be:34:eb:6e:8c:38:d7:d6:40:c2:65:09:07:a1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 21 18:13:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd4c5735f6d7bb3f22d29e2a78e71bafa1862bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:1e:46:ab:0d:5e:3a:c3:04:91:80:ab:0d:
93:7d:8b:ab:69:de:8c:2c:dc:3c:a3:fd:e8:97:43:
66:fd:54:26:73:62:4a:87:29:27:be:c8:89:16:14:
f7:7c:2f:80:c1:6c:66:cb:bc:c8:8a:7e:d1:38:f6:
df:cd:d1:34:0e:86:14:5e:83:3e:fb:a6:4d:46:5b:
15:92:e0:f6:91:0f:90:69:e9:0e:ef:1a:80:51:0d:
f5:9a:52:0b:e9:87:75:eb:42:fb:16:b9:f2:ce:71:
92:6a:53:eb:f7:11:5f:9e:bb:d2:08:33:75:f8:f1:
6d:7d:8d:3b:de:c2:90:c1:71:7e:dd:6b:eb:a1:8c:
74:d4:0a:41:68:26:b6:24:ff:dd:12:44:ff:e0:72:
74:df:f3:be:2d:c0:44:c3:26:43:f4:5e:e7:c0:77:
57:ef:af:1a:1a:ea:9c:44:88:d7:21:4b:26:41:dd:
fc:77:53:bf:fe:b6:7f:d7:de:74:e8:1d:12:86:10:
b9:e7:a9:c1:72:d6:a0:a5:3a:3d:42:75:7f:73:df:
5a:ef:93:da:11:50:59:2e:a7:b4:a2:e3:d0:83:33:
2a:fb:2d:3d:c9:3a:77:9c:a5:71:8c:8d:59:14:cf:
83:e3:55:46:a2:2a:4c:14:39:ed:a0:c3:75:6f:1b:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4C:57:35:F6:D7:BB:3F:22:D2:9E:2A:78:E7:1B:AF:A1:86:2B:B8
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/3UxXNfbXuz8i0p4qeOcbr6GGK7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.149.0-45.159.150.255
62.106.95.0/24
91.217.166.0/24
146.19.212.0/24
217.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:67:8e:c1:1e:5a:b3:5c:11:33:7c:04:9b:ad:8d:a5:5e:ac:
88:1f:75:d1:d6:ce:cf:df:86:fb:c6:d8:ac:8b:bc:36:8c:39:
7d:67:4e:69:89:1d:23:9e:e6:35:fc:a4:ab:72:6e:9d:4c:22:
5e:d9:64:f9:a0:4e:03:49:f1:12:9d:fd:5a:06:3b:0d:6d:30:
89:23:63:96:d3:cb:f7:6e:fd:0f:6c:91:19:71:fa:c3:f6:24:
3d:8b:bf:42:23:5b:3a:a9:25:63:66:5c:6c:29:30:2d:4d:16:
85:f4:34:36:a5:bd:79:39:32:c2:fb:a5:95:9a:56:16:ca:fc:
5b:0f:1d:d8:2f:89:d0:c0:7d:d1:36:96:b2:23:99:21:79:5b:
38:d9:bb:09:1a:6a:92:c4:e5:38:34:7b:16:e0:ee:8a:f1:20:
49:8e:e8:d0:9a:9a:4a:8e:b3:35:05:4a:8c:41:ed:ff:f1:d9:
20:3e:4b:88:4a:af:f7:59:c4:28:b1:e1:d7:5c:fd:eb:6f:8a:
b0:2b:4e:35:f9:32:a9:e1:2b:a6:ac:31:f1:a2:90:ad:a1:12:
1e:6a:9f:93:88:d4:6e:cd:2d:e3:2c:c5:f4:2e:b3:93:3f:08:
5d:73:1f:5c:4d:69:c1:9f:67:05:b2:b0:0d:e2:35:36:8a:1a:
3b:ec:b5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 01:34:40 2026 by rpki-client