Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/3fOCVpT-Lf6UOXcD5Nc80w9uuEI.roa
File: 3fOCVpT-Lf6UOXcD5Nc80w9uuEI.roa (raw, json)
Hash identifier: Olnc6TsFMf/lto0XZ/IXXC3VCnMMv6kWoXMR1B4Qilk=
Subject key identifier: DD:F3:82:56:94:FE:2D:FE:94:39:77:03:E4:D7:3C:D3:0F:6E:B8:42
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A05815B43164D5BEE42654AC482CC4D25C
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/3fOCVpT-Lf6UOXcD5Nc80w9uuEI.roa
Signing time: Mon 31 Aug 2026 13:50:12 +0000
ROA not before: Mon 31 Aug 2026 13:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200436
IP address blocks: 5.42.217.0/24 maxlen: 24
62.3.14.0/24 maxlen: 24
217.18.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:15:b4:31:64:d5:be:e4:26:54:ac:48:2c:c4:d2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 31 13:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddf3825694fe2dfe94397703e4d73cd30f6eb842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:02:22:7d:93:4c:1c:39:9a:37:99:d5:2b:
ef:00:b1:11:6d:b1:e3:18:1a:d4:58:6f:19:74:18:
4b:2c:58:12:f9:02:ee:39:44:b5:de:44:dd:bf:97:
a1:25:83:f2:b0:a3:75:97:ba:19:81:12:27:08:de:
c3:2c:f0:1e:31:ca:e6:af:42:59:6f:fb:5d:52:fa:
b9:1b:a4:61:41:ec:78:85:fd:8f:16:47:45:f9:f2:
04:cd:8f:c6:c8:5c:cd:0e:49:ea:65:78:72:c4:9e:
cb:a6:3f:4f:20:92:ee:da:58:1f:1f:c2:93:c0:5f:
90:f8:67:a2:d5:60:01:39:71:e0:88:72:11:2e:4c:
39:ac:01:8f:1f:7f:68:e5:89:5e:04:6f:ef:9c:b6:
1d:52:91:05:71:fe:47:c0:7b:8c:70:9a:04:53:2e:
d0:29:79:93:18:36:26:97:2d:21:66:96:45:fb:8f:
15:35:94:f6:25:87:d2:bd:38:c6:e9:8f:ec:38:77:
75:35:fe:42:d9:b2:83:12:d8:77:8d:46:2a:83:c1:
64:f7:5c:a9:9f:d2:c5:07:9b:a5:a5:58:96:33:91:
b2:a0:c3:60:dd:72:60:f2:45:12:e9:2e:f8:dd:16:
5f:21:57:c9:33:7c:07:e5:07:46:93:38:11:ae:34:
4c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F3:82:56:94:FE:2D:FE:94:39:77:03:E4:D7:3C:D3:0F:6E:B8:42
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/3fOCVpT-Lf6UOXcD5Nc80w9uuEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.217.0/24
62.3.14.0/24
217.18.90.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f1:49:d9:b3:8f:af:a1:1a:16:4c:ba:f4:67:67:09:86:ce:
61:7d:3c:b6:06:f6:dd:b2:2e:66:dc:51:05:69:ea:62:d7:6b:
f7:8f:7a:b3:df:7a:05:13:13:98:bb:30:b6:d5:de:cb:97:e4:
e2:64:25:8b:2d:1c:e8:8b:f2:b8:5f:34:c6:0d:dd:30:32:e7:
fe:e1:54:ea:27:ab:fe:4f:1e:a4:f1:b0:d1:ea:ba:28:7d:01:
eb:ab:58:a0:ad:51:77:4a:30:ca:b8:2d:3a:9f:36:39:35:f2:
07:92:5b:fe:f7:81:be:43:86:64:b4:24:ab:7b:1b:06:21:18:
5a:48:d6:76:3e:3b:d8:9e:3f:e1:f6:c4:ec:35:a7:af:66:cc:
46:60:a0:08:ce:70:e8:fe:1f:65:76:2e:cb:e5:90:aa:10:93:
7a:55:50:32:5d:38:9a:00:c3:5f:ee:4b:e6:37:3c:06:e7:8d:
fc:d8:00:82:d2:f3:98:4e:27:cc:11:f0:1b:02:5d:2c:3c:27:
0a:be:d3:e9:c0:69:5d:4a:62:76:ed:20:b8:69:31:83:d3:3b:
86:64:ed:74:59:f6:c6:94:bf:99:7a:69:ad:ee:43:b5:69:6f:
1d:ee:76:c5:a5:eb:2d:65:e9:14:af:1b:8e:6d:5c:bd:64:bd:
f6:52:06:8e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBYFbQxZNW+5CZUrEgsxNJcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwODMxMTM1MDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGYzODI1Njk0ZmUyZGZlOTQzOTc3MDNlNGQ3M2NkMzBmNmViODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw4CIn2TTBw5mjeZ1SvvALERbbHj
GBrUWG8ZdBhLLFgS+QLuOUS13kTdv5ehJYPysKN1l7oZgRInCN7DLPAeMcrmr0JZ
b/tdUvq5G6RhQex4hf2PFkdF+fIEzY/GyFzNDknqZXhyxJ7Lpj9PIJLu2lgfH8KT
wF+Q+Gei1WABOXHgiHIRLkw5rAGPH39o5YleBG/vnLYdUpEFcf5HwHuMcJoEUy7Q
KXmTGDYmly0hZpZF+48VNZT2JYfSvTjG6Y/sOHd1Nf5C2bKDEth3jUYqg8Fk91yp
n9LFB5ulpViWM5GyoMNg3XJg8kUS6S743RZfIVfJM3wH5QdGkzgRrjRMDwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFN3zglaU/i3+lDl3A+TXPNMPbrhCMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvM2ZPQ1ZwVC1MZjZVT1hjRDVOYzgwdzl1dUVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABSrZAwQA
PgMOAwQA2RJaMA0GCSqGSIb3DQEBCwUAA4IBAQBf8UnZs4+voRoWTLr0Z2cJhs5h
fTy2Bvbdsi5m3FEFaepi12v3j3qz33oFExOYuzC21d7Ll+TiZCWLLRzoi/K4XzTG
Dd0wMuf+4VTqJ6v+Tx6k8bDR6roofQHrq1igrVF3SjDKuC06nzY5NfIHklv+94G+
Q4ZktCSrexsGIRhaSNZ2PjvYnj/h9sTsNaevZsxGYKAIznDo/h9ldi7L5ZCqEJN6
VVAyXTiaAMNf7kvmNzwG54382ACC0vOYTifMEfAbAl0sPCcKvtPpwGldSmJ27SC4
aTGD0zuGZO10WfbGlL+Zemmt7kO1aW8d7nbFpestZekUrxuObVy9ZL32UgaO
-----END CERTIFICATE-----
Generated at Sat Sep 5 15:14:07 2026 by rpki-client