Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3TqSPtMX1evi2CRqKvWoNAOKj9k.roa
File: 3TqSPtMX1evi2CRqKvWoNAOKj9k.roa (raw, json)
Hash identifier: 08FUxZiDvQI12hezaUKylBSx8XBxDSPFWcXfcE0aZHo=
Subject key identifier: DD:3A:92:3E:D3:17:D5:EB:E2:D8:24:6A:2A:F5:A8:34:03:8A:8F:D9
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A008B13AFD15DC9F319301E0CB712CF813
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3TqSPtMX1evi2CRqKvWoNAOKj9k.roa
Signing time: Sun 16 Aug 2026 03:50:27 +0000
ROA not before: Sun 16 Aug 2026 03:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 77.242.157.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
88.151.56.0/24 maxlen: 24
88.151.59.0/24 maxlen: 24
88.209.200.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
88.209.244.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:08:b1:3a:fd:15:dc:9f:31:93:01:e0:cb:71:2c:f8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 16 03:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd3a923ed317d5ebe2d8246a2af5a834038a8fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:1a:03:2d:33:94:4d:f4:5b:46:d3:6a:d1:
e7:76:38:6a:ce:26:99:c8:51:07:bf:28:ac:ab:92:
51:de:f1:c9:3f:31:b1:72:cb:10:ac:52:79:98:a4:
8c:15:d8:31:ab:96:2e:5c:13:ce:9e:3f:1d:0b:e2:
f2:49:91:b7:37:cf:e8:00:ce:22:59:40:06:bc:4c:
0a:aa:53:c0:7f:bc:44:2d:bd:c7:38:1f:c5:e0:ab:
98:86:de:5b:fc:49:f5:92:7e:5b:c2:eb:c8:e0:bf:
f6:62:11:f8:42:a6:80:79:97:e3:c2:48:e0:d7:4e:
c4:2d:fb:96:8c:f6:5a:c3:18:10:f2:3a:d7:b2:b6:
9b:42:34:6b:2b:2e:b7:35:dc:1f:e4:1e:a0:5d:a3:
71:c1:11:10:cf:c7:b6:69:a9:6e:a1:36:51:83:55:
85:3d:aa:95:e1:6e:0b:78:10:01:ba:fe:aa:1d:c7:
7a:57:65:de:95:e6:e6:b4:00:51:7b:e9:ed:f0:94:
eb:b6:11:d3:a8:35:e3:72:eb:a4:b6:91:3e:69:84:
62:b7:2c:32:cb:39:f5:61:26:35:21:3f:8c:5f:33:
ed:7c:f3:44:18:d7:ca:2b:aa:6b:61:1f:64:dc:c3:
1b:b8:cc:3b:25:e8:eb:db:c7:d2:b3:4b:14:85:4e:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3A:92:3E:D3:17:D5:EB:E2:D8:24:6A:2A:F5:A8:34:03:8A:8F:D9
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3TqSPtMX1evi2CRqKvWoNAOKj9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.157.0/24
83.137.156.0/24
88.151.56.0/24
88.151.59.0/24
88.209.200.0/24
88.209.220.0/24
88.209.244.0/24
88.209.246.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0e:91:8f:e8:b2:94:a6:85:4c:06:b4:62:95:c2:c6:06:b5:
1f:f4:84:c2:0c:ef:ce:a4:3f:87:46:85:fa:6f:df:8d:ff:5b:
45:c6:7e:16:66:77:ea:b9:0a:a7:ce:81:3c:f5:0c:30:26:1d:
a5:94:56:6b:d4:84:da:60:26:4c:ba:9f:4f:71:fe:0c:44:0f:
a8:13:f2:f6:25:db:3e:31:a0:c3:01:d1:58:b6:3f:56:fa:13:
be:e3:8b:c3:bf:43:dd:c3:c3:69:aa:cb:ad:50:c5:77:95:ba:
bd:ff:10:40:5e:c3:ec:07:62:1c:c6:b8:9c:a1:14:ee:64:c9:
de:4b:d2:7a:38:71:8c:14:41:33:62:64:db:49:d1:8d:64:6d:
4e:16:39:e5:37:49:eb:e2:f3:37:95:f8:ae:59:3d:95:0e:1c:
d7:52:be:fe:85:71:69:59:f7:e4:2d:74:90:c4:4c:ee:a1:ce:
4c:9e:48:16:6e:1b:46:19:55:ee:32:d5:4a:f1:80:30:60:a0:
c6:fd:98:e6:76:eb:33:36:9e:d8:9d:bd:da:2f:99:55:c5:7a:
fc:da:18:94:0e:eb:e4:67:e6:39:61:7e:2f:5c:62:6d:bc:93:
9a:d3:cc:18:cf:81:1e:f6:46:aa:34:f0:eb:c3:24:b0:13:11:
c6:5d:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:53 2026 by rpki-client