Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/3jhOZIWBBUYNhlF2h5lBua-ajBs.roa
File: 3jhOZIWBBUYNhlF2h5lBua-ajBs.roa (raw, json)
Hash identifier: Ea8xHXLjFbr2D9v27/3IzBBK8ffF3N5VQDLBS2f2VpM=
Subject key identifier: DE:38:4E:64:85:81:05:46:0D:86:51:76:87:99:41:B9:AF:9A:8C:1B
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 019E42650380213A9EDA9BD062041A501961
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/3jhOZIWBBUYNhlF2h5lBua-ajBs.roa
Signing time: Tue 19 May 2026 22:39:36 +0000
ROA not before: Tue 19 May 2026 22:39:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50183
IP address blocks: 85.149.224.0/20 maxlen: 24
94.154.178.0/24 maxlen: 24
103.143.178.0/23 maxlen: 24
172.96.38.0/23 maxlen: 24
192.198.184.0/23 maxlen: 24
193.148.95.0/24 maxlen: 24
195.246.194.0/24 maxlen: 24
198.13.22.0/23 maxlen: 24
199.36.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:42:65:03:80:21:3a:9e:da:9b:d0:62:04:1a:50:19:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: May 19 22:39:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de384e64858105460d865176879941b9af9a8c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3e:6d:93:81:80:58:29:13:a1:66:3c:77:dd:
ff:09:19:e2:cb:d6:39:bb:5a:a4:18:8d:e3:34:0b:
a0:6d:9e:bf:42:6b:d0:07:5f:ef:55:4e:eb:85:91:
b1:be:91:9f:6a:cb:c0:d8:03:2d:ca:6f:60:1e:bb:
98:2b:0d:af:e9:53:18:6c:44:d4:81:08:3d:db:d6:
6e:62:ee:f5:fd:a1:90:ee:4a:6c:22:00:c2:1c:e2:
46:37:0d:96:90:73:d5:b1:68:0e:b6:11:4e:69:ee:
27:a1:27:2d:c1:13:c9:c6:85:41:fd:b8:d1:d9:7e:
2a:80:b0:bf:8f:dd:dc:41:44:38:2b:8f:40:9e:f3:
44:cb:0a:03:05:42:42:34:43:0b:98:02:0c:ca:99:
05:27:81:3a:08:92:fe:32:11:61:a1:a1:39:87:00:
74:76:9f:da:fd:22:cc:7f:f8:02:2c:4a:88:c8:a8:
d3:c7:85:2c:cb:05:c3:3a:19:bc:87:5a:7b:69:fa:
a9:19:6d:23:a7:be:47:8d:6f:0a:61:90:d1:37:53:
e1:58:ca:d5:32:4d:1a:d8:65:eb:f4:70:fa:b6:bd:
d3:9a:91:d7:71:bd:6d:b7:11:28:e0:b4:fd:8f:a1:
76:97:3c:3b:26:1a:c1:0c:22:78:02:72:54:08:eb:
5c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:38:4E:64:85:81:05:46:0D:86:51:76:87:99:41:B9:AF:9A:8C:1B
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/3jhOZIWBBUYNhlF2h5lBua-ajBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.149.224.0/20
94.154.178.0/24
103.143.178.0/23
172.96.38.0/23
192.198.184.0/23
193.148.95.0/24
195.246.194.0/24
198.13.22.0/23
199.36.102.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:fa:0e:ed:f5:2b:a2:85:64:ce:3f:7d:56:43:b7:eb:5f:a6:
bb:26:bb:ff:4f:e0:9d:c9:ed:25:d4:ee:c7:36:90:26:71:a4:
75:a6:d6:f3:e8:63:37:1f:31:1f:48:05:7f:e6:89:5c:38:38:
8d:80:a9:08:46:a1:d4:ea:09:21:78:02:30:a1:60:9c:14:54:
9a:47:9f:3d:7d:7e:2c:fb:90:63:bb:4e:b1:a5:33:c7:84:b2:
a1:e6:29:36:d5:68:6e:0a:25:68:9c:ad:a1:18:56:03:e6:6b:
7a:8d:6d:ec:c8:54:61:da:5f:56:31:e7:ae:26:2e:b3:60:aa:
e5:79:f1:8c:73:55:a0:96:3f:0c:2f:9e:6f:94:bb:5e:f2:ed:
23:cf:36:3a:7f:db:d5:7a:14:9a:2c:c5:00:d1:93:e3:88:32:
3e:60:02:40:a5:43:90:3d:a3:d8:0b:65:bf:65:a6:4e:1d:b1:
d9:c8:e6:46:9c:65:20:eb:65:34:8d:cc:04:ee:79:5f:7e:01:
20:4f:ee:e6:b2:02:5c:92:7c:e6:c5:d8:d9:08:d3:70:ce:cd:
0e:e4:91:57:01:05:6a:62:e4:ca:49:3c:75:ef:e5:aa:85:93:
68:55:d8:ff:26:cb:73:2b:4f:52:9a:a0:af:74:6e:af:cb:d7:
93:ef:da:36
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZ5CZQOAITqe2pvQYgQaUBlhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNWQ0YTMyOTcwMmUyYzk4MzFjZDM2MjYyYmJiN2ZhN2I5
N2RlMzcwHhcNMjYwNTE5MjIzOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTM4NGU2NDg1ODEwNTQ2MGQ4NjUxNzY4Nzk5NDFiOWFmOWE4YzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6T5tk4GAWCkToWY8d93/CRniy9Y5
u1qkGI3jNAugbZ6/QmvQB1/vVU7rhZGxvpGfasvA2AMtym9gHruYKw2v6VMYbETU
gQg929ZuYu71/aGQ7kpsIgDCHOJGNw2WkHPVsWgOthFOae4noSctwRPJxoVB/bjR
2X4qgLC/j93cQUQ4K49AnvNEywoDBUJCNEMLmAIMypkFJ4E6CJL+MhFhoaE5hwB0
dp/a/SLMf/gCLEqIyKjTx4UsywXDOhm8h1p7afqpGW0jp75HjW8KYZDRN1PhWMrV
Mk0a2GXr9HD6tr3TmpHXcb1ttxEo4LT9j6F2lzw7JhrBDCJ4AnJUCOtcuwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFN44TmSFgQVGDYZRdoeZQbmvmowbMB8GA1UdIwQY
MBaAFDpdSjKXAuLJgxzTYmK7t/p7l943MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEt
MmNlYThlMTUzNjMyLzEvM2poT1pJV0JCVVlOaGxGMmg1bEJ1YS1hakJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEtMmNlYThlMTUzNjMy
LzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQEVZXgAwQA
XpqyAwQBZ4+yAwQBrGAmAwQBwMa4AwQAwZRfAwQAw/bCAwQBxg0WAwQBxyRmMA0G
CSqGSIb3DQEBCwUAA4IBAQBv+g7t9SuihWTOP31WQ7frX6a7Jrv/T+Cdye0l1O7H
NpAmcaR1ptbz6GM3HzEfSAV/5olcODiNgKkIRqHU6gkheAIwoWCcFFSaR589fX4s
+5Bju06xpTPHhLKh5ik21WhuCiVonK2hGFYD5mt6jW3syFRh2l9WMeeuJi6zYKrl
efGMc1Wglj8ML55vlLte8u0jzzY6f9vVehSaLMUA0ZPjiDI+YAJApUOQPaPYC2W/
ZaZOHbHZyOZGnGUg62U0jcwE7nlffgEgT+7msgJcknzmxdjZCNNwzs0O5JFXAQVq
YuTKSTx17+WqhZNoVdj/JstzK09SmqCvdG6vy9eT79o2
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:37 2026 by rpki-client