Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/3as_F9HBnOQ2zN1jHN4DCrnBZzM.roa
File: 3as_F9HBnOQ2zN1jHN4DCrnBZzM.roa (raw, json)
Hash identifier: ar+5lRYfHjC+pCcYPp0WrmzVTLKDTp6UmrWY3Nr+lvI=
Subject key identifier: DD:AB:3F:17:D1:C1:9C:E4:36:CC:DD:63:1C:DE:03:0A:B9:C1:67:33
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019FFB12E7FA67DBD1A9224DF6B03BAE705C
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/3as_F9HBnOQ2zN1jHN4DCrnBZzM.roa
Signing time: Thu 13 Aug 2026 12:22:27 +0000
ROA not before: Thu 13 Aug 2026 12:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16003
IP address blocks: 31.172.74.0/24 maxlen: 24
31.172.78.0/24 maxlen: 24
79.132.137.0/24 maxlen: 24
79.132.139.0/24 maxlen: 24
81.85.76.0/24 maxlen: 24
89.127.195.0/24 maxlen: 24
89.127.202.0/24 maxlen: 24
89.127.205.0/24 maxlen: 24
89.127.206.0/24 maxlen: 24
89.127.211.0/24 maxlen: 24
89.127.214.0/24 maxlen: 24
89.127.216.0/24 maxlen: 24
89.127.219.0/24 maxlen: 24
89.127.221.0/24 maxlen: 24
89.127.223.0/24 maxlen: 24
103.75.125.0/24 maxlen: 24
103.75.126.0/24 maxlen: 24
130.17.5.0/24 maxlen: 24
130.17.7.0/24 maxlen: 24
130.17.9.0/24 maxlen: 24
130.17.18.0/24 maxlen: 24
130.17.19.0/24 maxlen: 24
130.17.23.0/24 maxlen: 24
130.17.26.0/24 maxlen: 24
162.248.161.0/24 maxlen: 24
185.18.52.0/22 maxlen: 22
185.18.52.0/24 maxlen: 24
185.21.9.0/24 maxlen: 24
185.21.10.0/24 maxlen: 24
194.154.26.0/24 maxlen: 24
213.193.199.0/24 maxlen: 24
213.239.157.0/24 maxlen: 24
213.239.159.0/24 maxlen: 24
217.177.11.0/24 maxlen: 24
217.177.73.0/24 maxlen: 24
217.194.148.0/24 maxlen: 24
2a02:6b40:8002::/48 maxlen: 48
2a02:6b40:8003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:12:e7:fa:67:db:d1:a9:22:4d:f6:b0:3b:ae:70:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Aug 13 12:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddab3f17d1c19ce436ccdd631cde030ab9c16733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:ae:89:19:4a:e8:ba:09:c6:ee:04:2d:3d:
9b:4b:73:60:84:1b:d1:29:23:c8:df:a3:96:69:86:
d8:1e:d8:64:11:8f:de:52:fc:fb:84:91:84:7f:8c:
bf:44:75:e7:d3:cb:fa:51:c6:37:fe:76:6c:34:43:
be:b9:bc:27:70:25:7d:9b:bb:62:e0:f2:5f:e3:8c:
93:c5:b9:28:60:99:d9:8c:bd:2f:ca:dc:3f:d7:fb:
9f:51:16:e8:f1:92:6b:a3:9b:5b:75:1b:0d:4f:66:
03:f2:ac:95:8f:c1:6e:df:89:6e:7a:74:83:48:ad:
22:04:29:b9:cb:56:e6:be:22:9f:53:be:4b:9e:35:
e3:b4:1f:5c:26:19:bc:59:7c:56:6f:35:36:98:19:
1e:0e:a0:89:74:31:a2:dd:80:16:ba:b5:15:a1:fc:
32:83:c8:2f:2f:06:3c:5f:3b:11:c6:8a:57:c1:54:
45:f8:9e:bf:fb:7f:bc:55:59:9f:eb:c9:78:f6:9d:
c5:77:d8:bc:ad:42:d9:a1:a3:e1:e9:d6:c5:6e:6e:
91:ad:1f:5d:b2:aa:b1:11:1f:a4:19:97:a0:53:59:
cf:bf:26:a3:42:35:c9:89:e1:36:ad:3e:77:26:49:
6f:d3:f4:5b:1e:b0:04:c9:b4:7f:df:63:c3:c1:05:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:3F:17:D1:C1:9C:E4:36:CC:DD:63:1C:DE:03:0A:B9:C1:67:33
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/3as_F9HBnOQ2zN1jHN4DCrnBZzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.74.0/24
31.172.78.0/24
79.132.137.0/24
79.132.139.0/24
81.85.76.0/24
89.127.195.0/24
89.127.202.0/24
89.127.205.0-89.127.206.255
89.127.211.0/24
89.127.214.0/24
89.127.216.0/24
89.127.219.0/24
89.127.221.0/24
89.127.223.0/24
103.75.125.0-103.75.126.255
130.17.5.0/24
130.17.7.0/24
130.17.9.0/24
130.17.18.0/23
130.17.23.0/24
130.17.26.0/24
162.248.161.0/24
185.18.52.0/22
185.21.9.0-185.21.10.255
194.154.26.0/24
213.193.199.0/24
213.239.157.0/24
213.239.159.0/24
217.177.11.0/24
217.177.73.0/24
217.194.148.0/24
IPv6:
2a02:6b40:8002::/47
Signature Algorithm: sha256WithRSAEncryption
22:59:60:13:6b:f1:08:09:5e:ec:88:22:19:1b:05:1d:fa:e1:
83:84:03:3c:cb:f3:f0:5a:09:53:43:16:4e:1a:8a:bf:ad:d4:
7b:70:6d:8c:a0:8d:8c:b5:90:f0:a4:ca:e7:7e:99:a0:6d:d4:
a7:6d:11:a8:b5:16:91:e5:b8:83:40:23:0e:0a:d7:ec:ce:9f:
37:2f:85:9c:ca:d0:17:04:65:25:ee:9e:ec:87:35:50:26:87:
91:5e:80:dd:76:0b:1a:85:56:34:b4:83:6e:75:e8:79:63:78:
80:02:22:6f:be:a1:47:ad:27:04:71:56:df:fd:f6:fa:92:03:
51:03:24:f2:5b:42:44:da:cc:2b:54:27:b9:11:43:82:ec:c9:
9c:6e:d2:23:71:74:2b:80:97:b6:90:d0:53:91:67:da:78:65:
d6:8a:a5:58:65:a9:ad:20:f2:0d:e8:a0:7e:54:f3:ae:d4:63:
1e:4e:65:60:a7:75:71:ff:21:a7:aa:93:18:42:7f:74:69:e8:
69:1e:6a:5c:e4:70:40:67:47:e0:a0:db:de:20:ee:48:98:e6:
ed:7a:4f:ab:81:c2:14:26:b7:1a:16:96:93:05:6c:53:cc:e1:
0d:2f:cd:c6:e1:e9:5f:95:55:5f:f6:b1:82:b3:85:15:87:e0:
c6:7b:b1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:18:46 2026 by rpki-client