Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/3W5LTxrMaiJELX4kr8QstTlBWOo.roa
File: 3W5LTxrMaiJELX4kr8QstTlBWOo.roa (raw, json)
Hash identifier: dd3yKGhLOhOsRnmHmLH8iiQEZ2KKaU0CStYDn90Tkac=
Subject key identifier: DD:6E:4B:4F:1A:CC:6A:22:44:2D:7E:24:AF:C4:2C:B5:39:41:58:EA
Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial: 01A05E0DB84BDC0CC47C464EEF99E1C1003B
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/3W5LTxrMaiJELX4kr8QstTlBWOo.roa
Signing time: Tue 01 Sep 2026 17:39:12 +0000
ROA not before: Tue 01 Sep 2026 17:39:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.16.162.0/24 maxlen: 24
185.27.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:0d:b8:4b:dc:0c:c4:7c:46:4e:ef:99:e1:c1:00:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Validity
Not Before: Sep 1 17:39:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd6e4b4f1acc6a22442d7e24afc42cb5394158ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:33:65:95:2e:f1:bb:17:e3:f6:ab:37:25:
a3:0c:fe:3e:48:0e:61:b8:f6:0b:2d:a7:50:a3:46:
f4:6a:5b:94:db:62:28:76:9b:18:3e:a3:c8:ff:36:
9d:7d:a9:db:ad:8a:f1:f5:26:a0:fc:02:47:07:cb:
69:ad:6f:75:44:a0:65:3e:6b:b6:69:4f:87:18:b2:
88:9d:a7:95:be:1a:a9:b0:40:dd:29:c0:9b:33:c1:
87:ed:a6:48:ad:5b:8d:f6:5c:f8:3d:cf:9e:f8:12:
59:1c:82:85:7d:04:96:49:80:53:ce:42:66:21:72:
1f:56:51:d1:51:49:ef:5e:57:7a:98:38:20:88:27:
dc:44:96:af:a4:66:7f:b5:e7:6c:8e:03:0c:75:c8:
b1:57:58:02:a7:e6:ad:2f:e1:33:d0:0a:28:5c:5a:
d9:aa:fc:7a:90:e9:f6:35:c4:0b:80:a2:ed:49:fc:
06:d2:0f:04:a1:a0:c8:2a:0f:65:a9:32:7d:c6:14:
42:a1:1d:ba:b7:7d:ea:ba:5d:b9:0c:97:1a:2a:f8:
81:48:b0:8b:14:02:95:e6:a0:89:ba:4a:10:ea:f3:
38:a7:26:8c:30:38:94:78:11:fa:92:23:57:6b:ae:
fa:2c:b4:9c:07:13:dd:54:c8:f0:c1:49:72:06:a5:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6E:4B:4F:1A:CC:6A:22:44:2D:7E:24:AF:C4:2C:B5:39:41:58:EA
X509v3 Authority Key Identifier:
keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/3W5LTxrMaiJELX4kr8QstTlBWOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.162.0/24
185.27.146.0/23
Signature Algorithm: sha256WithRSAEncryption
83:20:7c:ca:3c:4d:fe:97:e0:05:68:2a:d2:bf:2b:52:d0:c8:
dd:3d:18:90:d7:4a:cc:35:a7:bb:7e:6b:a4:b6:59:c2:03:f7:
b2:59:ab:1d:b4:67:81:94:7c:4a:96:6c:ae:24:81:42:bf:2a:
f2:63:6f:16:51:81:17:06:c3:ef:59:58:ac:25:4d:af:3e:e7:
d4:11:35:5c:17:aa:56:bd:c0:25:59:29:cd:af:f5:73:cb:e2:
ee:cd:68:5c:52:e4:ac:40:03:e3:9d:0e:aa:a5:86:84:2b:53:
2a:24:13:fd:c5:7d:26:90:be:2d:35:13:64:6d:49:47:da:82:
83:f3:36:91:7e:06:aa:ae:85:f0:6a:30:5b:12:86:d3:18:ae:
4f:9c:34:11:f1:5a:27:3b:d5:a7:94:12:56:85:7c:a9:88:9c:
41:f7:7b:18:13:2e:d6:74:b2:6c:a0:66:ec:4c:cc:e6:0e:5a:
5d:d9:b9:f5:64:61:d4:3f:92:04:ab:ee:be:37:f3:96:f4:a4:
93:a6:82:39:84:5b:6a:c9:e9:57:ae:65:b0:7d:81:14:1b:d2:
c6:42:dc:42:26:27:95:20:c6:eb:a2:49:56:24:2a:53:9f:eb:
0b:24:7e:10:fb:4a:c0:34:96:5a:19:03:88:88:4e:8d:99:6f:
7b:f1:27:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBeDbhL3AzEfEZO75nhwQA7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMjk4ZDYzOTcwYWIwM2NkZmJmNTE0ZmEwZThlZDIxMzEw
OTg1ZjEwHhcNMjYwOTAxMTczOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDZlNGI0ZjFhY2M2YTIyNDQyZDdlMjRhZmM0MmNiNTM5NDE1OGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhUzZZUu8bsX4/arNyWjDP4+SA5h
uPYLLadQo0b0aluU22IodpsYPqPI/zadfanbrYrx9Sag/AJHB8tprW91RKBlPmu2
aU+HGLKInaeVvhqpsEDdKcCbM8GH7aZIrVuN9lz4Pc+e+BJZHIKFfQSWSYBTzkJm
IXIfVlHRUUnvXld6mDggiCfcRJavpGZ/tedsjgMMdcixV1gCp+atL+Ez0AooXFrZ
qvx6kOn2NcQLgKLtSfwG0g8EoaDIKg9lqTJ9xhRCoR26t33qul25DJcaKviBSLCL
FAKV5qCJukoQ6vM4pyaMMDiUeBH6kiNXa676LLScBxPdVMjwwUlyBqU/+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN1uS08azGoiRC1+JK/ELLU5QVjqMB8GA1UdIwQY
MBaAFI0pjWOXCrA8379RT6Do7SExCYXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDIt
NDk0NzEzYTk5NjNhLzEvM1c1TFR4ck1haUpFTFg0a3I4UXN0VGxCV09vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDItNDk0NzEzYTk5NjNh
LzEvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhCiAwQB
uRuSMA0GCSqGSIb3DQEBCwUAA4IBAQCDIHzKPE3+l+AFaCrSvytS0MjdPRiQ10rM
Nae7fmuktlnCA/eyWasdtGeBlHxKlmyuJIFCvyryY28WUYEXBsPvWVisJU2vPufU
ETVcF6pWvcAlWSnNr/Vzy+LuzWhcUuSsQAPjnQ6qpYaEK1MqJBP9xX0mkL4tNRNk
bUlH2oKD8zaRfgaqroXwajBbEobTGK5PnDQR8VonO9WnlBJWhXypiJxB93sYEy7W
dLJsoGbsTMzmDlpd2bn1ZGHUP5IEq+6+N/OW9KSTpoI5hFtqyelXrmWwfYEUG9LG
QtxCJieVIMbroklWJCpTn+sLJH4Q+0rANJZaGQOIiE6NmW978Sck
-----END CERTIFICATE-----
Generated at Sat Sep 19 01:52:09 2026 by rpki-client