Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3qDlZHa9yB_ood31YwNMoEnzIYI.roa
File: 3qDlZHa9yB_ood31YwNMoEnzIYI.roa (raw, json)
Hash identifier: 6181hCncjCgEB15lMboYxKJw4mpNWI2vAdWre5kb6Og=
Subject key identifier: DE:A0:E5:64:76:BD:C8:1F:E8:A1:DD:F5:63:03:4C:A0:49:F3:21:82
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C6F235AD1C2DC8C5EAD0EC8E3A84A00F8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3qDlZHa9yB_ood31YwNMoEnzIYI.roa
Signing time: Wed 18 Feb 2026 05:05:13 +0000
ROA not before: Wed 18 Feb 2026 05:05:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201687
IP address blocks: 89.144.25.0/24 maxlen: 24
2a02:2fc0:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6f:23:5a:d1:c2:dc:8c:5e:ad:0e:c8:e3:a8:4a:00:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 18 05:05:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dea0e56476bdc81fe8a1ddf563034ca049f32182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6f:69:4a:62:4b:56:6e:34:e4:cf:36:1f:79:
c8:72:f6:ec:9d:35:0e:3c:10:18:7c:05:68:00:35:
5e:a9:f7:9c:18:af:7e:37:95:3c:c5:08:f8:a6:b0:
d5:a2:62:30:91:01:10:22:72:b5:8f:5a:ba:ee:44:
76:28:e7:f0:1c:54:33:97:ce:2c:90:71:54:e9:b8:
03:dd:cb:e2:a3:85:ff:18:1d:5d:46:0e:b7:00:cf:
57:9a:87:1b:85:b7:01:a0:5e:3e:26:45:ac:ea:40:
03:4a:66:ed:e1:e8:4d:d0:a2:f1:47:21:e0:90:0d:
d5:7a:03:79:37:0d:5a:d6:67:27:af:aa:8d:59:e4:
0c:3b:34:c0:dc:f3:93:6b:b3:e5:10:17:c8:21:e5:
07:92:9f:bf:c6:ed:e0:10:e9:27:eb:92:8f:1f:14:
31:d0:2f:9b:ef:1c:43:f5:b5:3e:bd:10:4e:cf:ba:
f2:eb:1f:db:13:37:c8:ee:89:2f:5c:59:18:e2:70:
4f:be:50:1a:6a:c1:1a:35:70:0e:65:b2:da:05:44:
a7:f2:c4:02:b8:1c:62:07:a9:0e:b8:49:51:9e:1e:
d0:bd:95:60:89:af:61:ab:81:8b:d7:22:da:f4:25:
96:59:e5:dd:43:e6:22:15:73:15:f3:7d:48:d3:64:
11:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:E5:64:76:BD:C8:1F:E8:A1:DD:F5:63:03:4C:A0:49:F3:21:82
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3qDlZHa9yB_ood31YwNMoEnzIYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.25.0/24
IPv6:
2a02:2fc0:21::/48
Signature Algorithm: sha256WithRSAEncryption
3b:40:65:32:5d:52:a7:b1:52:5c:c7:42:20:3b:41:d7:8a:f9:
97:f6:db:74:50:e9:bd:31:b9:4b:b7:18:f4:0c:f1:18:77:8c:
a1:e1:6c:44:c4:8e:cb:5d:be:37:5d:25:81:eb:43:94:9c:cd:
94:14:79:f8:20:13:c8:02:55:55:cc:67:e9:12:27:5b:9e:59:
d7:3b:69:d6:df:8c:3b:b7:b6:a5:a7:f5:68:65:33:94:30:41:
90:a2:70:e3:d6:68:59:c7:0a:65:03:3e:c0:f0:68:9d:79:5d:
19:e0:be:9a:7d:ce:14:86:d8:32:9c:06:e5:3a:f0:00:b9:7e:
bf:73:16:d0:ea:7b:ec:91:ba:b4:7a:02:d3:10:e8:65:6b:4c:
7e:33:25:6c:b7:8c:87:d2:2c:e2:92:ac:52:1e:1a:7d:15:cd:
9e:9b:6d:18:68:de:03:15:db:4c:26:be:34:81:ff:e6:ff:01:
eb:bd:ee:f9:81:90:02:f3:ef:fd:3e:b9:12:01:3b:92:47:13:
ca:a3:70:c0:33:4e:48:e3:fe:ca:1a:e7:97:78:12:b7:b1:7b:
2f:bd:3c:a8:b0:8b:78:5a:22:bc:c7:19:32:5f:6d:b2:2e:77:
da:79:64:76:15:e9:81:a1:30:27:7d:e9:8b:75:52:1f:2d:a5:
f6:40:72:72
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZxvI1rRwtyMXq0OyOOoSgD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMjE4MDUwNTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWEwZTU2NDc2YmRjODFmZThhMWRkZjU2MzAzNGNhMDQ5ZjMyMTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj29pSmJLVm405M82H3nIcvbsnTUO
PBAYfAVoADVeqfecGK9+N5U8xQj4prDVomIwkQEQInK1j1q67kR2KOfwHFQzl84s
kHFU6bgD3cvio4X/GB1dRg63AM9XmocbhbcBoF4+JkWs6kADSmbt4ehN0KLxRyHg
kA3VegN5Nw1a1mcnr6qNWeQMOzTA3POTa7PlEBfIIeUHkp+/xu3gEOkn65KPHxQx
0C+b7xxD9bU+vRBOz7ry6x/bEzfI7okvXFkY4nBPvlAaasEaNXAOZbLaBUSn8sQC
uBxiB6kOuElRnh7QvZVgia9hq4GL1yLa9CWWWeXdQ+YiFXMV831I02QRIwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN6g5WR2vcgf6KHd9WMDTKBJ8yGCMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvM3FEbFpIYTl5Ql9vb2QzMVl3Tk1vRW56SVlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWZAZMA8E
AgACMAkDBwAqAi/AACEwDQYJKoZIhvcNAQELBQADggEBADtAZTJdUqexUlzHQiA7
QdeK+Zf223RQ6b0xuUu3GPQM8Rh3jKHhbETEjstdvjddJYHrQ5SczZQUefggE8gC
VVXMZ+kSJ1ueWdc7adbfjDu3tqWn9WhlM5QwQZCicOPWaFnHCmUDPsDwaJ15XRng
vpp9zhSG2DKcBuU68AC5fr9zFtDqe+yRurR6AtMQ6GVrTH4zJWy3jIfSLOKSrFIe
Gn0VzZ6bbRho3gMV20wmvjSB/+b/Aeu97vmBkALz7/0+uRIBO5JHE8qjcMAzTkjj
/soa55d4Erexey+9PKiwi3haIrzHGTJfbbIud9p5ZHYV6YGhMCd96Yt1Uh8tpfZA
cnI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:28 2026 by rpki-client