Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/c3qGT-HlNIbOpWOWtGq8wzGlzo8.roa
File: c3qGT-HlNIbOpWOWtGq8wzGlzo8.roa (raw, json)
Hash identifier: dkOdUS1B4RLrr1wGef0PpA8JuUzSKd3BvzN3ojn4kHA=
Subject key identifier: 73:7A:86:4F:E1:E5:34:86:CE:A5:63:96:B4:6A:BC:C3:31:A5:CE:8F
Certificate issuer: /CN=23ef9de2152aef1b2a62a31fb2f35e8590b3ad84
Certificate serial: 019B7CECF73726A1ACACE9F4B6EC4E860C0D
Authority key identifier: 23:EF:9D:E2:15:2A:EF:1B:2A:62:A3:1F:B2:F3:5E:85:90:B3:AD:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/c3qGT-HlNIbOpWOWtGq8wzGlzo8.roa
Signing time: Fri 02 Jan 2026 04:17:43 +0000
ROA not before: Fri 02 Jan 2026 04:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208244
IP address blocks: 5.180.115.0/24 maxlen: 24
83.171.196.0/22 maxlen: 22
146.19.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ec:f7:37:26:a1:ac:ac:e9:f4:b6:ec:4e:86:0c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ef9de2152aef1b2a62a31fb2f35e8590b3ad84
Validity
Not Before: Jan 2 04:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=737a864fe1e53486cea56396b46abcc331a5ce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f3:26:15:ca:d3:b2:22:0d:f2:f2:1c:ac:13:
5c:05:43:34:98:0e:5c:d5:98:4d:9f:44:ab:1a:b0:
c7:14:3e:b2:8f:b9:67:0b:b3:e4:84:57:f9:c7:5c:
90:f2:6b:96:5a:20:1a:74:bb:b1:3e:e3:76:ff:7a:
a6:b3:8a:3a:ba:b6:91:c2:8f:e0:2a:20:59:cb:99:
f5:80:72:7c:7d:a7:2f:c6:17:e4:b3:51:ad:5a:1d:
17:31:57:a4:79:21:df:b6:5f:d8:0c:a5:75:3f:4b:
b7:ef:b4:8f:ad:e3:e4:42:7c:41:8b:77:32:4d:0f:
d1:6d:8e:37:96:20:5c:55:1e:d7:aa:88:52:14:6f:
31:26:5b:14:73:16:22:ad:41:e3:55:6a:c6:56:40:
22:62:44:db:a1:9e:d4:6a:7d:47:3c:7f:17:67:fc:
7f:85:e1:24:e9:18:8f:5e:29:4c:e6:4e:89:44:dc:
76:13:23:ea:a1:be:8c:c8:e4:6f:13:39:3e:d9:ca:
33:fa:5d:1a:34:50:57:0f:89:23:99:7a:bd:81:32:
49:3c:6c:e4:85:f9:60:f8:27:b2:80:85:21:7c:a5:
b6:e4:a9:cb:45:51:5b:46:7f:17:1c:6e:d0:6d:01:
11:4a:3b:99:32:c6:c7:0c:29:e8:db:af:52:e0:2b:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7A:86:4F:E1:E5:34:86:CE:A5:63:96:B4:6A:BC:C3:31:A5:CE:8F
X509v3 Authority Key Identifier:
keyid:23:EF:9D:E2:15:2A:EF:1B:2A:62:A3:1F:B2:F3:5E:85:90:B3:AD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/c3qGT-HlNIbOpWOWtGq8wzGlzo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.115.0/24
83.171.196.0/22
146.19.219.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f7:f2:10:db:23:43:ca:53:5e:4b:30:e7:f3:10:30:6f:4c:
d3:7c:85:13:b4:47:5b:fb:ca:c0:80:bc:02:01:7c:4b:59:c8:
a9:fe:b7:ea:ed:ee:59:97:e2:16:5a:8c:4e:4c:ba:1c:2e:0d:
21:e3:c8:0a:eb:f9:38:ef:2d:20:95:6e:85:fe:8b:38:20:e6:
e1:58:cc:95:1c:ed:27:07:ea:ec:71:fa:80:bd:7d:fd:5d:5d:
77:a1:8f:38:04:cc:3a:e3:88:0c:f4:25:d0:36:39:48:9d:2b:
67:e9:5f:cc:57:c3:2a:0c:b1:e4:73:72:86:9f:96:09:84:31:
96:60:8a:c3:97:c2:ef:3b:3c:24:71:54:4c:9c:40:01:b6:98:
ee:12:ff:60:ec:14:cf:e8:43:b4:b7:77:d6:41:43:9c:bc:14:
ba:8e:fa:5c:83:9d:bc:68:91:dc:82:10:36:de:85:d5:9d:7a:
78:d3:19:2f:22:d0:d0:a9:03:ff:09:f3:21:64:1b:d2:6d:02:
2a:41:ad:37:3a:35:98:00:d4:de:e0:cc:93:c3:a2:5f:89:c2:
df:b1:9b:7e:52:54:b4:5b:86:62:7f:6b:41:97:18:b3:54:64:
74:b0:c9:54:d5:1a:57:0a:3d:5c:29:a6:dc:47:f1:38:13:b9:
60:46:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:35:18 2026 by rpki-client