Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/3LD6WIAhD_aIwcAd82VY9zFCI7I.roa
File: 3LD6WIAhD_aIwcAd82VY9zFCI7I.roa (raw, json)
Hash identifier: 8HYsxXGY/mwoE0plHWwgkDJBrIUo/WJsQuXAN4HGlQY=
Subject key identifier: DC:B0:FA:58:80:21:0F:F6:88:C1:C0:1D:F3:65:58:F7:31:42:23:B2
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 01A0A5733FA6E1F422C11F9F4D825AAAF848
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/3LD6WIAhD_aIwcAd82VY9zFCI7I.roa
Signing time: Tue 15 Sep 2026 14:23:08 +0000
ROA not before: Tue 15 Sep 2026 14:23:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34397
IP address blocks: 79.172.128.0/18 maxlen: 18
85.129.128.0/17 maxlen: 17
85.129.164.0/22 maxlen: 22
88.213.0.0/18 maxlen: 18
88.213.6.0/24 maxlen: 24
88.213.64.0/18 maxlen: 18
88.213.64.0/21 maxlen: 21
88.213.64.0/22 maxlen: 22
88.213.72.0/21 maxlen: 21
88.213.78.0/24 maxlen: 24
88.213.80.0/20 maxlen: 20
88.213.80.0/22 maxlen: 22
88.213.92.0/22 maxlen: 22
88.213.92.0/23 maxlen: 23
88.213.96.0/22 maxlen: 22
88.213.100.0/22 maxlen: 22
88.213.126.0/23 maxlen: 23
89.4.0.0/15 maxlen: 15
89.5.220.0/23 maxlen: 23
89.5.220.0/24 maxlen: 24
93.98.0.0/16 maxlen: 16
93.98.127.0/24 maxlen: 24
212.71.32.0/19 maxlen: 19
212.71.32.0/24 maxlen: 24
212.71.33.0/24 maxlen: 24
212.71.35.0/24 maxlen: 24
212.71.36.0/24 maxlen: 24
212.71.37.0/24 maxlen: 24
212.71.41.0/24 maxlen: 24
212.71.42.0/24 maxlen: 24
212.71.51.0/24 maxlen: 24
212.71.52.0/24 maxlen: 24
212.71.53.0/24 maxlen: 24
212.107.96.0/19 maxlen: 19
212.107.97.0/24 maxlen: 24
212.107.99.0/24 maxlen: 24
212.107.103.0/24 maxlen: 24
212.107.105.0/24 maxlen: 24
212.107.106.0/24 maxlen: 24
212.118.96.0/19 maxlen: 19
212.118.100.0/24 maxlen: 24
212.118.102.0/24 maxlen: 24
212.118.106.0/24 maxlen: 24
212.118.107.0/24 maxlen: 24
212.118.108.0/22 maxlen: 22
212.118.112.0/24 maxlen: 24
212.118.115.0/24 maxlen: 24
212.118.117.0/24 maxlen: 24
212.118.119.0/24 maxlen: 24
212.118.122.0/24 maxlen: 24
212.118.124.0/24 maxlen: 24
212.119.64.0/20 maxlen: 20
212.119.64.0/24 maxlen: 24
212.119.69.0/24 maxlen: 24
212.119.74.0/24 maxlen: 24
212.119.80.0/21 maxlen: 21
212.119.81.0/24 maxlen: 24
212.119.82.0/24 maxlen: 24
212.119.88.0/22 maxlen: 22
212.119.92.0/23 maxlen: 23
212.119.92.0/24 maxlen: 24
212.119.93.0/24 maxlen: 24
213.181.160.0/19 maxlen: 19
213.181.160.0/23 maxlen: 23
213.181.160.0/24 maxlen: 24
213.181.161.0/24 maxlen: 24
213.181.163.0/24 maxlen: 24
213.181.166.0/24 maxlen: 24
213.181.190.0/24 maxlen: 24
213.210.192.0/18 maxlen: 18
213.210.195.0/24 maxlen: 24
213.210.196.0/24 maxlen: 24
213.210.216.0/24 maxlen: 24
213.210.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:73:3f:a6:e1:f4:22:c1:1f:9f:4d:82:5a:aa:f8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Sep 15 14:23:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcb0fa5880210ff688c1c01df36558f7314223b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f1:95:28:6e:22:2d:91:32:0e:ed:b4:2b:f7:
13:2f:46:c1:9a:82:fc:0f:0d:b7:b2:0c:d5:d5:04:
53:a8:a2:c2:7b:8f:8c:62:e0:c1:59:bb:68:72:b6:
17:27:97:67:1b:56:89:2a:a9:6f:80:df:5c:dc:aa:
2d:9e:5d:cd:c9:2f:86:f2:a4:55:37:c9:dc:42:49:
08:17:93:6f:a2:56:b7:34:18:ad:11:42:1a:85:63:
cf:40:0b:b2:7d:66:ab:99:30:83:57:94:36:af:9a:
bf:2a:c4:6f:79:99:7e:40:3d:82:fe:73:82:3f:d2:
30:5b:5d:0a:8f:3c:c6:26:5d:1f:c1:c6:18:c7:f1:
4f:84:97:64:bb:43:f8:f6:e4:0e:b9:7b:1e:8f:ee:
01:91:dc:30:c7:7e:74:70:ff:0c:5a:cd:20:d5:fd:
6a:4b:70:dd:69:3b:fe:19:e9:28:ca:41:32:2f:d2:
ec:a8:57:99:f4:7d:3a:2b:9c:d5:1d:c5:99:31:c4:
b0:cc:38:27:76:d2:e4:3d:ab:c3:6f:55:d8:8f:55:
66:46:4a:d1:e4:b3:a5:c9:32:57:3f:68:38:af:d2:
12:62:96:d5:ab:8b:ad:79:f2:d9:03:85:27:5c:b6:
1d:0e:52:e7:84:69:33:fe:21:01:95:58:84:f5:2e:
c2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B0:FA:58:80:21:0F:F6:88:C1:C0:1D:F3:65:58:F7:31:42:23:B2
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/3LD6WIAhD_aIwcAd82VY9zFCI7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.128.0/18
85.129.128.0/17
88.213.0.0/17
89.4.0.0/15
93.98.0.0/16
212.71.32.0/19
212.107.96.0/19
212.118.96.0/19
212.119.64.0-212.119.93.255
213.181.160.0/19
213.210.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9d:5c:a2:ce:04:56:ae:a4:8d:87:20:44:60:2a:c9:4b:48:c7:
15:4b:3b:5b:36:9c:8a:5a:ae:ae:98:31:30:98:f4:6b:57:a7:
56:57:b9:76:f9:91:f6:99:96:50:78:bd:1c:b3:f3:79:7f:56:
db:db:f3:0c:f6:1a:8e:6d:b2:8f:58:4a:bd:5e:7a:5e:ab:e3:
69:c1:27:1d:83:07:27:a5:c9:dd:05:05:5c:97:7f:99:0e:06:
49:4f:05:12:13:6b:9b:a9:1c:87:7b:f1:b0:61:c2:59:68:b4:
5a:54:ff:f9:38:01:b6:b6:55:0c:a8:a8:f7:7d:af:02:cf:5d:
d3:9e:ba:1e:6d:c9:05:65:e1:ea:eb:7d:51:15:b1:3a:29:e5:
cc:7b:ae:7f:bc:6e:ce:5a:b0:36:3e:42:7d:ad:38:97:a1:73:
79:74:d0:f2:9f:45:89:ad:71:8d:f3:8f:13:58:bb:90:21:19:
b4:44:7c:5e:85:e8:41:9b:ec:6d:12:93:bb:54:6f:5b:30:7b:
aa:32:30:53:57:b8:e8:be:ad:09:98:dd:7a:34:eb:b7:c9:f2:
50:f3:75:d7:de:74:d7:8e:13:78:be:8e:0c:be:19:13:c2:36:
de:a2:55:89:17:28:88:ef:7d:5f:e0:5e:2b:5b:1f:d6:c1:7e:
73:f3:2e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:08 2026 by rpki-client