Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/3ZTe0z5h14eRLH112ekGfjQZw24.roa
File: 3ZTe0z5h14eRLH112ekGfjQZw24.roa (raw, json)
Hash identifier: pZ0L6Rvz7wOe/ZQ8YJjvvmKeTWfIEcRf1XKhW6PXSPA=
Subject key identifier: DD:94:DE:D3:3E:61:D7:87:91:2C:7D:75:D9:E9:06:7E:34:19:C3:6E
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019CA0A7F2327B8F0FD8E16F350D7884583C
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/3ZTe0z5h14eRLH112ekGfjQZw24.roa
Signing time: Fri 27 Feb 2026 19:51:26 +0000
ROA not before: Fri 27 Feb 2026 19:51:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59651
IP address blocks: 45.80.104.0/23 maxlen: 23
45.140.204.0/23 maxlen: 23
193.187.92.0/23 maxlen: 23
193.187.94.0/23 maxlen: 23
193.202.8.0/23 maxlen: 23
193.202.10.0/23 maxlen: 23
193.202.82.0/23 maxlen: 23
193.202.85.0/24 maxlen: 24
193.203.10.0/23 maxlen: 23
212.119.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:a7:f2:32:7b:8f:0f:d8:e1:6f:35:0d:78:84:58:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Feb 27 19:51:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd94ded33e61d787912c7d75d9e9067e3419c36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:c4:56:e9:93:4d:e5:7f:ce:9c:aa:22:c2:
ab:a0:77:ef:e6:f5:19:8c:ae:b5:8b:a5:d9:20:9f:
f6:1b:7d:75:4b:72:08:02:5a:1b:ff:7b:4a:6c:a3:
28:30:c0:28:5b:ea:cc:42:58:17:3d:47:ec:21:3d:
0f:f8:19:e0:c3:4a:a1:22:e4:db:d1:91:da:d5:02:
c3:a6:cc:36:31:63:de:93:aa:92:d3:7b:91:d0:84:
f5:b3:19:56:9b:8f:85:38:60:ec:c6:51:60:f0:9e:
b4:83:08:39:2b:90:9f:48:de:48:1c:f4:20:b2:15:
29:62:a2:28:83:12:4b:ad:11:68:3f:9e:20:6e:8e:
b6:1a:1f:50:01:74:c7:1f:c4:ae:89:17:5b:5e:99:
ef:b2:2a:31:4d:f5:7f:a1:24:32:ff:b1:8d:04:d0:
bd:cc:f0:7e:8d:be:3a:bf:90:7b:93:2c:68:68:05:
9d:df:9a:c3:52:45:1b:92:f9:9d:f8:1b:87:e4:dc:
b9:7e:0b:92:12:bc:eb:90:15:ec:51:47:a9:1f:28:
ad:f3:6e:8e:a3:89:fa:87:c5:0c:63:b2:22:f3:42:
75:19:16:c7:41:62:56:11:9d:45:3f:d8:8b:ca:ce:
c8:14:b0:53:a6:76:09:f5:0f:20:3b:be:99:fd:67:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:94:DE:D3:3E:61:D7:87:91:2C:7D:75:D9:E9:06:7E:34:19:C3:6E
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/3ZTe0z5h14eRLH112ekGfjQZw24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.104.0/23
45.140.204.0/23
193.187.92.0/22
193.202.8.0/22
193.202.82.0/23
193.202.85.0/24
193.203.10.0/23
212.119.44.0/23
Signature Algorithm: sha256WithRSAEncryption
73:d3:ec:a6:e5:1b:ca:a5:d9:2b:3a:55:29:72:52:b0:09:86:
8b:dd:4e:89:4f:db:79:83:3d:45:13:30:57:27:7a:38:c1:a0:
3a:cc:7b:51:e2:0f:cc:78:7d:91:78:03:82:26:9e:bd:0b:3b:
23:45:af:af:45:c1:5d:e8:6d:8c:5d:29:99:90:99:be:a0:d1:
34:c8:ff:a1:1b:54:ae:f9:a9:b8:0d:54:19:48:4d:8e:a1:5d:
2d:cd:2a:32:81:84:65:4b:e9:93:f7:0c:4c:87:2e:18:3a:fd:
54:76:62:c5:ad:64:96:7a:24:42:6b:bb:bf:73:31:db:36:82:
0f:95:13:e9:b1:fc:d5:b8:c1:3b:70:76:55:19:37:33:1e:67:
b9:5a:2a:c4:77:49:6b:db:cb:46:84:d2:b0:f6:a1:b1:40:c1:
6d:c4:74:9b:49:af:f4:7f:86:30:96:9b:fc:b9:5a:0f:d0:4a:
de:2a:5a:9c:9e:94:f9:d7:c3:df:31:6c:10:d7:34:7d:63:3f:
f7:de:d2:e4:36:0c:dd:3c:2c:39:88:8a:a5:f1:24:17:b9:ec:
19:5b:68:fb:57:02:90:09:31:df:2d:03:7c:b1:67:32:a1:24:
90:d4:f4:8c:0d:79:90:d1:21:05:b9:0a:5e:e7:e5:6a:43:2d:
0c:96:55:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:31 2026 by rpki-client