Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/3uJwNTCNY55i-5jM3CaDGvETngw.roa
File: 3uJwNTCNY55i-5jM3CaDGvETngw.roa (raw, json)
Hash identifier: eQzu9ZxiIAP/taHhjsse4i1771g6Ywd3F2q34YSnFrQ=
Subject key identifier: DE:E2:70:35:30:8D:63:9E:62:FB:98:CC:DC:26:83:1A:F1:13:9E:0C
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019D3EDFA77F75869700B7A59571AF4DE507
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/3uJwNTCNY55i-5jM3CaDGvETngw.roa
Signing time: Mon 30 Mar 2026 13:12:17 +0000
ROA not before: Mon 30 Mar 2026 13:12:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213787
IP address blocks: 212.22.64.0/24 maxlen: 24
212.22.68.0/24 maxlen: 24
212.22.88.0/24 maxlen: 24
2a09:d001::/48 maxlen: 48
2a09:d005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:df:a7:7f:75:86:97:00:b7:a5:95:71:af:4d:e5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Mar 30 13:12:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dee27035308d639e62fb98ccdc26831af1139e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:8d:12:48:4b:2d:f1:6f:41:80:23:06:88:
33:7a:d0:cd:34:46:6c:c9:4d:e1:88:88:58:5d:2a:
24:08:67:4d:ff:57:d7:1e:c1:d7:91:66:b9:dd:23:
d2:61:02:f6:e6:15:8d:63:9d:4c:99:6f:f0:83:30:
cd:89:e6:b7:5f:e5:0e:b0:de:8c:0f:60:88:35:b8:
f3:ea:d2:3f:63:b1:9f:f8:15:16:27:51:44:1b:1f:
1e:b3:1f:ea:8a:92:7e:10:fb:44:c8:91:49:88:33:
85:26:76:06:1c:4b:b0:71:50:cf:e7:45:9d:5f:d7:
a5:8b:4e:33:cc:4f:eb:e9:ef:3c:fa:9f:52:3d:b0:
af:15:bb:99:1b:a8:bb:86:c7:d1:b7:e8:fc:f9:3b:
50:ff:ec:50:f1:90:33:e6:47:e8:23:5b:e2:7e:50:
f5:57:70:c8:da:fb:c9:88:44:1a:f2:f8:96:49:33:
e5:05:9d:b1:92:04:1e:d2:c2:76:ed:9a:05:a5:20:
1e:52:3d:45:70:29:f4:5a:8e:29:26:27:7f:31:ff:
6b:7e:a0:ae:34:9a:5e:13:53:75:5d:8e:43:99:e9:
c4:96:32:9f:bd:fd:3c:d5:16:28:9e:3e:fc:fd:fe:
88:22:78:2d:50:e7:0a:dd:1e:65:55:5f:5d:f4:a2:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E2:70:35:30:8D:63:9E:62:FB:98:CC:DC:26:83:1A:F1:13:9E:0C
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/3uJwNTCNY55i-5jM3CaDGvETngw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.64.0/24
212.22.68.0/24
212.22.88.0/24
IPv6:
2a09:d001::/48
2a09:d005::/48
Signature Algorithm: sha256WithRSAEncryption
7a:81:2f:38:5b:7e:36:11:78:a8:b3:81:12:12:60:02:f3:cc:
48:fa:67:63:db:85:85:10:f0:d9:44:25:d8:3e:09:26:50:cb:
26:31:f4:e9:88:4f:86:84:8b:56:7a:99:70:1f:52:de:e8:b0:
d9:0a:e6:e9:06:ca:7a:89:e2:59:97:ea:0a:ce:fb:3b:27:59:
98:f2:92:d1:11:01:f3:a5:46:29:bb:01:28:43:2e:c3:33:bc:
7d:3a:02:84:a9:7c:10:da:e7:13:03:14:c7:a3:be:67:ab:ed:
4e:ea:f8:9d:71:c3:35:2f:c0:dc:07:99:10:80:0a:f4:25:6e:
0e:87:6d:3d:a7:c5:a7:12:b0:d8:e4:08:13:e6:5e:2b:a0:71:
26:f3:19:c0:b9:55:f8:10:80:14:38:db:7a:c1:96:3b:a5:2d:
41:d6:10:52:cf:34:00:8f:67:03:7d:89:c4:23:ea:35:17:aa:
55:6b:f3:e6:91:d0:ce:12:82:03:de:2a:71:fe:27:89:88:34:
87:ed:b8:4a:93:fb:2a:65:22:09:c1:a7:9f:93:e2:72:d1:01:
39:c7:44:bb:5b:5f:9d:0f:a2:52:e8:0b:64:3f:18:b2:52:8e:
15:0b:4a:c3:87:14:32:68:94:f6:0c:70:47:36:da:d5:11:7e:
55:96:7a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:40 2026 by rpki-client