Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/3LC-Y7qPZC_JGd1u0LIjsHIB4rQ.roa
File: 3LC-Y7qPZC_JGd1u0LIjsHIB4rQ.roa (raw, json)
Hash identifier: 32UVF+4KJWjYIhoujznXzE7tejdx4vAfS4m6gCK8OWY=
Subject key identifier: DC:B0:BE:63:BA:8F:64:2F:C9:19:DD:6E:D0:B2:23:B0:72:01:E2:B4
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 019F9F29A480C8C2E1F815F7ED402BE85879
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/3LC-Y7qPZC_JGd1u0LIjsHIB4rQ.roa
Signing time: Sun 26 Jul 2026 16:02:14 +0000
ROA not before: Sun 26 Jul 2026 16:02:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210814
IP address blocks: 87.199.152.0/24 maxlen: 24
87.199.153.0/24 maxlen: 24
136.148.148.0/24 maxlen: 24
136.148.149.0/24 maxlen: 24
136.148.150.0/24 maxlen: 24
136.148.151.0/24 maxlen: 24
2a05:3a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:29:a4:80:c8:c2:e1:f8:15:f7:ed:40:2b:e8:58:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Jul 26 16:02:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcb0be63ba8f642fc919dd6ed0b223b07201e2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:fb:17:34:63:2e:d8:6f:dd:ee:ad:09:cc:
43:51:a2:58:a4:b1:49:7f:7f:bc:a8:8a:84:fc:23:
1c:8f:60:5e:c8:e9:84:89:77:ca:77:18:ec:aa:41:
ba:dc:6b:b1:2e:11:1a:d9:86:83:bd:34:9e:ac:1a:
2f:8e:99:2e:f8:7f:2e:1b:4d:ce:8a:07:b1:71:ae:
b3:42:c6:7c:9f:2c:45:d9:09:0e:9e:44:c2:39:1a:
8e:99:35:37:31:62:ca:86:52:48:8e:93:75:6c:d1:
e0:6f:6e:37:43:a7:ea:ac:4e:1e:48:4d:d5:d7:25:
f4:e7:2b:d9:29:bd:ad:be:8b:24:92:c9:61:dd:40:
fc:cd:98:f7:42:08:9c:3c:12:86:1d:18:9c:84:50:
b6:fe:50:bb:4c:8a:d7:86:b3:e4:dc:0b:bd:55:0f:
9f:0d:88:1e:47:cf:92:37:85:92:74:42:a1:39:73:
57:51:e4:bb:7f:a8:66:85:d8:ff:74:88:64:bc:2d:
3b:cc:9a:3a:49:d8:22:76:2f:48:fa:5f:af:8f:01:
6d:7b:24:65:96:5f:fa:82:15:97:89:72:38:35:5f:
03:6e:10:09:ba:00:15:2e:e6:1b:2d:25:0e:a5:ed:
ed:0e:67:0e:7a:9b:28:46:a8:af:32:b8:8a:01:01:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B0:BE:63:BA:8F:64:2F:C9:19:DD:6E:D0:B2:23:B0:72:01:E2:B4
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/3LC-Y7qPZC_JGd1u0LIjsHIB4rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.152.0/23
136.148.148.0/22
IPv6:
2a05:3a80::/48
Signature Algorithm: sha256WithRSAEncryption
63:f6:e7:19:83:32:18:a3:19:47:9e:c8:76:32:ff:fb:75:cd:
49:49:70:f6:2c:13:65:3f:4f:b3:cc:52:d7:91:f6:dd:20:9f:
22:1b:d8:16:c7:e6:25:89:5d:30:ce:0a:23:e0:6b:e5:ac:0a:
b8:2f:79:70:a3:fe:bb:18:f7:44:68:5e:66:ba:4d:20:d7:15:
bb:05:29:6c:af:37:9c:48:a0:f0:52:53:90:2d:69:93:0a:75:
a5:ae:d9:23:80:32:cd:42:9d:09:4e:84:61:5b:2e:84:58:06:
5f:4e:a3:eb:a2:bb:51:e9:8b:f6:fb:ea:30:3c:c4:9d:88:ad:
9a:7e:db:58:99:bf:43:ce:17:6c:43:7f:ac:b9:8f:e7:6c:ec:
b4:e3:66:85:a3:03:8d:90:c5:58:a5:78:b8:fa:71:6e:b6:92:
73:a5:89:e6:13:b9:49:4a:8f:98:90:e7:55:ac:12:cb:31:ea:
fc:cf:54:9b:02:38:d4:09:67:21:80:24:6f:88:89:64:7c:a5:
4a:d1:2e:88:bb:f5:f2:26:79:ed:30:79:31:f8:c4:7c:14:ff:
ea:b4:11:c0:42:83:46:5c:8c:06:9d:30:65:07:35:21:5a:c6:
bf:86:56:1f:1f:c7:59:15:6c:e3:15:ef:55:10:d0:1e:02:da:
cc:66:1e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:53 2026 by rpki-client