Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/3WpSnsVUimHytGKhT2iNHcZpnC4.roa
File: 3WpSnsVUimHytGKhT2iNHcZpnC4.roa (raw, json)
Hash identifier: IHtD163HeqNDlfCbSdlgdedABQVmWVM6EMO0OYPYCrA=
Subject key identifier: DD:6A:52:9E:C5:54:8A:61:F2:B4:62:A1:4F:68:8D:1D:C6:69:9C:2E
Certificate issuer: /CN=5cd80ef4da0f54f287fd910841193953f9fc0e8f
Certificate serial: 019F2368D226D19B6FE214E5451695BDB5C1
Authority key identifier: 5C:D8:0E:F4:DA:0F:54:F2:87:FD:91:08:41:19:39:53:F9:FC:0E:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/3WpSnsVUimHytGKhT2iNHcZpnC4.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199516
IP address blocks: 185.13.80.0/22 maxlen: 22
185.13.80.0/24 maxlen: 24
185.13.81.0/24 maxlen: 24
185.13.82.0/24 maxlen: 24
185.13.83.0/24 maxlen: 24
2a02:f380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d2:26:d1:9b:6f:e2:14:e5:45:16:95:bd:b5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd80ef4da0f54f287fd910841193953f9fc0e8f
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd6a529ec5548a61f2b462a14f688d1dc6699c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:a2:64:df:92:97:6f:24:6a:5c:59:81:b1:
8e:75:74:e8:8f:4f:d2:7a:9b:53:37:26:71:cc:ba:
36:79:f7:d8:17:f0:88:5e:29:8a:4a:98:ed:f2:ff:
79:3f:c4:b2:17:8d:8c:17:2d:06:0f:ca:c8:3f:28:
a7:76:6c:3c:e5:49:f5:46:84:a3:49:44:74:5a:50:
28:18:50:df:5b:90:5b:d8:09:43:f5:45:e6:01:3a:
cb:73:69:45:19:d3:ed:63:e4:49:10:6e:0c:22:79:
dd:12:4d:74:43:d1:79:9a:c0:4e:47:11:a3:36:48:
dc:73:7b:7a:ca:e9:d5:e7:ea:1a:d8:b3:ce:c1:f1:
f5:11:8b:67:d7:4f:f9:5e:1c:18:2f:8e:a4:00:31:
90:12:77:f6:f5:77:7c:08:e0:9b:a9:a3:7f:44:be:
03:67:9d:7e:cb:6f:3c:d4:49:8d:20:14:c1:02:0e:
16:10:90:b1:1a:21:ab:d3:dd:1f:09:0b:ee:55:62:
8d:6e:78:af:7a:5f:96:8b:df:6c:35:52:35:ac:05:
f1:2f:18:16:da:fb:9e:28:a4:a6:4c:eb:9a:24:59:
41:de:86:e0:74:ee:2a:4e:7d:5a:50:f9:97:c4:b5:
17:35:6c:18:6a:bc:ab:fc:86:9a:b8:98:26:c5:1e:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6A:52:9E:C5:54:8A:61:F2:B4:62:A1:4F:68:8D:1D:C6:69:9C:2E
X509v3 Authority Key Identifier:
keyid:5C:D8:0E:F4:DA:0F:54:F2:87:FD:91:08:41:19:39:53:F9:FC:0E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/3WpSnsVUimHytGKhT2iNHcZpnC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.80.0/22
IPv6:
2a02:f380::/29
Signature Algorithm: sha256WithRSAEncryption
27:cf:5d:b0:f4:ad:13:27:3c:89:d7:ea:f8:3b:71:5b:0c:0b:
e5:2c:d9:92:17:44:1f:18:55:0d:e1:68:0f:88:39:28:47:d0:
40:83:70:3e:28:cd:5c:a3:b3:70:00:67:d9:e9:94:e0:38:72:
ee:b6:f7:9f:ac:61:c1:cd:77:31:f0:84:56:8d:e5:32:8e:a9:
36:b2:6e:7f:60:eb:d6:6c:21:ec:ef:5e:31:17:30:b1:17:f7:
34:08:cd:cd:57:4f:2c:a8:e3:5d:59:1d:b4:10:8c:a9:f8:b7:
03:b2:5e:0b:46:ef:07:3a:a4:3b:f5:e4:fa:e3:4d:6b:97:c5:
70:ab:cb:de:a6:77:05:67:f5:10:f6:55:72:ff:e5:84:54:b0:
5b:be:89:7c:d5:9a:b8:52:ff:b0:7d:6f:ce:f7:2e:72:26:d4:
18:f9:7e:f9:b4:b1:b5:4f:ce:d9:8f:c7:d5:5c:2e:b2:81:0e:
8d:6a:6d:6e:b8:6d:79:14:81:ec:86:14:2c:82:30:e6:a9:f7:
ba:ab:cf:18:e3:a2:1b:66:0b:c4:34:ef:20:2d:cd:73:66:fe:
00:a0:de:f2:ce:7b:75:b2:b5:7f:99:9a:97:af:3e:76:ba:b0:
ff:94:70:5f:c6:81:c7:aa:35:f0:ad:42:b9:a8:1e:17:7b:74:
54:6e:df:90
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaNIm0Ztv4hTlRRaVvbXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDgwZWY0ZGEwZjU0ZjI4N2ZkOTEwODQxMTkzOTUzZjlm
YzBlOGYwHhcNMjYwNzAyMTUxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDZhNTI5ZWM1NTQ4YTYxZjJiNDYyYTE0ZjY4OGQxZGM2Njk5YzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHSiZN+Sl28kalxZgbGOdXToj0/S
eptTNyZxzLo2effYF/CIXimKSpjt8v95P8SyF42MFy0GD8rIPyindmw85Un1RoSj
SUR0WlAoGFDfW5Bb2AlD9UXmATrLc2lFGdPtY+RJEG4MInndEk10Q9F5msBORxGj
Nkjcc3t6yunV5+oa2LPOwfH1EYtn10/5XhwYL46kADGQEnf29Xd8COCbqaN/RL4D
Z51+y2881EmNIBTBAg4WEJCxGiGr090fCQvuVWKNbnivel+Wi99sNVI1rAXxLxgW
2vueKKSmTOuaJFlB3obgdO4qTn1aUPmXxLUXNWwYaryr/IaauJgmxR7zUQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFN1qUp7FVIph8rRioU9ojR3GaZwuMB8GA1UdIwQY
MBaAFFzYDvTaD1Tyh/2RCEEZOVP5/A6PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5nTzlOb1BWUEtIX1pFSVFSazVVX244RG84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lOGMyYmQtOThmYS00YmRmLTgwYmIt
YzVlZWU1N2VkMmU2LzEvM1dwU25zVlVpbUh5dEdLaFQyaU5IY1pwbkM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9lOGMyYmQtOThmYS00YmRmLTgwYmItYzVlZWU1N2VkMmU2
LzEvWE5nTzlOb1BWUEtIX1pFSVFSazVVX244RG84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQ1QMA0E
AgACMAcDBQMqAvOAMA0GCSqGSIb3DQEBCwUAA4IBAQAnz12w9K0TJzyJ1+r4O3Fb
DAvlLNmSF0QfGFUN4WgPiDkoR9BAg3A+KM1co7NwAGfZ6ZTgOHLutvefrGHBzXcx
8IRWjeUyjqk2sm5/YOvWbCHs714xFzCxF/c0CM3NV08sqONdWR20EIyp+LcDsl4L
Ru8HOqQ79eT6401rl8Vwq8vepncFZ/UQ9lVy/+WEVLBbvol81Zq4Uv+wfW/O9y5y
JtQY+X75tLG1T87Zj8fVXC6ygQ6Nam1uuG15FIHshhQsgjDmqfe6q88Y46IbZgvE
NO8gLc1zZv4AoN7yznt1srV/mZqXrz52urD/lHBfxoHHqjXwrUK5qB4Xe3RUbt+Q
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:48:59 2026 by rpki-client