Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/3_teHZlqiyJL6OCe3l3tQgUazuw.roa
File: 3_teHZlqiyJL6OCe3l3tQgUazuw.roa (raw, json)
Hash identifier: LTM6e0OE0QUFBKrZfsSmWI5JalOFaXi6PGkxoB/+ybc=
Subject key identifier: DF:FB:5E:1D:99:6A:8B:22:4B:E8:E0:9E:DE:5D:ED:42:05:1A:CE:EC
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 019C79DFC06695711A7583590A8B65ADACF7
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/3_teHZlqiyJL6OCe3l3tQgUazuw.roa
Signing time: Fri 20 Feb 2026 07:07:12 +0000
ROA not before: Fri 20 Feb 2026 07:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43272
IP address blocks: 77.247.248.0/21 maxlen: 21
77.247.248.0/24 maxlen: 24
77.247.249.0/24 maxlen: 24
77.247.250.0/24 maxlen: 24
77.247.251.0/24 maxlen: 24
77.247.252.0/24 maxlen: 24
77.247.253.0/24 maxlen: 24
77.247.254.0/24 maxlen: 24
77.247.255.0/24 maxlen: 24
185.177.28.0/22 maxlen: 22
185.177.28.0/24 maxlen: 24
185.177.29.0/24 maxlen: 24
185.177.30.0/24 maxlen: 24
185.177.31.0/24 maxlen: 24
2a11:1580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:79:df:c0:66:95:71:1a:75:83:59:0a:8b:65:ad:ac:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Feb 20 07:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dffb5e1d996a8b224be8e09ede5ded42051aceec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:70:3a:3c:2c:0e:e3:5a:76:95:37:b2:7b:
10:98:2d:e8:29:5a:ea:55:24:9f:1d:52:43:c5:44:
10:2a:24:71:4f:e9:05:41:4a:ae:b7:66:c0:9c:20:
7e:e3:5f:2b:d4:ab:87:94:62:d7:7c:2d:68:0d:7a:
b5:5b:a7:89:78:81:b6:71:b3:26:93:71:e0:44:3b:
16:49:52:15:61:45:1d:11:cf:58:04:64:be:dd:f6:
37:95:b5:b1:24:0c:9f:57:d9:19:e6:07:b5:87:12:
d3:74:14:be:93:a7:fb:94:97:f5:ce:fc:6f:f2:a8:
30:3c:1e:c0:33:23:1a:88:f9:28:f6:16:cd:2a:ac:
fa:55:55:2e:91:40:d1:61:09:78:1b:cb:df:cc:d3:
b9:3a:07:f5:11:74:d7:84:32:c8:cb:a5:32:6c:fe:
c1:a2:b8:57:cb:1f:24:9f:99:de:cc:70:e8:c9:a7:
38:51:dc:e8:c3:98:4a:2a:1e:e5:08:22:d1:85:cc:
80:d6:4d:3c:ab:18:6c:c3:7b:90:60:d7:a9:51:c4:
de:c6:32:05:b8:11:07:db:13:ca:21:44:df:49:45:
0a:d4:cb:68:aa:44:45:a9:d3:27:11:30:d1:e4:4d:
41:03:17:37:23:b6:a4:1d:d1:a8:e2:07:cf:bc:e9:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FB:5E:1D:99:6A:8B:22:4B:E8:E0:9E:DE:5D:ED:42:05:1A:CE:EC
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/3_teHZlqiyJL6OCe3l3tQgUazuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.248.0/21
185.177.28.0/22
IPv6:
2a11:1580::/48
Signature Algorithm: sha256WithRSAEncryption
60:d0:15:37:33:e3:7c:c2:ae:0a:1b:cf:ca:71:06:49:2f:48:
d3:60:42:6f:91:49:93:d1:28:4f:29:a7:48:5d:46:4e:48:30:
e6:e1:84:c0:12:c6:5e:4c:c6:ec:04:6f:fe:a1:cf:01:3a:8a:
a4:3c:37:f7:03:95:e0:e5:73:98:2f:df:56:18:7d:17:d7:e6:
6f:18:cf:6d:d3:84:b3:4f:ff:ff:4b:f8:85:21:13:98:57:60:
c3:05:94:13:81:33:d5:31:60:d3:6c:90:68:82:23:22:54:f6:
22:97:ad:46:d4:6d:90:4b:88:c1:98:b6:d0:c7:94:82:f9:df:
57:39:7b:cb:e3:d3:34:bc:f2:57:51:68:2a:6e:9c:b7:92:42:
5b:23:bd:10:52:22:f4:40:20:d8:5c:13:d5:b6:a4:d6:4c:8e:
e0:87:8e:2d:e0:b6:da:88:ad:87:b3:a0:38:a0:c7:d7:ca:7a:
42:65:4d:1f:a1:13:db:74:71:82:26:83:2b:74:ae:46:11:a7:
de:d9:2a:26:e1:fd:d4:19:15:6c:d5:cd:e0:fd:19:a5:41:97:
69:f3:38:56:b5:e4:ee:25:87:77:7d:c2:d5:89:ff:c1:85:d7:
34:3c:68:03:47:a7:60:5a:a7:0b:d0:7f:10:78:ae:c8:28:4e:
98:c2:3f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:51:39 2026 by rpki-client