Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/3P39wkexpKGMC_-n6F5vI94yQgg.roa
File: 3P39wkexpKGMC_-n6F5vI94yQgg.roa (raw, json)
Hash identifier: HMLIMLk2ne2KsKtYKkHnU7RkPYKADLOQHIbB/ogiuuk=
Subject key identifier: DC:FD:FD:C2:47:B1:A4:A1:8C:0B:FF:A7:E8:5E:6F:23:DE:32:42:08
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 01A09F1F0C97A64470B5899F05CD21EB45C4
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/3P39wkexpKGMC_-n6F5vI94yQgg.roa
Signing time: Mon 14 Sep 2026 08:53:27 +0000
ROA not before: Mon 14 Sep 2026 08:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202
IP address blocks: 5.134.208.0/21 maxlen: 21
5.134.208.0/24 maxlen: 24
5.134.209.0/24 maxlen: 24
5.134.210.0/24 maxlen: 24
5.134.211.0/24 maxlen: 24
5.134.212.0/24 maxlen: 24
5.134.213.0/24 maxlen: 24
5.134.214.0/24 maxlen: 24
5.134.215.0/24 maxlen: 24
91.194.188.0/23 maxlen: 23
91.194.188.0/24 maxlen: 24
91.194.189.0/24 maxlen: 24
91.207.14.0/23 maxlen: 23
91.207.14.0/24 maxlen: 24
91.207.15.0/24 maxlen: 24
178.21.152.0/21 maxlen: 21
178.21.152.0/24 maxlen: 24
178.21.153.0/24 maxlen: 24
178.21.154.0/24 maxlen: 24
178.21.155.0/24 maxlen: 24
178.21.156.0/24 maxlen: 24
178.21.157.0/24 maxlen: 24
185.31.24.0/22 maxlen: 22
185.31.24.0/24 maxlen: 24
185.31.25.0/24 maxlen: 24
185.31.26.0/24 maxlen: 24
185.31.27.0/24 maxlen: 24
193.23.48.0/24 maxlen: 24
193.203.222.0/23 maxlen: 23
193.203.222.0/24 maxlen: 24
193.203.223.0/24 maxlen: 24
194.0.251.0/24 maxlen: 24
2a02:dc8::/29 maxlen: 29
2a02:dc8::/30 maxlen: 30
2a02:dc8::/32 maxlen: 32
2a02:dc8:20::/48 maxlen: 48
2a02:dc8:22::/48 maxlen: 48
2a02:dc8:30::/48 maxlen: 48
2a02:dc8:31::/48 maxlen: 48
2a02:dc8:32::/48 maxlen: 48
2a02:dc8:33::/48 maxlen: 48
2a02:dcc::/32 maxlen: 32
2a02:dcc:20::/48 maxlen: 48
2a02:dcc:22::/48 maxlen: 48
2a02:dcc:30::/48 maxlen: 48
2a02:dcc:31::/48 maxlen: 48
2a02:dcc:32::/48 maxlen: 48
2a02:dcc:33::/48 maxlen: 48
2a02:dcd::/32 maxlen: 32
2a02:dce::/32 maxlen: 32
2a02:dcf::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:1f:0c:97:a6:44:70:b5:89:9f:05:cd:21:eb:45:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Sep 14 08:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcfdfdc247b1a4a18c0bffa7e85e6f23de324208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:29:61:67:89:98:d0:a8:33:9c:87:4c:e2:
0b:01:ab:da:bc:b1:5a:76:3d:3c:84:cc:b2:52:a9:
9b:8a:ac:35:c3:03:8e:4a:bc:36:05:5b:56:03:62:
9a:87:7a:9f:74:1f:21:bb:59:7a:bf:f5:9d:4c:73:
76:a1:c3:ea:68:88:b4:fd:b1:47:a1:6a:6b:6f:ac:
4f:1f:71:00:90:83:c4:79:50:4f:8a:4b:a8:f4:c5:
df:0b:a8:87:f9:3b:04:b4:d3:1c:ae:c4:70:31:26:
a4:5d:e2:72:ce:2a:f7:7f:78:55:cc:10:07:da:4a:
5a:c7:dc:a5:03:c7:d2:3c:bf:8c:49:29:b4:99:fd:
db:cf:36:7a:33:98:b9:e4:b8:59:58:4e:50:c4:11:
60:71:dd:98:4e:67:02:5c:90:48:1f:8b:e7:e9:f8:
8b:22:dc:b6:47:4b:37:a9:11:96:1d:21:38:c3:45:
5d:92:bd:3c:89:8e:6a:88:27:4e:6e:0c:cb:31:50:
3d:ff:bd:11:e3:b7:b2:ad:56:a8:38:6a:c3:71:18:
27:6b:61:3d:dd:ed:08:f5:ec:26:5f:69:d3:44:d7:
e5:87:b5:00:c7:6d:63:5a:dc:7d:d7:75:6c:11:e9:
7c:ae:b7:2c:d1:b8:e8:62:88:29:c9:61:88:8e:dd:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:FD:C2:47:B1:A4:A1:8C:0B:FF:A7:E8:5E:6F:23:DE:32:42:08
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/3P39wkexpKGMC_-n6F5vI94yQgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.208.0/21
91.194.188.0/23
91.207.14.0/23
178.21.152.0/21
185.31.24.0/22
193.23.48.0/24
193.203.222.0/23
194.0.251.0/24
IPv6:
2a02:dc8::/29
Signature Algorithm: sha256WithRSAEncryption
6c:c1:d4:9d:6a:5a:ee:9c:d6:89:b5:b5:88:62:b8:a8:97:1b:
eb:0d:3c:eb:7f:96:36:cc:53:f3:a0:63:4d:0c:d4:6f:86:f3:
57:03:e5:a6:f7:21:51:b8:4c:0b:f9:b4:ce:62:a0:2d:a5:ed:
20:12:df:04:e9:44:59:7d:03:a3:22:0f:fe:0e:85:0a:97:54:
cb:a3:f4:14:3a:03:42:f5:62:7a:d1:56:7c:e2:09:40:3f:5e:
89:bb:52:1a:07:73:01:ad:8d:39:70:6c:77:f0:12:e2:f1:fa:
32:a5:b8:d5:84:ea:11:40:13:05:4e:dd:74:4c:10:01:25:8c:
2c:71:18:6c:bb:1d:e5:88:78:6d:75:fe:44:27:30:5f:81:75:
26:9c:db:31:5a:6a:9c:40:16:59:54:89:4c:ab:e0:c6:f0:01:
95:8e:a6:0e:df:c7:0a:6f:c8:0b:ec:23:2a:37:a5:8d:c2:72:
b4:e4:67:08:a9:78:5c:ce:85:84:b8:df:b0:7d:99:e1:81:a8:
00:28:e5:f3:ee:f1:2e:1e:3e:e6:bc:fb:ca:20:da:75:4c:55:
74:47:a9:d9:ed:40:ad:d2:49:8c:79:27:31:3e:bb:43:5e:dd:
eb:26:d6:20:a8:27:66:42:d0:11:3c:a6:e3:58:5a:a7:6e:41:
8c:05:0d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:20:55 2026 by rpki-client