Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/3IYQ_Lc89nt54kRnmyCX4Gtb0U8.roa
File: 3IYQ_Lc89nt54kRnmyCX4Gtb0U8.roa (raw, json)
Hash identifier: bXZuU06bAC9O0GXK5/lo/PbH9vNWkvAuZe3GITBvc5g=
Subject key identifier: DC:86:10:FC:B7:3C:F6:7B:79:E2:44:67:9B:20:97:E0:6B:5B:D1:4F
Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial: 01A0B3F787E1B2004EE8C41328E1823100C1
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/3IYQ_Lc89nt54kRnmyCX4Gtb0U8.roa
Signing time: Fri 18 Sep 2026 10:02:18 +0000
ROA not before: Fri 18 Sep 2026 10:02:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16229
IP address blocks: 46.21.56.0/24 maxlen: 24
62.12.70.0/24 maxlen: 24
62.12.71.0/24 maxlen: 24
62.12.73.0/24 maxlen: 24
62.12.75.0/24 maxlen: 24
62.12.78.0/24 maxlen: 24
62.12.82.0/24 maxlen: 24
62.12.85.0/24 maxlen: 24
62.12.87.0/24 maxlen: 24
62.12.91.0/24 maxlen: 24
62.12.93.0/24 maxlen: 24
62.12.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:f7:87:e1:b2:00:4e:e8:c4:13:28:e1:82:31:00:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Validity
Not Before: Sep 18 10:02:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc8610fcb73cf67b79e244679b2097e06b5bd14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:ab:f3:8b:da:b9:d1:01:5c:9f:0d:b2:6e:
a4:b2:01:7d:19:ef:62:c0:b1:a4:96:a0:22:ca:b7:
f8:9f:50:8d:68:dc:87:ef:d4:50:b3:7c:3f:ed:4a:
7d:f1:8c:40:40:91:40:88:3e:58:60:2c:0a:13:9a:
02:fb:39:c1:4e:8d:59:74:0d:0e:83:42:cd:d2:a8:
d1:f6:7d:6f:13:77:b4:3f:54:31:db:59:63:4e:19:
de:36:63:0e:7e:a8:92:cc:7f:a5:72:8c:3c:a7:46:
80:50:5e:cb:0c:d6:db:04:88:04:6f:46:5d:94:25:
7a:10:69:b6:42:69:c1:89:01:46:c2:e6:e8:ab:6f:
a1:d6:17:e7:22:19:0a:4d:bd:fc:07:0d:6a:35:0a:
06:a5:20:0c:c5:38:f3:b0:bc:f8:2d:ee:17:48:a3:
7c:1e:6b:34:36:f6:a9:9d:7e:93:be:21:6c:6d:31:
81:f2:e8:cf:81:55:3b:a7:9f:c8:bc:f2:d7:93:61:
57:ed:87:21:48:09:0e:1e:de:50:88:9e:8e:db:9c:
6d:a8:3a:92:24:3e:52:47:32:2d:4c:b3:62:75:30:
89:d1:b7:b3:41:79:57:d6:96:bf:43:8b:c5:2e:32:
54:0b:0c:32:a1:91:c8:4b:7d:79:d6:c6:57:cf:b6:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:86:10:FC:B7:3C:F6:7B:79:E2:44:67:9B:20:97:E0:6B:5B:D1:4F
X509v3 Authority Key Identifier:
keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/3IYQ_Lc89nt54kRnmyCX4Gtb0U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.56.0/24
62.12.70.0/23
62.12.73.0/24
62.12.75.0/24
62.12.78.0/24
62.12.82.0/24
62.12.85.0/24
62.12.87.0/24
62.12.91.0/24
62.12.93.0/24
62.12.95.0/24
Signature Algorithm: sha256WithRSAEncryption
03:bc:4c:a7:b6:8d:98:a2:a7:8d:c0:1e:67:67:a3:d2:26:94:
21:ee:6b:f1:48:55:ae:43:57:dc:db:f3:aa:d2:fb:64:ed:98:
34:ab:76:38:e2:21:b9:6a:ff:3a:60:a3:68:b6:09:ff:e6:74:
1d:cf:c5:f9:ec:17:75:fa:b2:36:91:53:ed:1b:4e:f5:30:21:
17:00:7e:9d:b2:31:d8:0d:1a:17:70:74:21:a6:a5:7c:bf:1e:
76:1e:2e:2f:b5:0a:99:a7:73:68:d4:01:25:c6:4d:d2:87:7e:
6b:85:cb:13:79:f0:b7:ba:7a:12:9f:3d:aa:69:6d:d4:07:2a:
79:b1:23:3e:c6:11:cd:1e:01:6e:7e:03:78:74:08:7e:89:74:
91:9f:ce:ea:82:74:2f:ec:ff:ae:a5:27:30:7e:11:f8:51:c2:
5a:63:37:e7:b0:0e:05:0c:bb:44:be:ed:e2:b7:37:f3:96:47:
fb:1c:46:11:ca:60:da:a1:08:cc:2e:3c:3e:b3:55:d2:e3:a8:
ca:83:87:35:b5:c0:5a:c6:f9:52:08:80:ad:e2:3d:83:31:b3:
3e:c9:fe:4c:b2:4e:53:f2:6e:7a:37:a4:e6:06:76:32:3d:80:
92:30:a1:ab:ba:db:a1:79:0d:26:35:6d:b8:e7:c4:07:4c:88:
32:58:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:08:24 2026 by rpki-client