Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/3DxUz2y-w-oU9XkwLblu0mnExSE.roa
File: 3DxUz2y-w-oU9XkwLblu0mnExSE.roa (raw, json)
Hash identifier: j+9/Pz/kjffz7vgclDxuszWQFHGKnkAq/0VsDedDSxA=
Subject key identifier: DC:3C:54:CF:6C:BE:C3:EA:14:F5:79:30:2D:B9:6E:D2:69:C4:C5:21
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 01A0C05369FEA7DAE03C50E531887C7E9507
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/3DxUz2y-w-oU9XkwLblu0mnExSE.roa
Signing time: Sun 20 Sep 2026 19:38:07 +0000
ROA not before: Sun 20 Sep 2026 19:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62164
IP address blocks: 5.181.164.0/22 maxlen: 22
5.181.164.0/23 maxlen: 23
5.181.167.0/24 maxlen: 24
45.11.88.0/22 maxlen: 22
45.11.88.0/23 maxlen: 24
45.11.90.0/23 maxlen: 23
45.81.150.0/24 maxlen: 24
45.92.29.0/24 maxlen: 24
85.209.84.0/23 maxlen: 23
85.209.87.0/24 maxlen: 24
185.149.232.0/22 maxlen: 22
185.149.232.0/24 maxlen: 24
185.149.234.0/23 maxlen: 23
185.191.228.0/23 maxlen: 23
185.191.231.0/24 maxlen: 24
185.199.224.0/23 maxlen: 23
185.199.226.0/24 maxlen: 24
185.202.172.0/23 maxlen: 23
185.202.174.0/24 maxlen: 24
185.215.148.0/24 maxlen: 24
185.218.235.0/24 maxlen: 24
185.235.14.0/23 maxlen: 23
193.39.184.0/24 maxlen: 24
193.39.185.0/24 maxlen: 24
193.39.186.0/24 maxlen: 24
193.39.187.0/24 maxlen: 24
212.162.148.0/22 maxlen: 22
2a0b:aac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:53:69:fe:a7:da:e0:3c:50:e5:31:88:7c:7e:95:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Sep 20 19:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc3c54cf6cbec3ea14f579302db96ed269c4c521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:1f:36:db:62:07:ad:5a:c2:57:1c:ed:07:
1c:f3:5b:21:12:ba:84:00:04:a1:e4:62:b8:8b:65:
d8:16:2e:0d:b7:5d:53:1d:a4:ee:07:f6:0b:08:4c:
42:59:bd:96:39:61:11:06:28:62:d1:39:41:e4:d6:
d2:ba:d2:d9:23:9d:7a:ec:1a:7f:69:8f:9c:d3:1c:
5d:64:64:c2:62:2a:59:4c:57:b6:75:4a:d4:99:a5:
41:51:60:02:db:9d:c7:fb:d2:c9:52:55:86:7c:0b:
e0:fe:68:7c:ec:7e:e3:f4:72:e6:98:4c:d3:9b:57:
ac:e2:71:85:fa:94:e2:79:fb:80:91:e1:d0:24:89:
49:14:df:c4:7d:20:bb:13:28:b9:e2:48:ab:36:27:
da:3d:ff:10:4a:9e:28:e7:d3:81:b9:3b:18:67:53:
78:9a:a3:be:3e:3f:24:da:b8:6e:e0:fc:5a:9f:25:
fd:33:63:98:5a:50:11:ff:e4:c3:d9:4a:57:04:cb:
82:32:64:7b:af:4c:28:52:a4:20:1c:7c:d0:6a:d1:
de:c8:ca:d7:b8:4e:30:3b:cb:e5:18:1d:2f:b0:84:
fe:b1:fb:fd:d1:b0:73:07:a7:e9:90:79:82:77:40:
90:16:d1:51:5a:b6:c9:6f:8f:0b:fc:09:b3:73:df:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3C:54:CF:6C:BE:C3:EA:14:F5:79:30:2D:B9:6E:D2:69:C4:C5:21
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/3DxUz2y-w-oU9XkwLblu0mnExSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.164.0/22
45.11.88.0/22
45.81.150.0/24
45.92.29.0/24
85.209.84.0/23
85.209.87.0/24
185.149.232.0/22
185.191.228.0/23
185.191.231.0/24
185.199.224.0-185.199.226.255
185.202.172.0-185.202.174.255
185.215.148.0/24
185.218.235.0/24
185.235.14.0/23
193.39.184.0/22
212.162.148.0/22
IPv6:
2a0b:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
77:51:b1:d5:e7:2d:f4:6c:d8:84:f6:09:e4:89:23:d6:2b:a6:
6b:bf:a3:1d:fd:59:e1:e8:de:d8:d6:05:bb:15:88:c9:c9:52:
25:c5:1f:a2:83:51:49:f0:1b:59:bd:7d:af:85:a8:9e:03:5c:
e0:23:2b:cb:54:99:af:c6:89:82:40:81:fb:54:1b:59:30:94:
3a:8c:50:60:67:48:cc:7f:62:ef:ce:07:99:c2:6a:0f:91:75:
a2:ca:42:45:c9:cc:38:4a:1f:84:c4:5c:9f:f0:ac:93:37:5a:
55:ca:75:99:8a:e9:91:82:5f:ad:79:d3:f7:9a:7c:5d:b0:7a:
41:54:24:b3:ac:9a:00:ab:66:69:61:f7:6a:56:23:98:28:6a:
65:6f:7f:6c:e7:67:26:36:6e:a4:5e:f5:d7:50:6f:17:ad:f4:
47:e6:89:dc:8f:cd:b2:f3:44:15:f8:dd:da:24:56:20:86:03:
5c:67:eb:6f:48:c7:66:d9:fe:7b:ee:0e:30:9a:80:36:00:5c:
f2:dc:d6:2f:3b:ed:3b:03:8b:e9:d4:de:e8:8c:7b:91:32:15:
b8:b2:22:86:74:7d:68:4f:6b:bc:2e:58:eb:88:a9:60:74:af:
76:e8:bd:f7:b9:f7:19:e1:be:e2:f5:b7:1c:eb:f0:87:b2:30:
58:8f:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:20:02 2026 by rpki-client