Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/3me9x6h3lSEZqUVidDsZ7ac0L_U.roa
File: 3me9x6h3lSEZqUVidDsZ7ac0L_U.roa (raw, json)
Hash identifier: JBCZWk53MUOqTUtRTfVY6AmHie1EcXDJvYsQQVSkdlA=
Subject key identifier: DE:67:BD:C7:A8:77:95:21:19:A9:45:62:74:3B:19:ED:A7:34:2F:F5
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 019D9658941628D56F8A046F699A7E2D1F45
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/3me9x6h3lSEZqUVidDsZ7ac0L_U.roa
Signing time: Thu 16 Apr 2026 12:51:20 +0000
ROA not before: Thu 16 Apr 2026 12:51:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214089
IP address blocks: 45.94.103.0/24 maxlen: 24
193.178.44.0/24 maxlen: 24
2a12:b840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:58:94:16:28:d5:6f:8a:04:6f:69:9a:7e:2d:1f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Apr 16 12:51:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de67bdc7a877952119a94562743b19eda7342ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:56:9c:cf:47:63:6e:60:b4:25:29:ea:e9:94:
26:53:34:59:06:5f:3e:d3:94:c3:28:40:de:18:a1:
70:4a:b2:f2:6a:7b:2a:1f:23:e5:2d:a8:1c:ba:b3:
c8:57:08:9d:5a:7b:10:49:6b:6a:3b:83:30:e4:19:
65:70:a2:a2:43:71:1d:ca:b7:c7:d2:d1:29:07:80:
2d:d3:28:18:2b:7a:be:65:d6:c4:2e:5e:13:e7:f8:
da:5b:0c:1d:3c:98:0f:9a:4f:f5:ce:c5:2d:df:1b:
7b:66:ca:83:6e:a4:7c:24:4e:db:d6:64:d5:ea:88:
bd:e5:24:6e:dd:fa:05:15:e8:ae:a7:53:fb:14:0c:
7a:02:f9:f6:98:e6:a9:63:6a:e7:e5:07:e8:3f:e3:
f5:de:87:2c:e4:e2:4b:54:ed:ff:d4:46:69:a7:cc:
47:4b:b6:08:7d:e6:bf:c3:8a:95:c1:68:ca:e8:de:
84:7a:94:a3:28:24:eb:f1:48:e8:b3:7d:e3:e0:04:
d4:b0:d0:ae:45:e2:fe:98:79:56:5d:dd:74:a6:f7:
e2:e0:be:d8:12:09:de:5d:e2:b3:6f:4f:6c:87:d3:
01:75:91:89:49:a2:9e:bc:1d:d4:82:d3:83:09:63:
18:a4:1e:06:43:0e:52:e5:7b:43:57:d4:90:dc:ca:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:67:BD:C7:A8:77:95:21:19:A9:45:62:74:3B:19:ED:A7:34:2F:F5
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/3me9x6h3lSEZqUVidDsZ7ac0L_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.103.0/24
193.178.44.0/24
IPv6:
2a12:b840::/32
Signature Algorithm: sha256WithRSAEncryption
13:40:5a:83:b4:6f:fc:5b:60:d8:17:51:13:f1:29:2c:22:97:
50:c9:87:f6:a4:3d:1e:69:a6:8f:53:76:3e:c1:2f:a3:bc:69:
c3:7d:47:58:04:5b:d8:da:2d:7d:40:90:9d:6a:8f:99:60:91:
84:4d:55:1b:28:ce:af:24:08:a2:ae:28:cf:41:4b:19:58:50:
10:c1:07:97:4f:c9:b3:90:01:84:2b:86:1e:77:17:29:bd:a1:
85:5a:ed:26:5a:bf:69:77:38:42:81:7c:0e:8f:19:c7:65:ae:
96:0e:6e:58:36:0d:c6:11:5e:70:f3:2e:6f:83:11:2e:30:d7:
e8:f4:e1:4b:cf:ec:5c:18:d3:e6:8c:0d:89:f6:48:0e:18:3c:
0c:b8:55:98:5a:7f:a9:ea:83:01:c1:00:2a:85:d2:12:88:e3:
d3:9f:66:58:6c:02:94:e8:3b:db:1e:19:80:a1:66:6c:bc:4a:
9b:4d:ba:4d:78:d4:9c:53:0e:92:eb:9f:28:50:51:96:f2:3c:
a0:a9:d6:b2:b8:30:5b:5f:30:55:db:ae:ba:26:ba:91:3f:ab:
71:0a:1c:3a:ae:21:54:22:66:57:08:ba:d3:69:69:18:f1:ef:
17:b5:90:d8:02:7b:19:fa:22:9c:ab:63:23:49:20:a9:82:1e:
e0:5e:eb:ba
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ2WWJQWKNVvigRvaZp+LR9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjkzNmIzNWY5MmNkZWM1ZTkwZGYzM2JkYzUwODY2MWMy
N2I0NTUwHhcNMjYwNDE2MTI1MTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTY3YmRjN2E4Nzc5NTIxMTlhOTQ1NjI3NDNiMTllZGE3MzQyZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lacz0djbmC0JSnq6ZQmUzRZBl8+
05TDKEDeGKFwSrLyansqHyPlLagcurPIVwidWnsQSWtqO4Mw5BllcKKiQ3EdyrfH
0tEpB4At0ygYK3q+ZdbELl4T5/jaWwwdPJgPmk/1zsUt3xt7ZsqDbqR8JE7b1mTV
6oi95SRu3foFFeiup1P7FAx6Avn2mOapY2rn5QfoP+P13ocs5OJLVO3/1EZpp8xH
S7YIfea/w4qVwWjK6N6EepSjKCTr8Ujos33j4ATUsNCuReL+mHlWXd10pvfi4L7Y
EgneXeKzb09sh9MBdZGJSaKevB3UgtODCWMYpB4GQw5S5XtDV9SQ3MpJvQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFN5nvceod5UhGalFYnQ7Ge2nNC/1MB8GA1UdIwQY
MBaAFMq5NrNfks3sXpDfM73FCGYcJ7RVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAt
NTU5MjM2MGUzZThlLzEvM21lOXg2aDNsU0VacVVWaWREc1o3YWMwTF9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAtNTU5MjM2MGUzZThl
LzEveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALV5nAwQA
wbIsMA0EAgACMAcDBQAqErhAMA0GCSqGSIb3DQEBCwUAA4IBAQATQFqDtG/8W2DY
F1ET8SksIpdQyYf2pD0eaaaPU3Y+wS+jvGnDfUdYBFvY2i19QJCdao+ZYJGETVUb
KM6vJAiirijPQUsZWFAQwQeXT8mzkAGEK4YedxcpvaGFWu0mWr9pdzhCgXwOjxnH
Za6WDm5YNg3GEV5w8y5vgxEuMNfo9OFLz+xcGNPmjA2J9kgOGDwMuFWYWn+p6oMB
wQAqhdISiOPTn2ZYbAKU6DvbHhmAoWZsvEqbTbpNeNScUw6S658oUFGW8jygqday
uDBbXzBV2666JrqRP6txChw6riFUImZXCLrTaWkY8e8XtZDYAnsZ+iKcq2MjSSCp
gh7gXuu6
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:27 2026 by rpki-client