Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/3Ol3hIK_LpTTaPcg2t100jPs7D0.roa
File: 3Ol3hIK_LpTTaPcg2t100jPs7D0.roa (raw, json)
Hash identifier: PGX6UOC3bxNfQrhWPGdpH7elBsrN/HhSIJo1LHNSmm4=
Subject key identifier: DC:E9:77:84:82:BF:2E:94:D3:68:F7:20:DA:DD:74:D2:33:EC:EC:3D
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A072F91047BA269DD944B1C6BAE1BDEF87
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/3Ol3hIK_LpTTaPcg2t100jPs7D0.roa
Signing time: Sat 05 Sep 2026 19:08:40 +0000
ROA not before: Sat 05 Sep 2026 19:08:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57050
IP address blocks: 212.81.56.0/22 maxlen: 24
212.81.56.0/24 maxlen: 24
212.81.57.0/24 maxlen: 24
212.81.58.0/24 maxlen: 24
212.81.59.0/24 maxlen: 24
2a10:fa80:10::/48 maxlen: 48
2a10:fa80:56::/47 maxlen: 48
2a10:fa80:56::/48 maxlen: 48
2a10:fa80:57::/48 maxlen: 48
2a10:fa80:58::/47 maxlen: 48
2a10:fa80:58::/48 maxlen: 48
2a10:fa80:59::/48 maxlen: 48
2a10:fa80:92::/48 maxlen: 48
2a10:fa80:212::/48 maxlen: 48
2a10:fa80:216::/48 maxlen: 48
2a10:fa80:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:72:f9:10:47:ba:26:9d:d9:44:b1:c6:ba:e1:bd:ef:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 5 19:08:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dce9778482bf2e94d368f720dadd74d233ecec3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:44:8e:e5:73:44:7f:09:18:ae:99:a4:52:
68:50:cc:94:6f:13:d6:cb:a1:07:e0:e7:0a:53:c7:
ed:3a:2c:18:1a:9c:8c:c9:02:3d:f0:75:75:d6:2c:
3b:3c:21:d9:79:89:e4:0e:58:59:1d:65:6f:35:28:
ca:fe:06:ba:3e:7f:1a:a4:86:9e:5b:01:69:1f:f9:
2f:3c:f7:c0:18:92:77:f3:2a:11:7c:ea:93:98:22:
75:6d:1a:2e:02:d0:87:59:cf:b6:db:8b:86:26:f3:
b5:ec:f8:29:d1:ea:ac:4f:a0:ee:24:f3:d5:f7:c9:
7a:4a:d6:8b:4a:4f:36:84:f7:39:7e:d0:bf:75:1a:
e6:6f:a8:f1:2f:e6:4e:31:59:78:da:aa:18:08:17:
62:a5:bf:c3:48:8e:6b:34:13:31:dc:cd:b8:5e:a6:
27:6d:84:80:f4:0b:74:a0:d0:c3:55:95:f9:0e:ce:
10:66:43:88:2a:83:6e:86:02:4c:63:cd:78:77:02:
30:1c:5d:40:5a:a5:a9:3c:a3:c7:ee:8e:24:ee:92:
8b:83:47:bd:89:b2:08:49:d6:a1:c9:52:2c:15:44:
9c:ca:49:aa:46:df:7f:84:44:f7:56:c0:57:64:16:
1e:d3:89:09:a8:04:80:ca:59:de:e5:cb:8d:5a:45:
8e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E9:77:84:82:BF:2E:94:D3:68:F7:20:DA:DD:74:D2:33:EC:EC:3D
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/3Ol3hIK_LpTTaPcg2t100jPs7D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.56.0/22
IPv6:
2a10:fa80:10::/48
2a10:fa80:56::-2a10:fa80:59:ffff:ffff:ffff:ffff:ffff
2a10:fa80:92::/48
2a10:fa80:212::/48
2a10:fa80:216::/48
2a10:fa80:3000::/36
Signature Algorithm: sha256WithRSAEncryption
47:b5:f4:ea:72:af:41:e7:cb:f2:0d:c7:b0:87:fb:d0:91:97:
a7:fe:1d:1f:fd:9c:80:8c:84:1c:44:40:55:b8:45:91:21:56:
49:a7:e5:5c:10:2e:7e:f9:3f:34:09:e1:6e:a4:56:2a:32:95:
0c:5e:07:bd:fe:00:f8:d1:13:e1:8f:a5:55:fd:34:dd:06:ee:
53:fa:c0:88:c6:ba:62:2e:8c:0c:5e:0d:42:46:9b:0b:af:5e:
48:69:74:d4:f8:60:95:1f:e9:9c:9e:6a:0f:47:b8:39:8f:8a:
ec:02:a2:af:96:5e:ca:2b:ff:39:6d:35:74:2e:f0:2e:e6:5e:
72:f9:8e:66:34:84:19:13:64:3a:14:ed:fd:40:97:f1:ae:7c:
69:fb:e5:7c:ce:77:80:54:b4:6e:22:b1:fb:81:88:12:dd:f4:
dd:cf:0b:66:c0:87:95:8e:11:46:65:ee:b0:92:5a:6a:8a:c9:
08:00:31:08:95:8b:32:eb:95:b2:86:3f:1c:6e:85:c7:04:37:
7a:86:9e:a4:92:bc:b9:62:8e:3e:61:d9:6d:bf:13:29:b3:4a:
18:09:16:29:67:69:89:52:fa:21:8a:27:41:44:f1:61:c5:7f:
36:8c:51:9b:9a:e4:14:2e:64:39:b4:35:a1:8f:d7:8e:ee:03:
b8:99:65:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:54:23 2026 by rpki-client