Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa
File: 3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa (raw, json)
Hash identifier: acEC1OUf//YKspHFK3djxcemZO7WYk9sXLyjUeGdWac=
Subject key identifier: DD:23:E0:7E:EE:18:DB:02:8A:3B:EE:62:01:4E:7C:91:B6:DF:55:02
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 019B7EA73FE224F237D2AE3BDB7392BA6DD8
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa
Signing time: Fri 02 Jan 2026 12:20:48 +0000
ROA not before: Fri 02 Jan 2026 12:20:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44387
IP address blocks: 46.151.48.0/22 maxlen: 22
83.143.200.0/21 maxlen: 21
91.199.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:3f:e2:24:f2:37:d2:ae:3b:db:73:92:ba:6d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Jan 2 12:20:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd23e07eee18db028a3bee62014e7c91b6df5502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1d:17:08:19:50:aa:c9:80:5b:0e:d7:4f:60:
4d:3c:26:1e:2e:88:68:3c:20:9d:f7:e4:c8:73:bd:
58:6b:f2:37:5d:0e:36:2a:f0:48:c5:12:c4:f5:23:
2d:7b:40:69:ee:38:6d:a2:1e:b5:6b:4d:c7:e2:e1:
8d:3b:47:18:e4:24:72:f6:f2:c0:30:e7:37:a8:23:
15:1e:c4:d1:26:c6:b5:08:56:d1:10:ca:58:62:a5:
00:7c:b9:af:df:f8:93:c5:46:5c:5c:80:d6:f8:11:
c8:ce:5d:50:28:12:8d:86:1c:d2:0a:df:35:26:ea:
5f:43:9e:41:ae:d2:1f:de:96:4a:5d:5a:84:3a:e9:
19:20:d4:e3:a2:a7:ad:52:e9:b5:66:40:ec:44:3c:
38:7d:3e:a6:e0:44:e0:fd:e3:eb:ec:eb:66:d8:66:
b0:1f:97:cd:c0:f0:41:0d:39:b4:2b:43:10:df:b6:
b7:16:24:bc:3b:12:b5:80:13:37:f9:b4:07:8c:ff:
aa:e6:8d:2b:c4:ea:de:b7:3f:ee:be:5b:08:eb:cf:
c7:80:4e:de:44:26:7d:57:66:a9:5e:6c:a0:e6:11:
15:88:74:19:f0:f8:ba:fe:fc:97:6a:a4:80:50:ff:
9f:ba:9a:31:db:cd:c6:fb:7a:27:cc:71:89:fc:db:
dc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:23:E0:7E:EE:18:DB:02:8A:3B:EE:62:01:4E:7C:91:B6:DF:55:02
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.48.0/22
83.143.200.0/21
91.199.115.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d4:12:c3:08:b5:d7:8d:a8:d9:f3:5b:5f:bd:1f:82:77:e6:
5a:6f:38:f6:f5:6f:75:60:d2:d8:d1:bd:da:60:4c:68:ca:a2:
44:50:76:94:20:81:9f:f2:4d:fb:92:fc:30:fc:5a:11:e1:75:
03:88:d9:f9:9e:99:58:8b:e9:40:4b:52:2b:7b:e6:6a:4a:94:
1c:71:a5:55:99:db:51:02:ae:4b:34:44:0a:3d:d7:89:0b:e4:
dd:9b:d9:df:b4:6e:ad:cb:ed:b5:6f:da:fb:79:93:16:da:52:
0a:c7:8a:ad:3a:c5:77:12:7b:61:38:38:8c:6d:45:98:d4:64:
c8:5a:a5:cd:73:fd:5e:a2:70:b5:da:d1:8d:3a:58:f6:5e:5d:
8f:e0:b5:61:6a:ef:99:f3:7d:34:1c:99:2f:0b:fe:ff:3b:4e:
0f:2c:a8:60:bd:c0:16:40:22:8b:ee:26:d2:61:79:42:28:17:
d8:d8:33:a8:2c:20:97:07:54:d8:cc:a1:4c:d3:ed:dd:28:28:
25:42:5b:19:b0:18:e7:82:72:1d:04:aa:0e:66:7f:59:62:ba:
bd:9e:bd:d1:2e:eb:98:6e:56:6b:60:f0:7f:33:04:6b:7f:86:
54:3a:fc:74:dc:c8:46:aa:fe:a8:ed:46:f5:0c:67:77:d3:78:
ec:40:a2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:54:44 2026 by rpki-client