Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/3x-unvmrEfBfjV8Mubak6dKsvJU.roa
File: 3x-unvmrEfBfjV8Mubak6dKsvJU.roa (raw, json)
Hash identifier: 2TZTJpzHyfxjizKxz/S+PSGgBrloUjJ36Fw9OyPopiU=
Subject key identifier: DF:1F:AE:9E:F9:AB:11:F0:5F:8D:5F:0C:B9:B6:A4:E9:D2:AC:BC:95
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 01A19D155977BFFD3D15939A5A81637AF9B1
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/3x-unvmrEfBfjV8Mubak6dKsvJU.roa
Signing time: Mon 02 Nov 2026 16:26:24 +0000
ROA not before: Mon 02 Nov 2026 16:26:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204139
IP address blocks: 185.110.0.0/23 maxlen: 23
185.110.2.0/24 maxlen: 24
185.122.124.0/23 maxlen: 23
185.122.126.0/23 maxlen: 23
185.122.128.0/23 maxlen: 23
185.123.240.0/23 maxlen: 23
185.123.242.0/23 maxlen: 23
185.123.248.0/22 maxlen: 22
185.123.252.0/22 maxlen: 22
185.127.44.0/23 maxlen: 23
185.127.46.0/23 maxlen: 23
185.128.134.0/23 maxlen: 23
185.128.176.0/23 maxlen: 23
185.128.178.0/23 maxlen: 23
185.129.20.0/23 maxlen: 23
185.129.22.0/23 maxlen: 23
185.132.8.0/23 maxlen: 23
185.132.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:15:59:77:bf:fd:3d:15:93:9a:5a:81:63:7a:f9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Nov 2 16:26:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df1fae9ef9ab11f05f8d5f0cb9b6a4e9d2acbc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:30:85:b8:2d:6c:19:dc:fd:1a:07:2c:e5:
d9:e6:a9:b1:b9:62:65:97:6b:7d:3b:63:97:40:8a:
95:f2:32:81:a8:06:16:71:71:26:7e:6a:d2:a0:4e:
74:11:34:18:7e:b0:3b:b1:93:e9:46:5e:43:3f:00:
5a:cf:34:cd:71:85:34:d8:f7:bc:ac:3c:8f:9a:c3:
f3:da:de:d9:07:b8:d1:ad:c9:ae:a3:fe:ae:83:4d:
55:e9:f1:e1:bb:71:ff:04:72:c2:aa:99:5e:fb:3b:
0e:f8:62:46:a5:09:3f:53:e3:a8:27:fb:f8:aa:a0:
22:09:b1:5a:84:a0:88:55:f8:9b:9c:3d:ab:80:13:
80:a6:bf:26:5c:b8:85:8c:2b:4a:b8:5a:e1:7f:cb:
4a:98:43:e3:a1:4c:56:17:64:86:45:c0:73:c2:3b:
0e:7d:c7:a6:c1:d9:9d:f8:09:2e:36:58:de:48:7a:
77:59:3b:78:68:50:ae:99:e0:99:0b:18:5b:df:18:
32:82:ef:11:a1:a3:56:3d:ea:15:ce:da:0b:14:6b:
f1:47:6c:bc:30:3d:39:6c:7c:d8:b3:6d:80:22:52:
ff:6c:5d:d3:b2:18:e8:7c:61:93:02:d5:8b:e4:b3:
f9:79:1a:03:96:66:0a:1e:b6:8e:ad:70:2f:45:0c:
25:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1F:AE:9E:F9:AB:11:F0:5F:8D:5F:0C:B9:B6:A4:E9:D2:AC:BC:95
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/3x-unvmrEfBfjV8Mubak6dKsvJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.0.0-185.110.2.255
185.122.124.0-185.122.129.255
185.123.240.0/22
185.123.248.0/21
185.127.44.0/22
185.128.134.0/23
185.128.176.0/22
185.129.20.0/22
185.132.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:25:45:00:8d:45:28:66:cd:c5:33:06:17:92:54:e1:1d:40:
f5:1e:4a:7d:e6:d9:04:e9:6b:d3:fd:c7:c3:5e:d2:8b:a1:e5:
1a:b5:ca:e9:01:3c:f2:df:8c:c5:fb:a2:ee:b0:4e:ae:59:9d:
15:c4:8d:66:fc:0c:2e:31:83:cd:78:7d:34:2f:2f:ef:3d:ca:
39:82:e1:eb:5a:be:ce:c7:40:e7:ac:59:53:a0:45:ea:99:73:
92:58:c1:13:98:39:ba:3b:08:f9:41:db:12:f0:f9:1e:db:b1:
fc:52:e5:9b:5b:32:c5:df:f4:78:70:37:63:3e:2a:90:d5:48:
e8:87:2c:d3:ea:e6:c8:5f:2e:b7:38:d2:28:e6:aa:bd:ed:7a:
75:41:0d:ec:54:7d:4a:5e:ee:d5:fe:ee:29:83:b7:e2:9c:07:
6f:dc:d3:45:59:41:13:d9:be:cb:a9:7a:7f:4a:8f:14:78:1d:
1b:f9:b3:1b:6f:3d:4a:b6:76:6e:ee:23:de:bf:48:0b:a2:06:
d3:61:35:5e:c8:3d:21:5b:9f:7c:bf:c3:b8:48:5f:41:14:2e:
f0:19:db:ee:fa:b1:97:6f:8e:fd:b4:3f:fe:83:89:90:48:12:
dd:c6:07:d7:62:33:8b:f8:61:2d:43:08:0f:1d:94:82:e3:79:
22:93:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:59:33 2026 by rpki-client