Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/3rJ7nyF6EzyPoY2hRA0UvIcCsx4.roa
File: 3rJ7nyF6EzyPoY2hRA0UvIcCsx4.roa (raw, json)
Hash identifier: fE4J44+J8hH2s14ZGpX+cCUACFAAWair1/S0jgB+xAE=
Subject key identifier: DE:B2:7B:9F:21:7A:13:3C:8F:A1:8D:A1:44:0D:14:BC:87:02:B3:1E
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 01A056BAB83148A7C20555D753B05DD3540D
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/3rJ7nyF6EzyPoY2hRA0UvIcCsx4.roa
Signing time: Mon 31 Aug 2026 07:31:12 +0000
ROA not before: Mon 31 Aug 2026 07:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29535
IP address blocks: 79.191.255.0/24 maxlen: 24
80.51.76.0/24 maxlen: 24
80.51.253.0/24 maxlen: 24
80.54.110.0/23 maxlen: 24
83.2.0.0/20 maxlen: 20
83.2.8.0/22 maxlen: 22
83.2.56.0/22 maxlen: 22
178.42.9.0/24 maxlen: 24
178.42.22.0/24 maxlen: 24
193.110.120.0/22 maxlen: 22
195.149.232.0/22 maxlen: 22
195.149.235.0/24 maxlen: 24
195.149.236.0/22 maxlen: 22
212.160.212.0/24 maxlen: 24
212.244.33.0/24 maxlen: 24
213.25.41.0/24 maxlen: 24
213.25.164.0/24 maxlen: 24
2001:7f8:27::/48 maxlen: 48
2a01:1101:5::/48 maxlen: 48
2a01:11f0::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:ba:b8:31:48:a7:c2:05:55:d7:53:b0:5d:d3:54:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Aug 31 07:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=deb27b9f217a133c8fa18da1440d14bc8702b31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:32:1c:ac:aa:36:cc:87:c5:22:37:6a:5f:
72:93:68:a2:c5:6d:a9:90:cf:e1:b3:0d:98:38:9f:
d8:e3:ef:8d:70:ae:16:28:fe:5a:1a:27:3a:58:f5:
ee:e5:08:b0:d0:ad:59:ef:a6:48:c2:50:a6:ba:66:
93:d9:00:1e:d2:9f:bf:ab:52:77:35:af:7f:07:cf:
3b:11:57:a3:cb:49:39:37:15:f1:ec:e0:17:ba:33:
45:ef:22:78:1d:09:50:77:74:85:d3:c2:70:80:75:
e7:2a:f0:24:6a:ac:c9:60:29:20:e1:ab:fb:99:72:
cb:ed:1c:84:69:4c:45:d7:4f:8a:7b:09:69:8c:9f:
90:5b:dd:a1:50:53:41:a9:8d:da:c9:e5:29:29:5b:
bb:ad:be:66:65:b7:6d:a9:36:f3:76:61:6b:de:c1:
b7:dc:35:dd:3a:9c:22:36:fe:fe:b6:1b:31:94:7b:
d7:fc:5f:3a:91:1d:fb:16:1f:c2:2f:57:9a:d6:d2:
f4:9e:16:d3:2d:3a:40:f7:4d:6b:5c:6b:5a:72:d7:
79:30:80:10:81:87:c5:2d:d7:74:87:fc:1e:d8:04:
d1:1d:59:7d:08:be:bf:1a:58:05:e2:da:46:e6:a6:
37:1f:32:ad:b0:88:6f:7f:e8:15:a0:bb:7a:a9:16:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B2:7B:9F:21:7A:13:3C:8F:A1:8D:A1:44:0D:14:BC:87:02:B3:1E
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/3rJ7nyF6EzyPoY2hRA0UvIcCsx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.191.255.0/24
80.51.76.0/24
80.51.253.0/24
80.54.110.0/23
83.2.0.0/20
83.2.56.0/22
178.42.9.0/24
178.42.22.0/24
193.110.120.0/22
195.149.232.0/21
212.160.212.0/24
212.244.33.0/24
213.25.41.0/24
213.25.164.0/24
IPv6:
2001:7f8:27::/48
2a01:1101:5::/48
2a01:11f0::/28
Signature Algorithm: sha256WithRSAEncryption
2b:7a:7a:72:fd:16:9f:14:7a:e9:8c:de:00:8a:2e:bb:97:97:
b4:25:9b:98:50:ff:bf:e3:fa:05:f1:12:80:d4:5d:0d:20:59:
7e:58:67:4c:1f:b7:0b:80:3a:1b:56:03:5f:15:58:6f:2e:af:
b6:c7:8d:d8:9d:c0:2e:2e:9b:71:75:ea:4b:b2:40:54:ae:9c:
92:ad:2a:c0:8c:64:a8:04:26:be:2a:8b:71:ef:22:19:05:e2:
39:d5:25:46:a2:b3:0d:b2:73:19:28:a8:ca:88:4f:12:1e:14:
26:60:48:61:9e:c9:a4:da:98:af:17:43:a1:7f:15:70:30:8c:
04:90:4d:e8:1d:a2:1f:ca:5d:3f:1c:eb:52:51:75:4d:4a:4f:
80:86:ea:3e:e6:12:f9:f9:05:ca:81:03:72:05:1b:dd:d8:b0:
f9:37:c3:1e:33:c0:b1:c0:f7:be:4d:a9:2f:32:9c:45:0e:cd:
f1:3a:7c:b3:94:a2:52:73:a2:34:bf:a4:d2:d6:98:52:a4:42:
dd:84:66:97:77:4a:c4:92:34:8a:09:dd:69:cf:45:77:2a:65:
23:42:d0:8e:80:95:3d:b8:33:4e:83:2a:5d:d8:de:f7:26:96:
36:48:0f:99:71:b6:e1:d9:b9:3e:51:7b:e3:58:eb:cc:22:1b:
19:25:34:33
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgISAaBWurgxSKfCBVXXU7Bd01QNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw
Yzc3MTQwHhcNMjYwODMxMDczMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWIyN2I5ZjIxN2ExMzNjOGZhMThkYTE0NDBkMTRiYzg3MDJiMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjAyHKyqNsyHxSI3al9yk2iixW2p
kM/hsw2YOJ/Y4++NcK4WKP5aGic6WPXu5Qiw0K1Z76ZIwlCmumaT2QAe0p+/q1J3
Na9/B887EVejy0k5NxXx7OAXujNF7yJ4HQlQd3SF08JwgHXnKvAkaqzJYCkg4av7
mXLL7RyEaUxF10+KewlpjJ+QW92hUFNBqY3ayeUpKVu7rb5mZbdtqTbzdmFr3sG3
3DXdOpwiNv7+thsxlHvX/F86kR37Fh/CL1ea1tL0nhbTLTpA901rXGtactd5MIAQ
gYfFLdd0h/we2ATRHVl9CL6/GlgF4tpG5qY3HzKtsIhvf+gVoLt6qRZv7wIDAQAB
o4ICeTCCAnUwHQYDVR0OBBYEFN6ye58hehM8j6GNoUQNFLyHArMeMB8GA1UdIwQY
MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt
Y2I4YjNhMDk0MjA5LzEvM3JKN255RjZFenlQb1kyaFJBMFV2SWNDc3g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEtY2I4YjNhMDk0MjA5
LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wWgQCAAEwVAMEAE+//wME
AFAzTAMEAFAz/QMEAVA2bgMEBFMCAAMEAlMCOAMEALIqCQMEALIqFgMEAsFueAME
A8OV6AMEANSg1AMEANT0IQMEANUZKQMEANUZpDAfBAIAAjAZAwcAIAEH+AAnAwcA
KgERAQAFAwUEKgER8DANBgkqhkiG9w0BAQsFAAOCAQEAK3p6cv0WnxR66YzeAIou
u5eXtCWbmFD/v+P6BfESgNRdDSBZflhnTB+3C4A6G1YDXxVYby6vtseN2J3ALi6b
cXXqS7JAVK6ckq0qwIxkqAQmviqLce8iGQXiOdUlRqKzDbJzGSioyohPEh4UJmBI
YZ7JpNqYrxdDoX8VcDCMBJBN6B2iH8pdPxzrUlF1TUpPgIbqPuYS+fkFyoEDcgUb
3diw+TfDHjPAscD3vk2pLzKcRQ7N8Tp8s5SiUnOiNL+k0taYUqRC3YRml3dKxJI0
igndac9FdyplI0LQjoCVPbgzToMqXdje9yaWNkgPmXG24dm5PlF741jrzCIbGSU0
Mw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:34:52 2026 by rpki-client