Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/3W2kBgMIvhcXUhUq2YtKk1xN_AU.roa
File: 3W2kBgMIvhcXUhUq2YtKk1xN_AU.roa (raw, json)
Hash identifier: CAsZ3C2TdySi/ZWvlReBuoW/T5KbXTvFwU9q/tZJ4e0=
Subject key identifier: DD:6D:A4:06:03:08:BE:17:17:52:15:2A:D9:8B:4A:93:5C:4D:FC:05
Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial: 019C4C64FE6FC41A1B4F5727084E4029ACE3
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/3W2kBgMIvhcXUhUq2YtKk1xN_AU.roa
Signing time: Wed 11 Feb 2026 11:10:13 +0000
ROA not before: Wed 11 Feb 2026 11:10:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 83.219.243.0/24 maxlen: 24
83.219.248.0/24 maxlen: 24
83.219.249.0/24 maxlen: 24
83.219.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:64:fe:6f:c4:1a:1b:4f:57:27:08:4e:40:29:ac:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Validity
Not Before: Feb 11 11:10:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd6da4060308be171752152ad98b4a935c4dfc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:7d:01:11:f1:9e:78:a8:53:4d:33:ed:a1:
3b:08:c5:f4:39:b1:0d:cd:52:b4:9f:95:42:f7:2f:
da:46:ed:8d:09:02:4d:51:f8:07:5d:c0:66:ae:63:
60:9e:07:b1:50:b9:2b:83:6c:87:98:1d:8e:07:48:
b5:98:a4:92:38:e1:58:f8:2a:97:27:ad:0d:88:25:
da:b4:6b:d7:b2:f7:c9:da:34:9a:67:76:d5:4c:d3:
85:72:10:eb:fa:d8:86:1f:13:ec:df:7a:ee:57:6d:
1a:c8:24:23:e0:ae:4d:c1:13:93:99:e6:4c:9e:4f:
8a:2e:6a:eb:57:6a:9f:87:41:c8:78:93:22:66:4b:
e5:49:32:23:04:cd:83:de:fd:66:91:a7:1c:21:74:
19:ba:f7:62:9d:90:8e:41:d7:b6:5d:24:65:1c:86:
ac:56:0e:3d:4b:2c:70:c4:1d:7a:95:20:3b:27:87:
95:f1:73:2e:8e:23:69:9e:05:c2:fc:82:c0:15:e3:
0d:8c:d8:db:27:1e:e2:89:48:bf:62:4f:82:00:47:
a1:21:f6:ea:9e:f4:b8:29:29:3e:1a:f3:b9:dd:a3:
28:63:bd:18:e0:9f:86:78:42:bc:0a:c9:4e:b4:37:
d4:8a:b8:cf:b1:8c:6c:83:06:28:7f:87:48:a1:a9:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6D:A4:06:03:08:BE:17:17:52:15:2A:D9:8B:4A:93:5C:4D:FC:05
X509v3 Authority Key Identifier:
keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/3W2kBgMIvhcXUhUq2YtKk1xN_AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.243.0/24
83.219.248.0-83.219.250.255
Signature Algorithm: sha256WithRSAEncryption
98:84:25:a2:e6:c6:bd:88:1a:4c:7b:38:40:19:da:18:86:36:
f9:5a:72:fa:39:cd:1e:3b:71:28:e0:a9:ff:8a:17:cf:dc:82:
0c:a5:ff:2c:62:aa:35:c1:79:2d:46:8e:4e:ae:1b:60:a4:63:
2f:ac:59:38:76:d1:4d:3b:ec:a5:f9:e4:a5:b6:60:d0:81:ab:
97:96:5f:d7:af:e6:e2:9c:50:20:5a:8c:52:92:1a:1a:7d:60:
be:00:5c:62:0f:f1:eb:63:d7:ce:5b:fb:97:de:38:72:8a:e9:
38:74:91:2e:f5:91:2a:b9:2b:ce:eb:77:c8:3e:da:7a:99:15:
1c:8a:60:78:6d:49:37:02:6a:ee:5f:f5:d0:4f:6e:c6:ab:4b:
07:03:26:f7:09:57:f3:b3:01:34:f7:a1:f5:b6:da:c8:26:53:
86:51:0b:2d:ab:be:45:57:6e:17:be:1f:be:77:a5:b6:b3:b9:
96:10:fb:61:09:a4:a3:32:ad:e1:47:59:57:90:dd:0f:ad:19:
c1:3f:1f:92:70:7a:b5:da:6e:bd:75:df:f8:3f:52:98:40:1f:
97:c7:85:36:f5:06:8c:ab:da:b6:8f:1e:5b:eb:75:95:67:32:
9c:5f:c8:c1:70:b7:17:13:3f:86:d4:18:de:e1:93:7c:3c:f4:
e8:e7:33:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:04:50 2026 by rpki-client