Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/3tqIIgWkHb-czJrWJ45mBIkK_cQ.roa
File: 3tqIIgWkHb-czJrWJ45mBIkK_cQ.roa (raw, json)
Hash identifier: XvC13IkxH0azxvzs9FuTSJdwmaTsmRlyyRpZAdkI6ls=
Subject key identifier: DE:DA:88:22:05:A4:1D:BF:9C:CC:9A:D6:27:8E:66:04:89:0A:FD:C4
Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial: 01A08189DB1E63EDD5F9FCCB1069DA6C387F
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/3tqIIgWkHb-czJrWJ45mBIkK_cQ.roa
Signing time: Tue 08 Sep 2026 15:01:30 +0000
ROA not before: Tue 08 Sep 2026 15:01:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216054
IP address blocks: 213.177.176.0/24 maxlen: 24
2a01:f700:1000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:89:db:1e:63:ed:d5:f9:fc:cb:10:69:da:6c:38:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Validity
Not Before: Sep 8 15:01:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=deda882205a41dbf9ccc9ad6278e6604890afdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:b0:29:2d:ba:a5:bf:b9:8b:b6:10:2a:88:
a5:75:c8:bc:2e:d6:83:be:3a:2d:34:bf:e9:0c:4b:
b7:d2:fa:43:3f:c7:7c:3e:3e:66:b2:f2:fa:d9:2e:
59:ec:75:93:c6:2c:ed:ce:65:d4:2f:e4:20:b6:66:
0a:a2:43:a5:f0:82:95:2e:6c:53:01:38:5b:54:7d:
cd:8e:86:46:e9:c3:b9:c4:59:a1:99:df:6a:88:e1:
b4:0e:d5:b6:7c:97:26:13:d4:90:78:88:03:07:06:
4f:4e:53:7c:8d:fb:7a:08:26:49:e6:12:2f:cf:73:
93:67:c7:5c:e7:a5:e8:b1:1d:95:76:e2:a3:32:e5:
41:0c:83:b1:36:23:a5:0c:65:24:d2:3e:b3:45:9e:
f6:f5:3e:a1:e8:7b:06:af:8f:ce:5b:45:c8:18:67:
b1:d2:80:96:3f:81:cc:45:8f:6c:40:d9:f3:3e:00:
65:ab:20:6c:96:0b:d2:2b:e9:57:ce:13:52:48:3f:
d7:02:3f:fb:58:cc:64:6d:9a:1e:83:26:8a:b9:e2:
62:a7:69:0e:0b:7d:cf:ac:d0:91:7d:b3:92:00:67:
38:7e:91:91:b1:6e:c3:0f:8d:6b:1f:c7:ec:be:6c:
93:c1:76:15:aa:27:c6:8b:af:5e:df:ca:95:a9:34:
6f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DA:88:22:05:A4:1D:BF:9C:CC:9A:D6:27:8E:66:04:89:0A:FD:C4
X509v3 Authority Key Identifier:
keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/3tqIIgWkHb-czJrWJ45mBIkK_cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.177.176.0/24
IPv6:
2a01:f700:1000::/38
Signature Algorithm: sha256WithRSAEncryption
11:f4:d7:78:fd:17:dc:56:c1:20:b4:de:3d:fa:e8:ca:bb:65:
7d:7d:ef:fe:cf:25:fc:f5:05:7e:23:50:b6:c0:ed:ad:d0:7a:
e9:0b:00:43:43:83:1d:c9:bd:4c:4f:07:b9:90:79:c2:11:e5:
e2:a2:74:3c:d2:c1:a4:7d:b2:7a:52:5e:14:ad:53:00:8e:48:
de:c7:62:ca:36:0c:db:ba:80:ed:84:7f:3f:3d:f3:66:96:f7:
70:d8:88:a0:ed:1b:2d:df:23:42:39:09:8c:5b:d1:b2:e8:d4:
dd:15:f8:44:8b:59:cf:be:20:dc:52:1d:eb:99:6f:eb:82:a9:
dc:7a:d7:d1:f8:a3:11:f1:29:e5:82:62:50:f5:ba:40:fc:40:
7c:7c:e5:b6:f3:2c:00:ee:19:c2:6e:a1:e8:f3:a0:a8:68:90:
fa:1f:5b:d6:14:0f:fd:dc:d2:42:de:9b:79:0c:e1:77:be:c1:
c7:5c:4f:21:6a:4c:a5:7e:0a:5d:42:f7:36:40:5a:61:fd:f4:
ce:89:b0:92:81:41:13:a0:c7:80:2e:ce:3b:07:08:bd:a7:40:
ea:f7:04:ab:04:64:c5:b7:b1:80:78:e9:b9:93:7a:ca:25:28:
00:00:3a:4e:7d:98:89:e1:72:7e:0f:e9:61:84:84:3c:45:17:
a1:9b:4d:8f
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAaCBidseY+3V+fzLEGnabDh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjJlY2U1NDc1NzJhZGVjYTFhOWZmMDU3ZTBiYThlYWU4
YzVkNWUwHhcNMjYwOTA4MTUwMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWRhODgyMjA1YTQxZGJmOWNjYzlhZDYyNzhlNjYwNDg5MGFmZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb6wKS26pb+5i7YQKoildci8LtaD
vjotNL/pDEu30vpDP8d8Pj5msvL62S5Z7HWTxiztzmXUL+QgtmYKokOl8IKVLmxT
AThbVH3NjoZG6cO5xFmhmd9qiOG0DtW2fJcmE9SQeIgDBwZPTlN8jft6CCZJ5hIv
z3OTZ8dc56XosR2VduKjMuVBDIOxNiOlDGUk0j6zRZ729T6h6HsGr4/OW0XIGGex
0oCWP4HMRY9sQNnzPgBlqyBslgvSK+lXzhNSSD/XAj/7WMxkbZoegyaKueJip2kO
C33PrNCRfbOSAGc4fpGRsW7DD41rH8fsvmyTwXYVqifGi69e38qVqTRv+wIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFN7aiCIFpB2/nMya1ieOZgSJCv3EMB8GA1UdIwQY
MBaAFNRi7OVHVyreyhqf8Ffguo6ujF1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdMczVVZFhLdDdLR3Bfd1YtQzZqcTZNWFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84YTk0MTctYmMyOC00YTAyLWE5MmYt
YTQwOGJiYTczNWVlLzEvM3RxSUlnV2tIYi1jekpyV0o0NW1CSWtLX2NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84YTk0MTctYmMyOC00YTAyLWE5MmYtYTQwOGJiYTczNWVl
LzEvMUdMczVVZFhLdDdLR3Bfd1YtQzZqcTZNWFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA1bGwMA4E
AgACMAgDBgIqAfcAEDANBgkqhkiG9w0BAQsFAAOCAQEAEfTXeP0X3FbBILTePfro
yrtlfX3v/s8l/PUFfiNQtsDtrdB66QsAQ0ODHcm9TE8HuZB5whHl4qJ0PNLBpH2y
elJeFK1TAI5I3sdiyjYM27qA7YR/Pz3zZpb3cNiIoO0bLd8jQjkJjFvRsujU3RX4
RItZz74g3FId65lv64Kp3HrX0fijEfEp5YJiUPW6QPxAfHzltvMsAO4Zwm6h6POg
qGiQ+h9b1hQP/dzSQt6beQzhd77Bx1xPIWpMpX4KXUL3NkBaYf30zomwkoFBE6DH
gC7OOwcIvadA6vcEqwRkxbexgHjpuZN6yiUoAAA6Tn2YieFyfg/pYYSEPEUXoZtN
jw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:24 2026 by rpki-client