Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/8XebNTiumaUWcLbgsrPRqEK7yJk.roa
File: 8XebNTiumaUWcLbgsrPRqEK7yJk.roa (raw, json)
Hash identifier: wIkMYGUwRkloiGV8zcV817/8WXtvc8qz+eDzExEQl48=
Subject key identifier: F1:77:9B:35:38:AE:99:A5:16:70:B6:E0:B2:B3:D1:A8:42:BB:C8:99
Certificate issuer: /CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Certificate serial: 019D7195DDF86EAD179AD7800DBD12390552
Authority key identifier: DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/8XebNTiumaUWcLbgsrPRqEK7yJk.roa
Signing time: Thu 09 Apr 2026 09:32:19 +0000
ROA not before: Thu 09 Apr 2026 09:32:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211040
IP address blocks: 195.190.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:95:dd:f8:6e:ad:17:9a:d7:80:0d:bd:12:39:05:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Validity
Not Before: Apr 9 09:32:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1779b3538ae99a51670b6e0b2b3d1a842bbc899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:10:37:25:64:9f:cf:6c:70:6e:46:ea:ee:7e:
7d:b9:82:ac:eb:4a:f8:1a:dd:48:c4:91:86:b5:d1:
6e:62:29:ec:94:b9:4e:a4:46:70:fe:66:f2:8c:c9:
cf:7c:49:4b:28:76:72:56:77:f6:50:f6:16:1f:e0:
c3:0a:ab:85:19:9a:e2:2d:7b:db:a2:df:e3:d7:cc:
10:7e:b3:b8:80:02:a0:c4:b1:b6:c7:ab:29:74:2b:
28:bd:92:ea:d4:f6:6b:b3:4c:bb:e3:20:21:1f:b8:
a1:72:14:41:74:c6:9a:b6:5c:e0:7d:80:76:3d:41:
99:5e:d4:b4:77:ae:56:c4:7c:fc:00:2e:92:83:5e:
3f:aa:eb:70:66:7a:81:77:af:46:1f:7e:22:0f:6d:
82:bb:c5:8a:67:f4:3a:97:15:a2:7a:57:34:5f:b0:
2b:91:fa:7f:ec:10:89:d3:c0:8f:e5:08:3a:af:0b:
f5:85:84:a1:1a:5c:6a:21:23:bb:0a:87:56:94:69:
79:c3:c7:8d:c9:86:0a:53:76:18:05:57:9c:e7:f4:
ac:1e:93:ac:5c:9a:30:95:02:17:79:1a:ff:dd:82:
77:15:96:2f:db:89:44:7e:4a:d9:dd:90:8a:dd:87:
98:36:bd:c3:83:c3:77:80:15:fb:d8:68:26:e8:e5:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:77:9B:35:38:AE:99:A5:16:70:B6:E0:B2:B3:D1:A8:42:BB:C8:99
X509v3 Authority Key Identifier:
keyid:DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/8XebNTiumaUWcLbgsrPRqEK7yJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:88:4b:47:bf:ca:f3:f9:f1:41:d6:87:40:5d:6c:2d:e7:b6:
74:21:ff:d7:05:f9:29:2a:8e:39:c2:d4:34:93:eb:b3:0d:6a:
99:b1:48:fd:20:95:fa:49:22:f5:72:6f:c8:53:66:53:6d:dc:
8d:61:92:4d:7b:30:d1:9c:55:fd:e2:95:a0:16:de:14:59:73:
f0:75:5a:cc:53:a3:4e:62:4c:d7:02:87:3d:d2:f7:08:c4:d0:
27:3b:b9:e1:33:d3:63:48:5d:57:19:1f:45:91:6c:55:fd:98:
8d:8b:7f:04:94:31:59:83:56:a8:07:2c:2d:65:f2:20:38:46:
17:9a:88:cd:22:2e:36:04:ee:91:47:af:99:06:6e:93:d1:c5:
2e:a7:35:92:bb:ea:85:92:54:16:e7:27:75:23:37:2a:70:ec:
79:0e:71:5c:28:72:66:4c:da:6c:28:dc:d7:a8:30:62:46:e5:
1a:2b:14:80:25:8d:b5:4b:d2:4d:10:69:26:ac:77:8d:fe:fb:
cc:78:fb:f4:00:59:64:82:5d:f0:48:f7:75:1e:3a:ca:c1:05:
2e:02:e9:e4:e0:8a:dc:d1:57:e5:77:4e:5d:71:2c:cf:ec:11:
d4:d7:33:0d:87:d6:5f:b8:b6:05:c1:f9:bf:d5:36:dc:9f:f3:
b4:d3:6f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:51 2026 by rpki-client