Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8Dzh-MgVx-a02VxAk5xAbRdQGpk.roa
File: 8Dzh-MgVx-a02VxAk5xAbRdQGpk.roa (raw, json)
Hash identifier: 5VyvfcCHXzCRvH2gfPP8vMX36hzGWHuF3FXOJMa7Spc=
Subject key identifier: F0:3C:E1:F8:C8:15:C7:E6:B4:D9:5C:40:93:9C:40:6D:17:50:1A:99
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EB060AAB6B5AC65B39E4E0450C824C602
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8Dzh-MgVx-a02VxAk5xAbRdQGpk.roa
Signing time: Wed 10 Jun 2026 07:13:05 +0000
ROA not before: Wed 10 Jun 2026 07:13:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140641
IP address blocks: 77.93.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:60:aa:b6:b5:ac:65:b3:9e:4e:04:50:c8:24:c6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 10 07:13:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f03ce1f8c815c7e6b4d95c40939c406d17501a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:8a:dc:3d:e2:65:fa:13:ea:98:6e:ac:9b:
6e:60:21:04:e6:1a:1c:84:4c:5a:88:f2:16:27:e1:
99:d4:90:c3:f0:71:43:79:36:35:21:1b:e1:3c:f0:
b4:e0:94:f6:ce:e5:b6:d9:5e:87:2a:07:1a:84:22:
7f:b1:96:21:c9:d6:84:72:d9:4e:01:5d:1a:a1:36:
eb:5b:81:0c:0d:b0:23:6d:3e:fb:1f:41:75:c6:f5:
7e:d2:fe:61:db:ba:ab:7d:d2:6b:c3:a4:29:21:42:
0f:48:39:7c:77:36:42:0c:02:5f:ac:f2:5b:20:fa:
23:c2:ea:c3:cb:69:6c:35:6a:fe:78:50:b5:eb:e7:
bd:b0:93:93:33:24:fe:d0:77:bf:c5:17:bd:41:9c:
5d:2c:05:9e:ce:01:07:cc:42:18:64:26:b9:cb:6f:
56:e8:2e:ec:d5:f5:f0:e5:59:7e:61:02:b5:d1:58:
13:18:1b:fd:eb:f3:86:3b:60:df:d8:ef:6b:f7:27:
31:83:d3:88:67:06:71:89:6b:d5:15:ce:37:8a:f0:
61:a0:06:d9:d0:46:91:0d:e9:b3:da:a2:98:e8:84:
79:68:02:58:25:e9:48:ab:29:e2:01:c2:c9:4e:9e:
cb:f7:61:d4:06:c8:d7:aa:70:91:fa:74:fe:78:31:
c6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3C:E1:F8:C8:15:C7:E6:B4:D9:5C:40:93:9C:40:6D:17:50:1A:99
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8Dzh-MgVx-a02VxAk5xAbRdQGpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.133.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:bf:a4:51:ed:3f:b6:96:d5:c5:fb:89:f6:a5:a6:9c:d9:32:
99:54:02:14:7b:8e:04:2d:77:8b:f8:ae:0e:e1:d7:80:4b:79:
84:b9:57:44:be:bc:b3:83:d2:6f:01:23:8a:3d:fb:f4:f7:00:
8a:63:1d:53:b7:f7:04:8c:fe:20:04:74:f0:3a:a7:8c:4d:a6:
21:0b:c8:79:12:54:21:a3:ef:49:45:0f:02:fc:de:e8:5c:b7:
64:7a:cc:73:8d:51:e1:cd:ba:30:35:13:5c:eb:25:31:80:33:
4d:8e:4b:eb:8b:2c:63:df:ad:7e:ed:1f:04:4b:af:59:53:a4:
4c:39:ac:23:2d:35:d8:59:5b:9b:da:1f:e1:42:41:01:ee:3a:
63:6f:45:3a:f2:38:3f:4a:e7:2e:4d:cd:fe:ae:4f:32:6a:de:
e0:8c:3c:03:9a:99:29:ea:5e:a0:b4:55:e0:0b:49:1f:78:c6:
69:6c:e9:2a:f1:32:08:68:ff:c1:09:13:c1:48:2f:fe:da:78:
3a:ce:bc:83:c1:20:eb:13:15:7d:8c:2c:71:7b:1c:6a:e1:a2:
2c:19:cf:f6:e0:fa:c1:28:9f:13:1b:fb:a1:f8:00:5c:6b:db:
72:dd:32:e7:12:f3:6b:fb:81:4f:b5:80:e2:94:aa:96:64:c0:
da:52:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:41:33 2026 by rpki-client