Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BB81qPsFMA6X3tY2aewX4SgIMak.roa
File: BB81qPsFMA6X3tY2aewX4SgIMak.roa (raw, json)
Hash identifier: UTT4CeBB8LpYp7k9sMjRkGsG/YCl1uwbXEnzJjisVZk=
Subject key identifier: 04:1F:35:A8:FB:05:30:0E:97:DE:D6:36:69:EC:17:E1:28:08:31:A9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019C942E99E36F13035262DD109AE2E95A43
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BB81qPsFMA6X3tY2aewX4SgIMak.roa
Signing time: Wed 25 Feb 2026 09:43:27 +0000
ROA not before: Wed 25 Feb 2026 09:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137517
IP address blocks: 82.152.12.0/24 maxlen: 24
213.130.156.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
213.218.237.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:2e:99:e3:6f:13:03:52:62:dd:10:9a:e2:e9:5a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 25 09:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=041f35a8fb05300e97ded63669ec17e1280831a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:3e:63:ec:f5:6c:eb:02:60:67:17:9b:9b:
5d:00:76:cd:07:15:84:09:2e:d6:e5:42:2d:15:33:
37:f9:d7:07:a0:27:fc:8a:9b:bb:92:1e:07:32:fd:
f9:d2:ef:a2:03:3c:90:c8:1d:f6:07:b6:b1:e1:e3:
08:0c:8a:f4:6e:c0:e6:df:ee:e4:c6:b4:eb:f6:d4:
2b:99:6d:f7:4f:4f:99:2f:d7:f6:ec:82:a4:f2:f9:
aa:a2:5c:38:ae:dc:f9:09:98:73:20:7f:25:8d:dd:
89:26:95:8b:68:cb:ed:dd:29:6a:43:85:0e:a7:d5:
9f:76:2a:ed:89:09:50:2e:aa:96:55:42:ac:b0:38:
1a:5a:87:68:a0:00:e0:aa:ba:f9:e8:d1:71:da:fc:
85:40:f5:38:d2:03:34:f3:2a:49:bb:99:de:6f:6e:
1a:55:dd:23:9c:41:d3:1b:92:4a:4e:69:96:a8:79:
e2:f7:32:4f:92:12:32:b0:cb:46:e7:bd:a3:a4:21:
ed:54:7a:1f:50:ce:d0:da:01:6b:65:d3:64:b2:09:
bb:b9:e5:17:68:42:23:db:6d:f6:d1:25:6d:47:9f:
7b:7e:db:12:23:ff:f4:db:36:d7:6b:ae:ec:c4:17:
53:f7:47:3e:bc:a6:04:0e:a9:1e:14:5c:75:c3:78:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1F:35:A8:FB:05:30:0E:97:DE:D6:36:69:EC:17:E1:28:08:31:A9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BB81qPsFMA6X3tY2aewX4SgIMak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.12.0/24
213.130.156.0/24
213.218.227.0/24
213.218.237.0/24
213.218.239.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e4:ef:50:d6:70:62:c6:aa:68:e7:35:19:2f:5c:57:bc:d0:
10:12:e8:b5:c5:59:4e:69:2f:aa:e3:d8:5a:46:ad:8b:7e:2a:
11:9c:0f:c7:81:5a:c0:75:53:93:9f:da:7b:24:02:0c:45:fc:
92:63:08:af:04:f8:ae:0f:4c:ef:65:fe:e8:8a:00:c3:cd:00:
5e:5e:c0:0e:12:cf:91:25:19:f4:07:8b:85:e2:5b:e0:5b:c4:
ae:6b:35:38:c0:d4:5d:90:67:c7:11:cb:ce:88:1d:57:52:30:
ac:78:b8:54:a1:48:e3:72:91:b1:76:ee:bb:89:b8:9c:29:d0:
ab:1c:78:1e:b0:f9:e7:0c:31:1c:7e:4c:d0:33:f5:8b:b0:9f:
f5:76:af:de:49:ce:f1:98:c0:56:9d:36:80:01:0f:9e:f6:b1:
ed:9d:f8:ab:64:c4:f4:eb:e4:b0:c0:63:49:80:3e:a9:fe:d9:
5e:c5:cc:24:33:21:a5:fa:f2:66:a6:40:58:f0:1c:0c:8f:a0:
69:0e:eb:b4:bb:f2:59:e2:d8:53:23:c3:db:5e:cd:65:02:b1:
dd:3d:0d:f0:e2:7e:20:86:60:34:0a:ee:40:a7:43:4f:8a:16:
28:ae:93:52:0e:d0:b3:4d:ae:46:41:11:3c:23:35:2b:d8:a6:
41:43:1f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:29 2026 by rpki-client