Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CoSE--tsIgNUi9sgDifNDkWAXac.roa
File: CoSE--tsIgNUi9sgDifNDkWAXac.roa (raw, json)
Hash identifier: YNnc3XEQx0N0YnwNu6w7sWZzUIAj3UFuXb4Vbo5cYkQ=
Subject key identifier: 0A:84:84:FB:EB:6C:22:03:54:8B:DB:20:0E:27:CD:0E:45:80:5D:A7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EAC69756E631A787C0C8FF1A6C293EF99
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CoSE--tsIgNUi9sgDifNDkWAXac.roa
Signing time: Tue 09 Jun 2026 12:44:12 +0000
ROA not before: Tue 09 Jun 2026 12:44:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197200
IP address blocks: 81.5.141.0/24 maxlen: 24
82.152.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:69:75:6e:63:1a:78:7c:0c:8f:f1:a6:c2:93:ef:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 9 12:44:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a8484fbeb6c2203548bdb200e27cd0e45805da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:1a:b8:23:5c:ae:7e:ea:95:ca:87:8e:aa:
0d:a1:bd:e4:4c:fc:44:7c:70:9c:58:51:9f:43:2a:
8d:92:17:db:d3:94:27:27:79:01:67:b9:a9:62:29:
bf:a0:d8:04:78:47:1c:98:d7:39:68:df:94:7a:2f:
3c:b6:0e:4c:83:a7:7a:66:cf:9a:46:8a:ea:74:0d:
55:40:be:43:8d:da:ec:cb:67:ac:eb:69:2a:e6:84:
50:26:8f:d3:c9:20:e3:3a:fa:57:c2:02:07:b1:f0:
43:e7:83:3f:02:0a:80:d4:3b:05:d8:59:f7:e4:e0:
77:71:ee:25:6e:35:50:97:17:19:2c:bc:ef:35:bb:
3d:f7:b5:2c:88:eb:61:66:9e:b8:0c:69:77:b6:fd:
37:10:8a:62:2c:26:1e:c9:18:d6:12:67:39:f9:b4:
73:4a:f3:7e:77:a8:e6:4d:f1:6b:41:b9:f6:ea:a8:
0a:d0:06:7c:a8:15:f2:33:2f:fc:ee:3e:f6:08:5e:
ae:67:38:96:fe:a7:fe:09:1f:1b:1f:3d:bf:7d:d3:
11:44:8a:55:5b:f4:0c:d9:81:fd:c1:02:6a:c2:85:
83:38:eb:a5:6e:5b:10:23:bc:8d:f1:5d:3a:67:9b:
0d:e5:ee:d5:e3:03:2c:f3:ad:85:2a:e0:2b:f2:b4:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:84:84:FB:EB:6C:22:03:54:8B:DB:20:0E:27:CD:0E:45:80:5D:A7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CoSE--tsIgNUi9sgDifNDkWAXac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.141.0/24
82.152.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:60:ae:cd:1d:5e:4c:5d:32:43:ca:36:08:b5:10:80:d4:d5:
cc:3e:0c:bf:56:3e:26:28:f4:d5:e3:c8:aa:8d:07:0a:06:c9:
21:33:f4:10:a3:0a:54:67:e1:38:9b:2a:fa:de:b5:f4:ba:47:
49:a9:07:28:85:db:a2:f1:33:7c:a9:a8:63:c0:82:63:02:07:
7b:c1:7c:4c:7e:98:2b:c9:7b:e0:2f:1f:94:70:69:05:ae:10:
d5:08:22:02:45:d7:00:87:47:3a:11:bb:d8:1d:b4:ae:91:f3:
e1:19:59:b4:c5:df:eb:a9:e7:63:ef:d5:d8:c2:8f:73:76:ea:
3a:c4:10:57:f5:6c:5a:24:a3:1c:2d:20:f4:d6:db:c1:5d:11:
7e:f8:92:5e:a6:4c:72:f6:03:5f:d8:06:c5:06:14:04:62:80:
c8:e7:d6:2a:17:a9:ef:a6:fb:d7:65:9f:ef:ad:85:14:a7:ea:
89:e7:c0:12:d4:22:48:b1:5b:5a:c2:61:34:74:89:1a:cd:59:
30:92:d1:25:e2:f2:2e:23:54:d6:25:65:c4:bb:c2:9e:7a:49:
37:1f:d4:88:08:4b:78:08:01:b7:13:32:04:02:3a:08:c9:7b:
bb:71:f1:6a:8e:11:a2:6e:c2:28:66:94:d5:77:8c:9f:f5:bf:
f8:1a:a9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:51:36 2026 by rpki-client