Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SuFpQ-1DfXG4EWsY6vn-KxvpqoU.roa
File: SuFpQ-1DfXG4EWsY6vn-KxvpqoU.roa (raw, json)
Hash identifier: JHlgAppGAfgTiaI1Gpc8EJPlC5g0LGWz1xSCxwcfKf0=
Subject key identifier: 4A:E1:69:43:ED:43:7D:71:B8:11:6B:18:EA:F9:FE:2B:1B:E9:AA:85
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EAB439222BF5C3D185BDFFE7C8E711BEA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SuFpQ-1DfXG4EWsY6vn-KxvpqoU.roa
Signing time: Tue 09 Jun 2026 07:23:12 +0000
ROA not before: Tue 09 Jun 2026 07:23:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22427
IP address blocks: 89.31.235.0/24 maxlen: 24
89.213.192.0/24 maxlen: 24
213.130.154.0/24 maxlen: 24
213.218.225.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:43:92:22:bf:5c:3d:18:5b:df:fe:7c:8e:71:1b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 9 07:23:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ae16943ed437d71b8116b18eaf9fe2b1be9aa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:06:49:fe:40:99:56:71:5e:37:08:8d:c8:
9e:ba:d7:0a:05:c1:77:ee:50:3a:6c:6c:9c:a2:d0:
22:96:d1:5b:0b:55:8d:51:50:03:42:cc:35:de:cd:
dd:36:6f:9f:e8:0a:45:ef:00:15:f1:4b:36:3b:f8:
b6:57:7d:e6:85:b0:d2:b8:d6:49:a6:ab:20:bb:9e:
9b:13:e5:54:19:d5:65:13:49:c0:5d:76:78:d8:aa:
83:78:19:bf:12:cc:c9:cb:22:32:49:0c:c1:49:95:
70:9e:5d:b6:1e:28:bc:66:0d:bc:2a:f1:f4:65:a5:
c7:18:6a:11:0b:c2:52:12:7d:e0:e7:ec:3c:fa:e2:
04:ab:c7:1a:20:ba:bc:b5:a5:59:0c:a7:43:2d:6d:
97:5f:d8:3d:df:0c:f2:f4:5d:17:87:fb:b7:76:65:
71:d2:6d:d6:94:d1:7b:fe:08:f8:34:c6:18:18:62:
cf:dd:a8:e9:57:96:58:de:ea:4e:34:05:5a:76:f3:
29:83:a6:9e:1c:c5:d7:4d:62:15:ae:a4:5f:71:ff:
ce:3f:dd:83:3e:a0:38:53:c8:9f:96:63:93:f6:08:
da:30:6a:40:57:ad:3a:15:aa:7f:88:ce:82:7b:f1:
62:f8:02:d5:96:b5:41:82:c1:b2:87:31:2f:ac:ea:
b9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E1:69:43:ED:43:7D:71:B8:11:6B:18:EA:F9:FE:2B:1B:E9:AA:85
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SuFpQ-1DfXG4EWsY6vn-KxvpqoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.235.0/24
89.213.192.0/24
213.130.154.0/24
213.218.225.0-213.218.226.255
Signature Algorithm: sha256WithRSAEncryption
91:f1:76:75:98:6c:28:0e:9c:93:65:5a:13:b9:1b:87:22:77:
ef:83:bd:ae:e1:ea:09:31:ed:1f:36:56:d7:6b:d1:ee:1c:a6:
1c:69:d6:4f:e8:89:53:9f:66:69:7b:10:fd:11:9e:c5:a9:e0:
29:60:1e:b6:37:cd:e4:d4:c0:cc:10:cc:66:6c:82:df:b2:5a:
54:ba:20:3f:17:b1:9b:61:59:7d:39:b1:99:8e:9b:a1:5f:d0:
b7:f9:2d:f1:3e:5b:95:5b:57:d5:63:6d:25:34:8f:58:ae:a4:
bd:5a:ce:a0:b9:9b:3f:3e:c9:9b:0d:3a:7b:4d:89:c2:f0:d7:
23:96:06:27:3d:34:63:d3:6c:bf:20:a4:b8:de:0f:8c:7d:21:
96:99:32:6a:c3:5e:63:02:2b:b9:e0:b4:34:89:74:d2:ff:59:
5d:d8:e2:2d:42:ab:89:72:33:84:2f:71:68:45:0d:2f:a0:0d:
ec:5e:66:04:82:b2:71:b0:13:0f:50:5c:b0:57:51:28:75:d7:
f6:3d:c4:2a:07:16:a2:9b:81:c5:85:9d:e1:f8:a4:09:ca:e4:
e9:c2:7f:c4:67:96:b9:7b:32:b9:69:81:f3:5a:90:da:d2:9e:
f3:8c:eb:2e:ee:9d:b1:d4:8e:dd:78:62:84:72:56:b0:3a:7d:
1b:27:18:0d
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ6rQ5Iiv1w9GFvf/nyOcRvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNjA5MDcyMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWUxNjk0M2VkNDM3ZDcxYjgxMTZiMThlYWY5ZmUyYjFiZTlhYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19oGSf5AmVZxXjcIjcieutcKBcF3
7lA6bGycotAiltFbC1WNUVADQsw13s3dNm+f6ApF7wAV8Us2O/i2V33mhbDSuNZJ
pqsgu56bE+VUGdVlE0nAXXZ42KqDeBm/EszJyyIySQzBSZVwnl22Hii8Zg28KvH0
ZaXHGGoRC8JSEn3g5+w8+uIEq8caILq8taVZDKdDLW2XX9g93wzy9F0Xh/u3dmVx
0m3WlNF7/gj4NMYYGGLP3ajpV5ZY3upONAVadvMpg6aeHMXXTWIVrqRfcf/OP92D
PqA4U8iflmOT9gjaMGpAV606Fap/iM6Ce/Fi+ALVlrVBgsGyhzEvrOq5oQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFErhaUPtQ31xuBFrGOr5/isb6aqFMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvU3VGcFEtMURmWEc0RVdzWTZ2bi1LeHZwcW9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAWR/rAwQA
WdXAAwQA1YKaMAwDBADV2uEDBADV2uIwDQYJKoZIhvcNAQELBQADggEBAJHxdnWY
bCgOnJNlWhO5G4cid++Dva7h6gkx7R82Vtdr0e4cphxp1k/oiVOfZml7EP0RnsWp
4ClgHrY3zeTUwMwQzGZsgt+yWlS6ID8XsZthWX05sZmOm6Ff0Lf5LfE+W5VbV9Vj
bSU0j1iupL1azqC5mz8+yZsNOntNicLw1yOWBic9NGPTbL8gpLjeD4x9IZaZMmrD
XmMCK7ngtDSJdNL/WV3Y4i1Cq4lyM4QvcWhFDS+gDexeZgSCsnGwEw9QXLBXUSh1
1/Y9xCoHFqKbgcWFneH4pAnK5OnCf8Rnlrl7MrlpgfNakNrSnvOM6y7unbHUjt14
YoRyVrA6fRsnGA0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:39:39 2026 by rpki-client