Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UihZgCDBv6pSukc65u059tDmBl4.roa
File: UihZgCDBv6pSukc65u059tDmBl4.roa (raw, json)
Hash identifier: Hrpy6AQGUROEhdgmqm6bkvLFdO1/OqtqTYkSjnRVnn8=
Subject key identifier: 52:28:59:80:20:C1:BF:AA:52:BA:47:3A:E6:ED:39:F6:D0:E6:06:5E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E82E9E736B0503F3049EF0ABA2A7FEE90
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UihZgCDBv6pSukc65u059tDmBl4.roa
Signing time: Mon 01 Jun 2026 11:20:27 +0000
ROA not before: Mon 01 Jun 2026 11:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402221
IP address blocks: 82.152.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:e9:e7:36:b0:50:3f:30:49:ef:0a:ba:2a:7f:ee:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 1 11:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5228598020c1bfaa52ba473ae6ed39f6d0e6065e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:13:6d:95:ec:20:a9:d3:b0:93:65:22:5f:
92:a9:56:f2:52:74:66:7b:c7:e5:79:07:5a:b3:35:
7b:ea:31:e8:c4:d7:69:13:67:a2:bf:28:22:04:d5:
54:61:5f:63:69:00:45:c0:89:e7:ec:8b:b6:06:7a:
a0:28:ff:8e:63:90:62:5d:19:99:a6:22:4e:52:9c:
6a:b4:18:f1:91:f2:03:9c:83:ac:57:64:5f:a3:fa:
ea:a8:a3:66:12:fd:e5:5a:68:cc:d0:70:89:e2:54:
8a:22:6b:13:de:38:ee:d6:27:74:e9:44:7f:6d:66:
f8:a4:1f:e9:b1:6a:d8:a6:a1:24:be:30:c9:f2:b1:
82:8c:49:5d:9a:cd:d9:22:78:81:2f:ee:7c:57:7c:
a1:84:c9:2b:b5:e8:d7:08:f9:de:b4:ce:7d:e8:6b:
9a:13:4d:a8:18:b9:da:b6:50:c5:39:cf:67:4a:11:
a4:bd:d5:c9:12:38:b7:b9:f3:f3:5b:c5:ee:0b:08:
e9:e5:8d:e5:28:e2:e2:45:b0:33:41:c7:25:5b:79:
f4:9c:4b:e5:67:fb:52:9c:66:38:e9:f3:84:61:12:
f7:fa:bd:62:2c:cd:bf:9b:d0:21:ca:9c:f4:75:95:
10:a6:06:91:98:24:9a:e1:39:fc:d0:a3:5c:8a:e9:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:28:59:80:20:C1:BF:AA:52:BA:47:3A:E6:ED:39:F6:D0:E6:06:5E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UihZgCDBv6pSukc65u059tDmBl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.192.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:7c:94:0a:c9:e9:fd:7e:7e:43:77:29:31:48:81:e5:a4:1c:
8f:7e:33:dd:30:1f:ec:a0:d6:ec:09:24:b8:1e:8d:e1:15:1d:
27:8b:80:0f:82:0d:e3:f4:22:c0:fd:76:ce:c0:25:a4:b7:6d:
02:fa:1b:9f:c1:c4:66:01:2c:6f:e3:3f:8b:54:28:e3:f7:27:
f8:d4:32:72:ea:0a:53:bb:b6:a7:39:dd:d4:9c:ff:38:53:69:
e7:ff:af:35:90:60:8a:44:82:df:9b:c5:39:f5:79:d0:89:8f:
7c:32:8f:18:1c:6c:22:f3:5b:af:ab:7a:32:4b:90:57:7b:c5:
b5:a0:3b:cb:cf:8d:8c:c5:7b:6a:ca:15:00:5a:72:72:50:a2:
78:7c:37:78:f8:1a:da:ce:68:7f:99:23:ad:e1:df:45:a5:03:
70:2b:f7:84:5e:92:6b:bf:41:d5:b3:69:15:7c:91:a7:fe:e7:
eb:41:c1:82:51:ea:e7:54:46:63:3b:e6:8e:b7:9b:da:59:78:
ed:79:b1:f7:0e:1d:25:69:18:11:7e:e5:29:ba:ac:4b:d2:95:
12:53:f6:9e:63:5d:dd:07:35:db:97:fd:6a:45:a7:c5:f0:e7:
80:1d:66:c6:12:bd:de:96:5a:fb:e4:4d:bd:22:1e:39:9a:60:
7e:78:dc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:28:50 2026 by rpki-client