Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Xa4yEiiIAKUX0wdkad9aL9sr2jk.roa
File: Xa4yEiiIAKUX0wdkad9aL9sr2jk.roa (raw, json)
Hash identifier: w0eHySJTBcEiSICPCv4xAr17FxX0Uv+2OrtBBpdRrFY=
Subject key identifier: 5D:AE:32:12:28:88:00:A5:17:D3:07:64:69:DF:5A:2F:DB:2B:DA:39
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D7267894A1B0E35A37A5C30AD3A704104
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Xa4yEiiIAKUX0wdkad9aL9sr2jk.roa
Signing time: Thu 09 Apr 2026 13:21:21 +0000
ROA not before: Thu 09 Apr 2026 13:21:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 77.107.82.0/24 maxlen: 24
80.240.90.0/24 maxlen: 24
81.168.32.0/24 maxlen: 24
213.210.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:67:89:4a:1b:0e:35:a3:7a:5c:30:ad:3a:70:41:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 9 13:21:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dae3212288800a517d3076469df5a2fdb2bda39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:9c:af:04:2d:9e:4e:fb:ac:7e:4b:e2:c2:
e9:74:4c:90:5d:30:09:cf:d5:89:35:f9:5f:01:5f:
8b:21:ac:32:06:ac:5f:dd:4f:66:e0:62:cb:c2:5c:
7c:b0:e1:d7:d6:05:81:b7:ea:74:82:f0:fa:15:6d:
21:01:df:2a:35:56:3c:54:89:54:f7:2f:3e:a3:0b:
ec:2e:b0:6e:c5:6e:53:c6:f8:25:2b:90:e2:7a:6d:
47:32:ea:b4:69:4d:48:73:3a:ac:4f:cb:e0:bd:fc:
21:40:24:91:04:ae:50:a1:b6:6d:7c:7c:2c:bc:02:
ce:90:97:7f:5f:be:8d:ab:d0:ba:f7:77:e7:23:01:
e5:97:e2:e4:c2:20:3f:d4:9e:45:0c:aa:59:8c:d6:
36:3b:89:25:63:43:5e:08:bf:80:e5:fa:c8:5e:f4:
75:92:e4:fa:6b:8c:1a:78:5e:3f:d3:64:84:3a:a2:
83:23:c9:4c:52:a0:b6:bb:22:2d:25:74:dc:e1:71:
53:9e:e9:5e:2d:63:81:65:25:3f:d2:25:ee:64:63:
7b:31:85:cd:10:49:d5:dd:fd:bb:aa:63:8c:4a:80:
69:9a:6f:28:33:f8:76:32:fd:4c:4a:04:f0:84:57:
d3:08:ea:e0:06:1b:c1:70:78:6a:5d:03:62:66:b8:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AE:32:12:28:88:00:A5:17:D3:07:64:69:DF:5A:2F:DB:2B:DA:39
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Xa4yEiiIAKUX0wdkad9aL9sr2jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.82.0/24
80.240.90.0/24
81.168.32.0/24
213.210.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fe:e4:90:ce:6f:68:c9:97:c6:29:46:c5:3f:9f:53:5a:f3:
6a:bd:2e:03:87:d2:ce:48:d2:0d:7b:73:8f:0c:19:2d:99:40:
38:5c:45:07:ae:4d:9d:81:84:99:48:3b:ac:04:bf:7a:29:0a:
dd:08:c2:5e:cf:3b:76:b6:54:ae:36:5f:77:c2:04:d7:15:18:
28:76:08:4c:98:3d:fa:d3:7f:73:81:d1:b5:4e:4a:72:f5:19:
99:fb:5a:5a:a3:37:98:a9:bd:0c:50:df:76:c9:8a:2b:14:54:
21:6a:1f:1b:b9:49:7d:18:c6:ed:b4:39:15:44:3b:ca:00:e4:
f9:f3:d0:22:e8:9f:96:6c:f4:8b:ce:14:09:dc:cd:c6:a6:b6:
da:e8:38:da:be:ec:e4:24:b5:d4:f9:2e:39:db:ee:15:78:5b:
9a:f2:47:0b:4f:72:aa:c5:4a:0d:07:47:6f:64:e4:92:ef:16:
76:35:25:2c:4f:7d:46:19:48:0d:6f:e9:7b:1e:78:07:6f:ac:
44:a9:8b:85:b8:fc:9c:b4:ee:bf:68:08:9b:0d:36:d9:cd:64:
15:43:60:a7:fe:c8:ee:00:c4:c9:6d:b4:e3:78:2f:42:df:b7:
91:25:c1:ca:a9:c6:9f:f3:f4:49:8d:4a:63:c9:fc:d2:b6:5b:
df:11:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:33:46 2026 by rpki-client