Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fYNXQrB42IP5RS8c2a0hfBr_Mqo.roa
File: fYNXQrB42IP5RS8c2a0hfBr_Mqo.roa (raw, json)
Hash identifier: I/eehzsvEuQGKsnogY6nlRvKLxA7zMXhpufzlI/op1I=
Subject key identifier: 7D:83:57:42:B0:78:D8:83:F9:45:2F:1C:D9:AD:21:7C:1A:FF:32:AA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E633E2E3EFB0DE2145C2DFFD09206993A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fYNXQrB42IP5RS8c2a0hfBr_Mqo.roa
Signing time: Tue 26 May 2026 07:44:39 +0000
ROA not before: Tue 26 May 2026 07:44:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402315
IP address blocks: 82.153.98.0/24 maxlen: 24
89.213.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:3e:2e:3e:fb:0d:e2:14:5c:2d:ff:d0:92:06:99:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 26 07:44:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d835742b078d883f9452f1cd9ad217c1aff32aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:99:01:f3:01:cd:df:35:58:be:a2:ac:ca:
c2:00:38:a7:5b:3e:60:8c:39:a2:d4:02:a0:b1:bc:
30:1b:68:51:49:2b:1f:60:09:62:5e:a7:56:26:34:
8b:d5:b7:54:9c:83:1c:ab:be:ea:fa:07:c0:56:87:
f1:4f:09:36:5b:95:45:10:46:bb:5f:f6:31:5c:ca:
a9:16:db:71:69:44:03:d0:a0:60:ed:c6:ee:82:e0:
b3:67:3e:2f:12:6c:6c:9a:38:06:8f:ef:bf:0a:2f:
cf:c7:cd:3b:1e:d7:83:dc:2a:8f:a4:14:d1:71:95:
3b:4d:8b:4a:c1:8b:b3:a4:1f:c8:ff:c4:ef:42:37:
0b:2f:fc:d7:28:c0:db:a0:57:5b:22:6d:db:17:20:
a1:c9:7e:79:a3:67:74:94:51:86:74:72:e0:93:5e:
99:af:7d:07:78:e8:4f:f2:03:9c:28:b2:ea:59:c3:
5d:ac:64:af:9a:cb:d0:a2:f3:27:54:9c:1b:ab:ea:
75:38:b4:14:e4:7c:3d:f3:92:58:ab:82:8b:a2:44:
1a:4b:af:ab:51:51:f1:84:26:d0:bd:98:d0:b0:47:
86:ab:35:4f:73:7f:40:d9:78:7c:a6:62:75:87:c7:
9d:c0:6d:ff:d9:f9:35:94:6f:26:da:1a:da:d4:1d:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:83:57:42:B0:78:D8:83:F9:45:2F:1C:D9:AD:21:7C:1A:FF:32:AA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fYNXQrB42IP5RS8c2a0hfBr_Mqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.98.0/24
89.213.198.0/24
Signature Algorithm: sha256WithRSAEncryption
54:36:56:88:c4:05:71:35:ca:2c:c4:78:6a:9a:55:88:23:91:
c5:4f:8d:cb:04:9d:c8:56:50:a5:87:f3:3f:c4:bd:72:56:bf:
4f:4b:d9:4a:c5:3d:9d:5f:43:e0:ea:d6:11:f5:8a:0d:42:42:
d7:07:85:05:22:20:44:29:1a:0b:1b:ea:a5:00:f7:51:ca:00:
65:b8:1a:28:cd:16:9f:94:dd:f3:4f:be:0e:79:37:7b:56:1e:
10:bd:5c:5f:76:1b:a8:33:62:af:c6:e7:4f:dc:5c:89:60:a2:
c1:e3:ee:7b:46:d3:5e:d9:3a:c6:00:8f:c5:1c:98:6a:59:65:
75:bb:f4:1b:40:7b:51:b1:ce:85:4e:86:ed:ae:ec:50:91:fa:
d8:6d:74:59:be:3a:8a:d8:b3:7d:35:db:7c:ab:29:1a:5d:0b:
7c:e8:27:99:38:bd:31:38:90:2f:8e:9f:5c:04:cb:29:3b:67:
26:14:12:d8:56:45:71:fe:f7:85:45:e5:10:21:fc:2a:31:12:
fa:83:a8:65:e5:91:8d:36:e5:27:ba:d7:80:b7:80:aa:50:01:
17:ec:96:f2:fb:14:7d:8a:e6:2a:a8:41:e8:12:d8:11:05:09:
90:04:42:02:97:53:ba:a9:4c:82:5f:08:16:f7:52:2d:e4:b9:
db:03:e4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:28:29 2026 by rpki-client