Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fx0DNLVFP1rSuZMAQy1lt2lxivI.roa
File: fx0DNLVFP1rSuZMAQy1lt2lxivI.roa (raw, json)
Hash identifier: 7duOGXq9Lgkskl8I8THBfEsQzJt8rc5n9sf9nlGg9OA=
Subject key identifier: 7F:1D:03:34:B5:45:3F:5A:D2:B9:93:00:43:2D:65:B7:69:71:8A:F2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E633E2A361D516CA3564D8CF92B480857
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fx0DNLVFP1rSuZMAQy1lt2lxivI.roa
Signing time: Tue 26 May 2026 07:44:38 +0000
ROA not before: Tue 26 May 2026 07:44:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209557
IP address blocks: 82.152.213.0/24 maxlen: 24
82.153.222.0/24 maxlen: 24
109.176.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:3e:2a:36:1d:51:6c:a3:56:4d:8c:f9:2b:48:08:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 26 07:44:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f1d0334b5453f5ad2b99300432d65b769718af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:44:2d:fd:30:23:72:d1:aa:38:03:55:71:
dc:9c:c1:5a:09:b9:1f:d4:71:36:8a:c3:3a:47:5c:
a8:9c:13:4c:7d:27:01:f6:77:45:59:9d:8a:0f:d9:
9b:02:ad:19:46:bd:d4:51:68:d3:e3:f6:f8:25:e1:
e5:dc:0e:9f:a3:cc:07:65:5f:d2:9c:e6:0b:1e:8b:
39:05:3f:b8:a0:6e:e4:9e:77:d8:3f:0b:ef:a5:2d:
d6:67:c2:90:c3:3c:3f:66:de:71:93:2b:95:da:02:
8c:f6:5e:00:35:41:78:a7:3d:21:67:49:18:a5:54:
02:b2:60:75:38:c7:df:9a:c2:68:3a:85:a6:4d:81:
f5:b7:fb:47:2a:f2:c1:a9:7f:88:5c:1d:dc:a3:b9:
f5:72:39:63:93:4b:87:28:6a:32:ea:f3:a9:28:b8:
31:0e:b3:28:2d:28:59:9c:75:ad:7c:7d:8a:d0:78:
30:cb:9d:cb:12:41:98:43:1e:da:d1:d4:aa:72:a3:
ff:57:b0:61:71:86:02:aa:24:4a:6f:4b:54:d9:10:
c2:2c:46:bd:fb:a8:c0:63:ed:39:90:2d:59:61:8a:
1d:28:31:f8:b7:5f:cb:98:f8:40:b2:33:12:87:df:
e0:aa:ce:fe:bb:22:94:dc:af:c3:53:32:0d:ee:49:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1D:03:34:B5:45:3F:5A:D2:B9:93:00:43:2D:65:B7:69:71:8A:F2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fx0DNLVFP1rSuZMAQy1lt2lxivI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.213.0/24
82.153.222.0/24
109.176.22.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b1:91:c8:3b:70:ad:9b:31:0b:49:79:f3:37:91:e4:48:79:
88:e9:67:e7:57:65:21:9f:af:0e:79:6b:43:85:9d:e9:07:c5:
ca:51:07:d6:ee:e6:32:4b:70:ea:41:71:4a:28:dd:d5:fa:57:
6c:a6:25:4a:5c:8c:c3:35:c5:fd:97:c5:1e:94:33:62:b0:61:
5b:c8:95:6b:92:a2:e9:49:43:be:b0:d9:07:80:90:c0:93:3c:
b6:7b:1b:03:0f:98:f1:a0:6d:6e:03:5f:15:c8:6c:8e:f7:af:
e8:d0:95:9b:36:ac:d3:4d:32:e3:39:10:21:f9:5e:a3:a6:19:
74:6d:cd:8a:42:e0:9d:a7:fc:7e:b5:cb:d2:b4:90:2b:13:a9:
33:83:87:2f:d0:a3:78:06:fd:fe:64:be:55:28:19:85:57:0d:
70:5f:82:52:be:ac:82:d2:4a:88:7b:c3:2a:a1:34:bc:da:c1:
7b:88:36:19:38:5c:1c:5b:43:27:ea:a1:d5:3e:6d:23:04:96:
26:fd:be:f7:3b:0b:98:59:37:28:c9:2d:d9:a2:f3:2d:ce:3f:
0e:19:8b:55:9d:31:ad:d2:8f:93:d2:44:c7:23:9d:82:ee:a3:
09:9e:8d:75:e8:21:df:7f:1d:77:a1:d1:87:fb:9e:96:ec:7b:
c4:53:60:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:13 2026 by rpki-client