Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i5D8I3lk-Igg2cfZPfHAt52I_W0.roa
File: i5D8I3lk-Igg2cfZPfHAt52I_W0.roa (raw, json)
Hash identifier: CaoHH1triULYmMq63d5gv0R8dmbAaF8pMdOWZLTdoHQ=
Subject key identifier: 8B:90:FC:23:79:64:F8:88:20:D9:C7:D9:3D:F1:C0:B7:9D:88:FD:6D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D9A640FF271ECE9E7B26A1360A6C6612B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i5D8I3lk-Igg2cfZPfHAt52I_W0.roa
Signing time: Fri 17 Apr 2026 07:42:22 +0000
ROA not before: Fri 17 Apr 2026 07:42:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402289
IP address blocks: 89.213.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:64:0f:f2:71:ec:e9:e7:b2:6a:13:60:a6:c6:61:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 17 07:42:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b90fc237964f88820d9c7d93df1c0b79d88fd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d7:05:77:cd:9d:b6:ee:da:6b:a7:bf:23:50:
ba:4d:06:8c:1b:4c:93:3d:06:9a:d5:e5:b6:b3:2a:
70:20:36:59:38:b1:7e:76:75:2d:46:dd:4a:08:57:
05:cd:ce:60:10:9f:b9:2b:26:85:61:01:46:fa:2b:
d7:3b:30:53:83:eb:44:ad:7e:fa:56:35:45:b3:3f:
09:2f:a1:e1:eb:9f:44:a1:cf:fc:7b:fe:f1:f0:75:
8d:42:4f:85:30:45:e0:97:02:6d:c3:4c:b5:7b:1f:
fe:b5:d3:51:52:b4:ba:7d:05:e3:67:fa:98:a8:95:
9d:2e:25:38:f9:ad:48:43:4b:07:89:3a:55:75:e6:
b3:45:31:c9:f8:c8:87:06:0d:c4:d7:2a:05:0d:fe:
e6:62:9e:f9:43:28:b7:18:ef:37:c8:b2:54:77:3e:
c3:72:56:33:7b:34:29:74:ce:e8:42:80:6e:6e:38:
d5:95:12:23:71:5d:b4:43:60:53:1d:84:d3:ef:51:
19:7b:be:88:7e:ec:c9:2c:14:d3:52:12:f2:33:23:
4a:ae:c6:37:d1:65:8e:73:1c:6a:8b:dc:cf:fa:9f:
3b:2e:ef:03:7e:05:b7:a9:d9:71:05:35:5e:4b:48:
7a:11:e8:b7:9d:6f:dd:83:b0:28:bc:00:b9:55:0f:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:90:FC:23:79:64:F8:88:20:D9:C7:D9:3D:F1:C0:B7:9D:88:FD:6D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i5D8I3lk-Igg2cfZPfHAt52I_W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.68.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c7:53:4f:8b:8f:72:64:f5:c9:ff:6a:1e:49:6f:d3:46:e9:
ac:5e:46:0a:0a:7f:c1:f3:30:e9:23:95:5b:3f:84:a2:8d:30:
a9:5f:8c:e7:6d:13:8a:12:9c:81:35:b0:ea:45:36:ac:9c:9e:
51:94:34:b7:55:2a:43:ca:ea:8b:51:d5:98:8a:5c:c7:af:30:
7a:ad:e4:18:22:62:4c:25:02:c6:54:87:a8:28:21:e9:f4:0f:
4d:18:0d:7c:c5:2f:1c:ab:e0:54:7b:72:7d:a9:b8:91:5f:bc:
61:8d:46:81:6f:7b:cc:da:e4:80:16:2d:e4:32:66:63:ad:b4:
ba:43:53:96:26:9d:14:fc:2e:d6:d2:30:08:7f:99:01:f1:54:
5a:67:86:7c:c7:6a:ec:26:ab:dc:be:3b:1a:d0:0c:5e:5b:77:
84:09:9c:a2:4f:af:61:a7:c3:19:5c:c5:88:d6:45:4a:d1:eb:
57:be:5a:a7:06:13:e7:e3:dc:89:a5:4a:36:a9:97:60:fe:99:
12:1f:f8:19:22:a8:20:e4:50:21:df:eb:b1:7a:e5:d4:da:71:
b3:92:2b:5f:81:6a:3c:5a:38:ac:90:22:ab:4a:51:b2:0a:40:
f3:36:d4:c5:b6:e6:be:da:80:7c:96:36:1d:fa:39:cb:d3:f5:
f6:f8:bf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:32 2026 by rpki-client