Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k987hIM9PzDNR_bqHiRwK_PHn9s.roa
File: k987hIM9PzDNR_bqHiRwK_PHn9s.roa (raw, json)
Hash identifier: kfq2ZShz3mOK+gfvYDiMtac2C/JGBjhqYguBi6KkXxU=
Subject key identifier: 93:DF:3B:84:83:3D:3F:30:CD:47:F6:EA:1E:24:70:2B:F3:C7:9F:DB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019A102D3BA1CEE9BD72224A94C35D91D1FC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k987hIM9PzDNR_bqHiRwK_PHn9s.roa
Signing time: Thu 23 Oct 2025 08:26:31 +0000
ROA not before: Thu 23 Oct 2025 08:26:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 77.93.133.0/24 maxlen: 24
80.240.86.0/24 maxlen: 24
81.5.189.0/24 maxlen: 24
81.168.105.0/24 maxlen: 24
82.152.176.0/24 maxlen: 24
89.28.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:2d:3b:a1:ce:e9:bd:72:22:4a:94:c3:5d:91:d1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 23 08:26:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93df3b84833d3f30cd47f6ea1e24702bf3c79fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:c8:91:25:40:f4:91:85:27:b7:58:0b:a2:
2e:a9:63:2f:e5:c6:aa:17:1b:6a:67:fc:b3:fe:aa:
08:d4:3c:3c:47:76:21:d3:ec:57:49:dd:57:56:e0:
93:dc:bf:4c:bc:6b:1a:ce:bf:2c:57:37:25:42:ee:
a6:27:75:ee:c0:68:49:52:5f:d9:32:d8:fc:3d:da:
52:fe:97:53:12:f0:76:d4:06:8f:85:9f:50:9f:cd:
0d:0e:f3:aa:c4:e4:7f:22:b1:fd:96:a7:52:b6:a9:
8b:0f:ef:ab:6d:14:f5:e8:c0:35:e1:7c:65:02:38:
23:a8:d6:50:0e:3c:05:1f:52:37:68:01:1a:b9:8d:
07:ca:76:28:ac:12:5a:33:bb:5d:f8:f7:69:06:9a:
c2:9d:f4:de:39:4d:40:12:a1:f8:e5:b9:37:9d:d4:
9f:ee:0d:18:c2:2b:0c:b4:18:c8:af:1c:08:24:de:
22:62:16:21:e8:7d:c6:b3:fc:d2:2d:7f:bc:57:41:
e0:a6:7f:6e:55:a9:e3:00:d7:9d:7a:a0:8a:ba:2e:
63:b5:54:7b:67:4a:05:24:1c:42:45:e8:ad:5f:7f:
ed:b1:53:a4:af:c5:ff:5b:79:ab:5e:f7:bd:58:79:
54:1c:6f:57:ca:72:a5:ea:fc:70:99:cf:bb:45:05:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DF:3B:84:83:3D:3F:30:CD:47:F6:EA:1E:24:70:2B:F3:C7:9F:DB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k987hIM9PzDNR_bqHiRwK_PHn9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.133.0/24
80.240.86.0/24
81.5.189.0/24
81.168.105.0/24
82.152.176.0/24
89.28.234.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:25:e5:24:ef:1f:12:00:ba:38:4c:25:dd:50:e5:fd:1f:9e:
35:97:b4:04:0b:e4:03:b0:cf:1a:25:4e:f8:98:53:f6:2d:7c:
85:92:7a:cd:14:58:2e:99:fb:ec:6b:d0:4f:93:79:a7:e1:17:
58:50:ce:9f:82:cc:62:c2:3c:f1:31:34:f3:33:c1:13:11:17:
19:e6:e6:b8:3f:31:88:65:fd:ed:6c:0d:36:e6:8d:e5:fe:02:
b0:8b:d6:10:94:c0:2f:a0:44:21:5e:66:3e:65:d8:ba:92:6f:
dc:63:27:09:3e:81:b3:f8:bf:f4:39:c4:d3:84:6a:93:3e:bd:
a1:97:7e:9e:7c:cf:55:68:17:a3:ac:7a:3b:68:db:c3:0f:65:
d1:c0:d7:62:91:4b:5f:13:c3:e5:10:03:14:bc:62:45:ee:6a:
22:98:47:96:a0:34:f3:06:97:dc:b3:46:7f:b7:a6:9b:68:56:
44:45:dc:c4:e2:1d:50:ff:2b:95:d5:c1:cf:56:8d:63:49:ac:
a7:0c:51:84:6a:ff:7e:fc:57:0b:d3:d6:23:72:76:b8:aa:b8:
ee:fb:98:c5:ce:43:3a:6d:3d:b3:08:fd:78:fe:fe:f8:59:76:
8c:d9:f0:69:7d:e8:07:3b:5f:16:c5:db:02:b5:65:81:4a:df:
05:65:3d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:46:49 2025 by rpki-client