Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tZO0Q0zSDcQ64UAGbI5mmYooLnU.roa
File: tZO0Q0zSDcQ64UAGbI5mmYooLnU.roa (raw, json)
Hash identifier: JMLEHILj6E5ewcrk36R/j+Xl7HmtlmhH51tT/NyD8AU=
Subject key identifier: B5:93:B4:43:4C:D2:0D:C4:3A:E1:40:06:6C:8E:66:99:8A:28:2E:75
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EA61A73C8742FB48448328E27199F0108
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tZO0Q0zSDcQ64UAGbI5mmYooLnU.roa
Signing time: Mon 08 Jun 2026 07:20:11 +0000
ROA not before: Mon 08 Jun 2026 07:20:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132479
IP address blocks: 89.213.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:1a:73:c8:74:2f:b4:84:48:32:8e:27:19:9f:01:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 8 07:20:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b593b4434cd20dc43ae140066c8e66998a282e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:8a:5e:f9:f7:46:54:77:dd:f5:77:25:0f:
11:e1:cc:8b:2c:e6:2d:c9:97:92:b9:b1:0e:5d:c0:
94:41:c3:ac:b3:d2:6d:e1:5f:d0:ef:97:cf:57:cc:
d8:1d:cc:65:e5:7a:cc:bd:6e:22:f9:e8:1f:a2:3e:
c0:9b:12:ea:79:bf:0a:34:b1:7b:eb:dc:bd:e5:b8:
af:81:be:6e:35:7e:98:5f:c9:61:03:01:96:c3:04:
fe:3b:10:50:72:6f:12:64:bc:60:55:45:c4:dd:fb:
fa:73:2b:a9:6e:6b:59:1a:7e:64:17:20:bd:29:1e:
60:44:4f:92:ad:ec:9f:ff:6d:84:74:b8:28:d7:b2:
b2:1a:d2:90:31:ce:fc:5f:5c:92:0d:63:df:38:1f:
78:4d:a8:96:a4:33:8d:c6:19:39:28:c4:0e:cd:8e:
7c:18:96:7a:47:70:14:74:c4:cf:df:16:c6:44:cb:
a2:c7:36:80:1a:a0:51:3e:fb:d5:93:61:fe:96:50:
36:f9:79:5c:30:75:a6:fc:7e:97:e7:c0:c1:76:67:
7a:e7:12:9f:ce:54:6b:8d:a2:25:de:00:0b:f0:10:
04:36:4c:06:29:a4:49:d4:d9:0b:14:d2:85:71:b5:
95:c3:7e:6e:63:8b:b2:e6:b5:7e:58:2a:c6:de:58:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:93:B4:43:4C:D2:0D:C4:3A:E1:40:06:6C:8E:66:99:8A:28:2E:75
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tZO0Q0zSDcQ64UAGbI5mmYooLnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.2.0/24
Signature Algorithm: sha256WithRSAEncryption
78:01:6b:f2:28:5f:1c:48:32:86:97:3b:93:ea:08:19:09:f8:
b3:71:db:14:4e:37:a5:52:d9:26:ac:32:ae:fe:b4:61:5e:f2:
29:9a:4f:16:23:fd:d7:8d:42:07:9c:01:58:8f:88:d3:25:b6:
f7:ee:f8:a0:39:d7:59:2c:46:3d:04:58:d2:08:84:a9:f7:ae:
73:e5:10:db:60:b8:ad:a8:a1:5f:59:89:11:20:06:ff:02:ba:
e8:22:13:96:2e:02:fb:3b:25:1c:28:97:f6:99:0a:aa:2a:e7:
73:fe:a2:c6:5b:60:e6:7a:0e:05:99:39:0b:7b:77:20:86:82:
77:ac:6d:2f:cd:a1:78:75:e1:0b:86:cb:ba:99:89:9c:48:ca:
87:6d:e7:b9:1a:96:ef:38:78:38:f2:03:93:56:1a:3e:aa:d1:
37:30:42:c0:38:56:3d:73:57:77:48:c9:66:ec:c0:fd:10:76:
80:b4:9c:e0:de:46:7d:10:71:b7:32:c5:90:39:70:71:26:40:
57:80:8c:fc:4b:00:1a:e9:83:43:de:dc:47:64:21:85:63:ed:
c3:02:4b:1d:0d:e0:13:f9:fa:eb:c3:a2:15:42:74:32:81:02:
1d:8e:40:55:ca:92:ec:6b:66:92:46:e2:cf:c3:a9:12:3e:4e:
2b:ed:e5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:40:45 2026 by rpki-client