Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uXadd6bXvTJfkR_pPmuG72Vge4Q.roa
File: uXadd6bXvTJfkR_pPmuG72Vge4Q.roa (raw, json)
Hash identifier: Kj1Fev9bSUwEnvFHxN8WH5lZrE5vq3aGWdT9xN7I8yo=
Subject key identifier: B9:76:9D:77:A6:D7:BD:32:5F:91:1F:E9:3E:6B:86:EF:65:60:7B:84
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E82EE7B4D14C684DDABEA0656FC6E8F02
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uXadd6bXvTJfkR_pPmuG72Vge4Q.roa
Signing time: Mon 01 Jun 2026 11:25:27 +0000
ROA not before: Mon 01 Jun 2026 11:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154383
IP address blocks: 81.168.111.0/24 maxlen: 24
89.213.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:ee:7b:4d:14:c6:84:dd:ab:ea:06:56:fc:6e:8f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 1 11:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9769d77a6d7bd325f911fe93e6b86ef65607b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:e5:96:a5:d7:b4:6c:a2:1e:e4:8a:1d:05:
2a:59:fd:b0:fc:4f:d1:f5:05:3d:44:a2:df:6b:67:
b0:fa:33:33:16:b6:55:3f:40:f5:a3:e9:7d:ae:41:
71:e9:1b:9a:cc:04:a4:6c:35:34:c0:b0:0e:b3:7e:
00:96:12:27:64:e8:6d:cd:de:5b:06:d0:f5:4e:f9:
0d:97:e3:87:21:63:ae:d9:75:21:b5:1a:ad:64:8b:
e5:26:eb:d7:30:7d:21:3d:83:2b:c5:c4:72:b1:03:
d0:ad:a1:59:f9:5c:b5:1e:24:fd:36:b4:2b:1f:ff:
0c:82:28:53:16:83:c5:88:ce:be:59:13:db:e6:57:
ad:43:3d:f8:b6:08:42:97:1b:6d:83:c7:1a:b6:5c:
91:c3:94:94:f8:d5:3a:38:96:35:7f:32:b2:74:91:
d1:f1:a3:2e:7b:55:2a:4f:0a:27:06:1b:7e:89:7b:
fa:e9:75:82:47:e9:cf:8b:b0:20:fe:44:ea:84:4e:
0f:93:c2:6a:8f:02:36:64:29:ef:f4:75:61:8d:5e:
97:a9:34:89:e0:12:02:62:1f:a6:e1:1b:4c:9b:14:
6f:98:fe:cb:3c:bb:6c:b9:e1:91:03:65:56:7d:9f:
56:25:85:b8:5c:11:f9:f4:02:1a:4e:fc:cd:9d:a8:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:76:9D:77:A6:D7:BD:32:5F:91:1F:E9:3E:6B:86:EF:65:60:7B:84
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uXadd6bXvTJfkR_pPmuG72Vge4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.111.0/24
89.213.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:23:be:15:ca:c1:6d:99:50:8b:c7:8e:bb:f5:7c:5d:af:b0:
02:9b:f7:31:94:5f:28:04:d0:4b:bb:76:28:1a:89:8c:58:b0:
24:e7:4c:ad:7b:25:e9:9a:0d:eb:ea:9f:27:df:a9:0e:bb:fc:
98:6b:ba:82:e5:63:ce:af:c8:bb:e2:22:48:3a:83:91:51:6c:
03:4c:d2:d5:10:d0:58:86:96:37:39:47:29:0d:90:eb:fa:a7:
c7:c2:d0:0f:85:ee:94:9e:41:97:2e:d4:32:20:a4:c3:93:8d:
6e:d7:4e:49:d7:66:8a:b0:8f:73:90:09:2f:4b:9a:6b:f0:93:
b6:cb:3a:01:78:84:a6:78:d2:5c:f7:83:7b:48:96:d0:5d:2f:
9b:21:fd:96:82:a2:a2:44:16:cd:2c:0a:6b:2e:7b:44:15:c0:
c2:0a:ba:77:2c:cb:ff:52:07:00:12:8c:df:8e:a8:02:c3:3e:
64:af:7b:c4:ee:87:7a:d6:d3:05:4e:04:b8:f0:e1:d0:9a:1a:
7e:77:d7:d8:18:db:9c:0f:79:87:13:cc:80:fb:5a:02:14:71:
6c:42:a9:29:0f:5d:f4:2f:c4:37:3c:6c:ca:60:f0:07:3d:09:
8a:b5:31:2a:44:e3:d2:74:79:e2:56:86:fd:44:6d:29:84:83:
cf:41:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:25 2026 by rpki-client