Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x0RiNcjN45tJ0bPYKrSSHSbIwLM.roa
File: x0RiNcjN45tJ0bPYKrSSHSbIwLM.roa (raw, json)
Hash identifier: wIYhJbABsWry5Mng2HMtZ8hQf2LrgfOy6dHif6imnUU=
Subject key identifier: C7:44:62:35:C8:CD:E3:9B:49:D1:B3:D8:2A:B4:92:1D:26:C8:C0:B3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E9179AD4C01413BE63F5154EB9E91B341
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x0RiNcjN45tJ0bPYKrSSHSbIwLM.roa
Signing time: Thu 04 Jun 2026 07:12:11 +0000
ROA not before: Thu 04 Jun 2026 07:12:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 77.93.139.0/24 maxlen: 24
82.153.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:79:ad:4c:01:41:3b:e6:3f:51:54:eb:9e:91:b3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 4 07:12:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7446235c8cde39b49d1b3d82ab4921d26c8c0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:6f:7e:a1:16:19:1f:d0:99:6e:ed:8e:29:
9b:c6:56:77:a8:b0:a1:87:42:6c:75:c7:4c:bf:81:
25:d0:c7:41:e2:98:08:84:f2:ed:c9:7c:ef:ba:25:
3f:ca:db:45:83:fd:a2:0b:50:82:d1:b9:45:12:5a:
cd:b4:a7:1f:e8:a4:5e:7a:5f:b8:fe:81:3e:5e:ea:
03:f7:69:d2:24:80:74:12:1b:0f:cf:66:37:2c:a1:
b4:82:85:dc:72:13:ab:c1:5a:60:09:c4:ac:ae:95:
80:b6:80:41:5d:99:6f:37:c0:fe:05:7e:39:2f:ee:
bf:47:c5:a2:84:25:fd:70:92:81:f3:34:71:cd:7d:
05:eb:24:0f:f0:76:3e:c4:98:a0:24:0c:2c:50:46:
5a:37:12:9b:50:2f:40:09:f9:38:53:4e:c8:30:7a:
21:39:c9:7d:2f:be:b5:44:5d:5b:05:70:d9:9c:f8:
f7:4e:95:c2:9c:09:7c:c8:1e:57:41:c6:d8:33:48:
74:f6:ee:67:36:8b:50:0a:93:c0:cb:63:ff:0c:96:
fe:46:c0:77:a3:ea:83:a7:ad:bf:fb:fe:54:a0:d1:
44:b4:8a:8f:1e:9c:7b:78:3b:4a:bc:84:c8:ce:f1:
b0:79:fc:56:b3:71:ca:b1:b6:91:be:ff:9d:35:00:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:44:62:35:C8:CD:E3:9B:49:D1:B3:D8:2A:B4:92:1D:26:C8:C0:B3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x0RiNcjN45tJ0bPYKrSSHSbIwLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.139.0/24
82.153.148.0/24
Signature Algorithm: sha256WithRSAEncryption
92:71:6c:5c:01:93:1c:91:c1:d9:91:4d:35:1d:6e:e8:1c:9a:
53:a2:96:7f:81:89:7a:61:d7:ff:5f:de:3a:ce:f4:0b:a7:99:
51:e9:49:8c:df:dc:b4:61:d2:7e:5b:d9:24:9a:a0:26:e1:23:
34:55:bc:76:5d:14:79:69:1b:ff:28:13:d9:1e:6e:c6:95:d3:
80:ed:b5:63:49:d8:60:40:29:31:f3:b8:cc:e1:63:fb:46:36:
2b:48:c7:bf:e9:21:16:44:70:a9:ce:71:5a:fd:2e:42:bd:e3:
a3:f0:3b:eb:05:c5:b8:c3:73:75:38:c8:61:bc:75:ea:4b:c8:
88:b3:5c:10:f6:ec:31:7e:03:c3:6d:2d:be:e7:4c:99:cd:81:
30:22:31:e7:2a:0c:51:91:9b:53:22:2a:3e:a7:5d:84:65:20:
a0:ee:33:cc:02:46:25:6b:f7:75:f7:81:eb:b6:66:1f:31:f0:
66:6c:6d:40:27:23:28:9d:03:a6:23:30:49:68:f0:e3:2e:b9:
d4:71:08:21:98:c0:f2:bc:79:57:15:2b:2e:66:be:c9:dd:d4:
32:6c:32:ab:63:db:e1:15:5f:ea:2b:ac:b0:1d:ad:09:99:b1:
ac:11:8a:ab:91:98:4b:db:bf:2f:e2:e6:39:fc:6a:c4:61:f9:
9b:6b:49:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:34 2026 by rpki-client