Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zdMD09mQOuir_96wUVhOcllDsS8.roa
File: zdMD09mQOuir_96wUVhOcllDsS8.roa (raw, json)
Hash identifier: /YwlViMAREsS63tAZLFK9v6ZzQsa80xKyffb8iHBhVg=
Subject key identifier: CD:D3:03:D3:D9:90:3A:E8:AB:FF:DE:B0:51:58:4E:72:59:43:B1:2F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EA61A7494FF0097EB3D9B86F24C964B2F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zdMD09mQOuir_96wUVhOcllDsS8.roa
Signing time: Mon 08 Jun 2026 07:20:12 +0000
ROA not before: Mon 08 Jun 2026 07:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197213
IP address blocks: 82.152.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:1a:74:94:ff:00:97:eb:3d:9b:86:f2:4c:96:4b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 8 07:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdd303d3d9903ae8abffdeb051584e725943b12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ea:1b:af:e2:64:6f:45:2c:33:e3:21:4f:90:
88:9e:0c:c4:9f:c8:5e:9b:99:33:45:7f:40:aa:b6:
96:4b:d4:e5:46:0a:24:5e:16:de:9a:1b:48:51:6e:
8a:ad:a1:6d:99:70:5c:52:26:30:3e:ae:3f:b1:94:
67:d8:8c:8b:42:3a:bd:3a:84:19:f2:2d:c4:0a:d4:
37:2f:53:a6:75:03:fe:9f:01:f9:c0:e5:16:e4:1d:
ed:7a:d8:ca:3d:5a:b7:ae:84:82:32:1c:82:7c:e4:
2f:db:da:12:05:88:ca:66:dd:8c:b3:0f:af:35:6c:
e7:e9:40:2b:2e:94:98:11:5c:16:30:5f:72:da:f1:
f9:76:9c:25:dd:ff:fa:b5:5c:d4:63:3c:e7:0c:51:
91:d0:50:64:0a:88:d6:92:c1:1a:d1:3b:8b:16:4d:
ce:25:1e:3c:a9:c5:d9:5b:e2:f8:3c:0c:40:76:e7:
93:9a:94:dc:99:c5:66:8d:db:7a:fe:c2:81:de:22:
f0:ce:1c:ea:a0:99:33:21:80:a1:98:a5:33:c0:f4:
95:85:c7:3a:b9:e3:10:d1:08:f2:04:18:9e:7f:a1:
b1:e5:3a:a7:5a:d0:47:28:ed:20:22:ef:76:b7:1f:
18:b2:6b:65:72:e5:20:90:3b:23:04:9c:a2:77:95:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D3:03:D3:D9:90:3A:E8:AB:FF:DE:B0:51:58:4E:72:59:43:B1:2F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zdMD09mQOuir_96wUVhOcllDsS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:54:fe:99:0b:e5:af:df:2f:0a:1f:69:41:18:b9:13:ce:7d:
58:e6:40:13:06:62:df:3c:ce:d4:15:40:ce:f5:45:92:01:13:
bb:36:37:f8:19:ec:31:85:13:c6:79:e0:4b:07:40:34:ee:87:
39:14:8e:52:0e:7b:bb:e5:d5:6a:1e:b1:08:2c:4a:d8:c0:82:
2a:53:10:9c:ca:4d:dc:30:15:83:1b:86:b4:bc:a9:1e:72:9e:
af:c2:02:45:2a:9b:a1:4d:13:c4:64:32:ae:71:b7:5f:53:f4:
fb:9a:f1:f1:ae:3a:82:f5:7c:da:d3:1e:a3:56:15:be:16:79:
c8:af:a7:ef:39:91:90:cd:2d:a1:ac:90:29:24:48:76:ef:ed:
f9:a8:12:27:64:a6:fa:15:38:3f:99:43:8c:8b:fd:74:34:b6:
cd:e4:ad:f7:35:2c:89:87:4f:24:b6:8c:b9:ad:bf:f7:24:69:
f0:fd:7d:43:40:0f:aa:6b:27:7b:4f:84:83:84:4c:3e:b4:95:
cf:11:aa:bb:7c:a7:59:c8:56:98:91:c7:c2:c4:9a:fd:00:a5:
df:12:89:ab:2d:3a:cc:22:9b:46:ae:25:0d:72:6d:7c:8b:9c:
5f:6e:2c:55:fd:ed:28:55:94:4d:67:64:4e:20:1d:d6:d6:d1:
1f:71:f8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:56:08 2026 by rpki-client