Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/r-jH3K8gcLw126eQ4FkoGo2cj9Q.roa
File: r-jH3K8gcLw126eQ4FkoGo2cj9Q.roa (raw, json)
Hash identifier: WprvCGc4fvgZRtpPYXPu9X3gBWvFU60j9mgBknNXAj8=
Subject key identifier: AF:E8:C7:DC:AF:20:70:BC:35:DB:A7:90:E0:59:28:1A:8D:9C:8F:D4
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 019EBC5BC5EC7AF9014E86850DFF87137B9C
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/r-jH3K8gcLw126eQ4FkoGo2cj9Q.roa
Signing time: Fri 12 Jun 2026 15:03:11 +0000
ROA not before: Fri 12 Jun 2026 15:03:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200954
IP address blocks: 81.90.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:5b:c5:ec:7a:f9:01:4e:86:85:0d:ff:87:13:7b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Jun 12 15:03:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afe8c7dcaf2070bc35dba790e059281a8d9c8fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:89:c5:43:5f:07:a0:5a:51:93:9f:e0:de:
19:7a:68:80:44:3e:ee:c2:70:fc:d7:33:a3:ca:74:
98:c9:50:f1:9d:c8:0e:60:8e:c2:ee:55:a1:9b:da:
36:7e:82:8a:b7:c4:d3:40:df:ab:f4:6c:cb:b5:26:
85:4d:bf:2b:ff:49:99:f6:be:13:04:a2:67:b9:6b:
cc:77:47:2a:52:fa:33:4a:db:57:2b:e2:47:cb:e5:
d7:42:80:74:b9:88:ed:e9:36:ed:bb:02:1e:93:22:
18:85:57:2d:30:b0:98:96:b6:7a:13:2b:ee:a8:de:
9a:0e:1c:c2:65:79:23:f1:12:db:a0:67:3e:6b:47:
f5:ad:2f:9d:95:98:45:a2:57:f9:10:c1:1c:5a:35:
1c:98:46:0a:1b:08:ce:50:2b:41:1f:ba:db:6f:e6:
a2:3c:4d:b9:ef:f0:ce:48:5c:e1:8d:ca:02:c7:a8:
6f:64:70:f8:1f:0d:29:be:20:ae:d5:4d:ba:53:06:
fb:60:f0:a7:bc:20:78:89:d6:38:37:52:ae:82:29:
8c:6e:2d:4d:16:10:7f:ab:31:21:34:0a:c9:c1:91:
04:92:93:f5:76:4a:dd:40:64:b4:81:ef:2c:cf:0d:
4f:94:f6:4b:9e:eb:06:b1:57:70:d1:e3:40:e0:a5:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:C7:DC:AF:20:70:BC:35:DB:A7:90:E0:59:28:1A:8D:9C:8F:D4
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/r-jH3K8gcLw126eQ4FkoGo2cj9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a8:2b:54:8f:0d:68:b4:c6:a7:95:a1:e1:c4:2d:38:63:fd:
01:e0:e6:f1:5f:b5:67:2c:41:1a:22:98:a6:f9:22:10:5e:27:
93:c0:d2:c6:e1:a5:75:03:00:4d:13:2c:30:e2:4f:de:5a:07:
d2:80:aa:ce:e9:b0:e8:d5:e6:53:4e:8c:91:ba:98:6a:9e:39:
8d:b9:5a:d3:e6:a9:c9:5b:5d:f1:74:10:3b:df:d6:a7:55:b4:
5d:9b:93:05:e3:ea:7f:fa:a1:1b:e9:5e:c9:5b:cd:1e:75:84:
75:73:9d:25:bf:af:de:cb:71:81:68:da:55:e1:a3:44:34:61:
d9:9a:37:1e:f4:69:f3:25:76:5a:d5:a3:c3:80:d5:80:86:bb:
ca:c9:07:56:b3:a8:61:48:35:b8:59:d7:f3:67:d5:f9:9f:cb:
03:21:a8:aa:23:ce:b9:7a:19:18:ca:bb:59:6a:ab:4a:cb:70:
2b:0d:2a:9a:b7:71:dd:97:92:8a:91:48:c4:41:cb:6d:bd:a2:
f5:27:98:42:8b:58:33:83:71:59:20:19:b4:47:85:21:c9:60:
39:fa:7f:a8:05:c7:a3:c6:b0:41:bf:15:51:85:df:b6:12:9b:
2f:b3:7f:8b:78:55:72:df:04:98:6c:8b:12:44:14:9c:eb:fb:
70:e1:40:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:24:42 2026 by rpki-client