Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P8m3Ol85AkHMxbbTK0tZaRnkS3Q.roa
File: P8m3Ol85AkHMxbbTK0tZaRnkS3Q.roa (raw, json)
Hash identifier: byzFxRSSLt89DNjvJUXhCwPXPR//nX5R+Hq1VvTRwBI=
Subject key identifier: 3F:C9:B7:3A:5F:39:02:41:CC:C5:B6:D3:2B:4B:59:69:19:E4:4B:74
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FD200849B6933CAE64746C9A4EE41A395
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P8m3Ol85AkHMxbbTK0tZaRnkS3Q.roa
Signing time: Wed 05 Aug 2026 12:57:56 +0000
ROA not before: Wed 05 Aug 2026 12:57:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 83.219.98.0/24 maxlen: 24
87.120.193.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:00:84:9b:69:33:ca:e6:47:46:c9:a4:ee:41:a3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 5 12:57:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fc9b73a5f390241ccc5b6d32b4b596919e44b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:b2:51:4a:5c:94:55:d5:12:a7:06:d9:48:
9e:81:14:8e:6b:64:22:bc:95:12:94:50:0b:5b:e7:
3a:8c:d3:64:6b:00:dc:c3:ab:ff:4d:c4:1f:7f:7a:
f1:55:ab:b5:98:72:0a:5b:b8:19:de:0c:eb:80:5c:
fd:30:f5:75:db:ea:8c:e5:d6:0b:26:74:14:61:e4:
c8:e7:37:c8:77:7d:7f:67:84:2f:1c:75:fc:1b:04:
a7:aa:fc:65:39:47:8e:11:a2:f3:88:68:9f:fa:55:
bf:bf:9a:cd:a8:52:6e:92:0c:8e:d0:f2:05:87:1c:
86:cd:d3:6b:cf:f4:3b:39:57:e1:b5:ee:37:c9:b0:
0a:c2:16:6b:6a:4c:f4:38:16:bc:fa:a4:87:17:4e:
62:fa:3e:b6:bb:d4:73:2e:78:de:21:ef:01:d2:3a:
86:cd:3f:c3:6f:66:ce:46:29:4c:53:32:3b:7f:f8:
4d:36:a9:0d:89:76:23:55:a0:42:0f:88:52:1e:9a:
62:4c:50:6e:96:b4:92:10:4c:9e:e9:69:e9:46:ea:
9f:99:a3:93:10:69:e2:c9:ff:a5:77:be:7a:fe:d1:
c9:44:74:36:85:e1:1a:d1:d6:a6:1e:ee:3d:b0:44:
fb:23:45:c4:3d:a6:35:e8:d4:c1:ec:ca:de:63:ff:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C9:B7:3A:5F:39:02:41:CC:C5:B6:D3:2B:4B:59:69:19:E4:4B:74
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P8m3Ol85AkHMxbbTK0tZaRnkS3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.98.0/24
87.120.193.0/24
87.121.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a5:04:3b:3f:ce:9f:f6:a6:a5:5d:55:5b:34:19:00:95:cb:
d0:f8:e4:b3:26:39:d3:40:50:0b:96:0d:1f:03:23:b7:3d:77:
bc:20:94:a6:40:e3:a7:96:9d:1a:4d:a3:25:50:e9:13:9b:75:
8f:f8:51:85:3d:6e:07:b5:f2:7d:99:cc:b3:ef:19:9d:50:b8:
e0:9a:a7:d8:9b:11:e3:15:ba:94:cd:56:a9:28:33:be:c8:8b:
fb:7b:3a:fe:09:d7:d0:b2:c1:59:8f:ce:40:f8:32:de:01:ea:
f2:a8:ab:a7:44:e5:3a:f3:e0:eb:50:b8:4c:a7:99:e5:fa:3e:
1f:7f:2b:f6:b8:fe:da:94:3d:67:5a:2f:51:ca:09:c1:6b:31:
5d:24:79:c7:63:61:ac:55:1e:5f:c8:cb:62:2d:0f:5c:de:b1:
56:07:cc:1b:47:d0:10:60:2c:5d:b1:58:5b:8b:16:0d:90:45:
2a:ff:2b:e3:32:66:95:c0:d7:76:de:48:6b:e6:62:f2:2c:02:
8b:0e:f6:fe:5c:fc:28:86:94:59:3e:1a:7b:71:d0:91:7d:5a:
3a:8e:d8:15:1b:12:7b:4a:e0:92:ea:ae:1a:13:19:08:ce:30:
cd:2f:d9:55:08:ca:65:d4:6f:87:8d:62:8a:f1:aa:82:2e:4c:
39:fe:70:82
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ/SAISbaTPK5kdGyaTuQaOVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwODA1MTI1NzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmM5YjczYTVmMzkwMjQxY2NjNWI2ZDMyYjRiNTk2OTE5ZTQ0Yjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cmyUUpclFXVEqcG2UiegRSOa2Qi
vJUSlFALW+c6jNNkawDcw6v/TcQff3rxVau1mHIKW7gZ3gzrgFz9MPV12+qM5dYL
JnQUYeTI5zfId31/Z4QvHHX8GwSnqvxlOUeOEaLziGif+lW/v5rNqFJukgyO0PIF
hxyGzdNrz/Q7OVfhte43ybAKwhZrakz0OBa8+qSHF05i+j62u9RzLnjeIe8B0jqG
zT/Db2bORilMUzI7f/hNNqkNiXYjVaBCD4hSHppiTFBulrSSEEye6WnpRuqfmaOT
EGniyf+ld756/tHJRHQ2heEa0damHu49sET7I0XEPaY16NTB7MreY/8XOQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFD/JtzpfOQJBzMW20ytLWWkZ5Et0MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUDhtM09sODVBa0hNeGJiVEswdFphUm5rUzNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU9tiAwQA
V3jBAwQAV3k/MA0GCSqGSIb3DQEBCwUAA4IBAQAKpQQ7P86f9qalXVVbNBkAlcvQ
+OSzJjnTQFALlg0fAyO3PXe8IJSmQOOnlp0aTaMlUOkTm3WP+FGFPW4HtfJ9mcyz
7xmdULjgmqfYmxHjFbqUzVapKDO+yIv7ezr+CdfQssFZj85A+DLeAeryqKunROU6
8+DrULhMp5nl+j4ffyv2uP7alD1nWi9RygnBazFdJHnHY2GsVR5fyMtiLQ9c3rFW
B8wbR9AQYCxdsVhbixYNkEUq/yvjMmaVwNd23khr5mLyLAKLDvb+XPwohpRZPhp7
cdCRfVo6jtgVGxJ7SuCS6q4aExkIzjDNL9lVCMpl1G+HjWKK8aqCLkw5/nCC
-----END CERTIFICATE-----
Generated at Wed Aug 5 16:26:24 2026 by rpki-client