Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/P5SpSzISPTMC4rZKJjEU00CkHP4.roa
File: P5SpSzISPTMC4rZKJjEU00CkHP4.roa (raw, json)
Hash identifier: LlCWSrXEHqOmjnXfbfZE21La8jTZpltwAFwz+WcKlH8=
Subject key identifier: 3F:94:A9:4B:32:12:3D:33:02:E2:B6:4A:26:31:14:D3:40:A4:1C:FE
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 019DD8DBFE16B6161D53139F1F07F0B93261
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/P5SpSzISPTMC4rZKJjEU00CkHP4.roa
Signing time: Wed 29 Apr 2026 10:49:49 +0000
ROA not before: Wed 29 Apr 2026 10:49:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44578
IP address blocks: 90.156.220.0/23 maxlen: 23
185.209.49.0/24 maxlen: 24
188.244.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:db:fe:16:b6:16:1d:53:13:9f:1f:07:f0:b9:32:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Apr 29 10:49:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f94a94b32123d3302e2b64a263114d340a41cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:b0:34:05:47:ec:34:01:d8:7a:8e:e1:64:
a9:1c:9a:c5:fb:aa:1d:7a:cc:ea:37:52:47:a8:47:
4a:02:fd:b5:40:b9:a7:9e:85:d8:c1:33:88:24:8c:
7f:fb:b8:d6:f2:90:0b:a9:08:f9:ec:ce:79:23:58:
bb:cb:f8:34:54:1c:d4:50:c3:04:60:e8:be:96:60:
2a:e5:1d:db:8c:b2:36:6b:c9:d5:d2:e9:a6:3b:cc:
39:86:67:6e:c6:65:d3:a4:8d:cf:16:83:3b:05:3f:
97:27:83:d2:06:e6:c0:55:ac:1a:11:a9:b3:06:c0:
36:13:70:a0:9c:09:4a:12:b6:65:a1:99:d0:b5:da:
6c:30:72:41:62:a0:85:22:86:a9:90:93:5d:ce:9a:
78:d3:90:c4:e9:7f:f8:86:bf:76:55:f0:59:c4:5b:
04:32:53:50:48:bd:ec:6d:fd:26:9c:20:6e:0b:a3:
47:7b:7a:10:61:17:5a:f4:d7:84:77:fa:20:71:0e:
cf:ef:3c:ef:b2:fc:28:a6:d3:76:db:31:4f:a8:f6:
cd:18:68:78:64:96:db:98:c0:81:52:ec:d3:50:4a:
e6:37:45:21:8d:4e:ae:1f:d3:7b:0c:a8:bf:e6:60:
7f:dd:93:a3:94:42:8c:cf:d8:93:72:74:da:83:eb:
71:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:94:A9:4B:32:12:3D:33:02:E2:B6:4A:26:31:14:D3:40:A4:1C:FE
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/P5SpSzISPTMC4rZKJjEU00CkHP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.220.0/23
185.209.49.0/24
188.244.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ff:55:15:45:5b:42:4b:fc:0f:bf:f0:20:a5:06:bd:03:18:
2b:c4:10:77:50:08:6c:b1:ea:12:d3:5c:af:23:47:36:c1:39:
a0:42:65:b5:e3:29:8e:10:f1:4a:b2:e4:2e:f2:45:70:65:64:
fa:09:27:9c:6f:81:08:c2:7e:54:7c:bd:26:24:57:4b:52:de:
3b:fd:b7:24:dd:fc:37:df:48:0e:db:e8:e5:29:1a:c1:1e:d7:
70:85:4a:cf:20:46:d7:37:7e:12:2e:ac:9a:13:7e:d9:4d:23:
98:13:62:ff:7f:50:a8:2e:62:5e:ea:5f:26:2d:3a:5c:e0:e0:
3c:e5:8e:13:92:a2:2d:7a:f0:55:23:cd:44:49:68:92:9d:7e:
3e:52:34:14:fe:64:fa:6d:a0:71:53:d1:4f:cd:86:a9:5b:1c:
53:e4:5b:31:10:28:e3:08:ad:e1:b0:91:98:a0:5a:0c:22:bf:
0d:47:06:7a:6f:7a:f9:63:95:9a:c0:5e:ce:dd:5f:50:2e:af:
9c:16:6f:43:df:e5:3a:08:e4:58:f2:b9:b7:8b:be:15:34:03:
b1:1f:01:3b:a3:b1:ad:79:3c:aa:63:65:06:4c:e7:8a:b9:f0:
78:4d:a4:1e:46:9b:1d:c9:45:c6:17:96:01:26:50:69:da:10:
01:1a:3e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:46:19 2026 by rpki-client