Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0-qTTxfRGUiKWAsC8HyB-2GgUBE.roa
File: 0-qTTxfRGUiKWAsC8HyB-2GgUBE.roa (raw, json)
Hash identifier: xh7xojrlB3I/JiOGwvrcendolP3wEDkLzQaaXOjYzqY=
Subject key identifier: D3:EA:93:4F:17:D1:19:48:8A:58:0B:02:F0:7C:81:FB:61:A0:50:11
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01990EA45FBC7B6ADDE3A72B7FB7B0513678
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0-qTTxfRGUiKWAsC8HyB-2GgUBE.roa
Signing time: Wed 03 Sep 2025 08:14:37 +0000
ROA not before: Wed 03 Sep 2025 08:14:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 79.99.150.0/23 maxlen: 24
82.152.55.0/24 maxlen: 24
82.153.145.0/24 maxlen: 24
82.163.0.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.226.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:a4:5f:bc:7b:6a:dd:e3:a7:2b:7f:b7:b0:51:36:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 3 08:14:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3ea934f17d119488a580b02f07c81fb61a05011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cb:59:e2:31:99:68:fa:9a:1f:be:25:ff:db:
b2:64:0f:74:6b:31:83:43:e8:2e:7f:86:25:66:05:
f5:3d:e2:d3:7b:55:65:96:41:76:6e:a9:a2:29:0a:
d8:da:68:3b:6a:6d:e1:91:7b:c8:45:7a:38:87:cf:
cb:30:39:ef:e8:82:f7:ab:a6:6d:82:dc:63:ab:51:
a2:29:a4:92:af:09:cc:5e:16:44:f8:1e:8b:67:9f:
66:2f:ca:e3:69:62:d5:61:aa:dd:fc:7d:69:dc:2a:
35:61:6e:1b:09:3b:b5:37:20:c0:52:37:3b:71:89:
e2:46:15:6b:8f:6f:f9:c5:4f:5c:da:ed:91:3f:8c:
a2:2a:42:e0:80:0d:0b:52:0b:37:b4:7f:6a:f3:b5:
92:f7:b5:ff:be:a7:63:85:bd:23:d1:06:aa:8e:6d:
c5:5d:38:a1:ba:09:35:a9:a9:08:bd:f4:9c:f0:2c:
07:2d:7f:b8:83:0c:2d:53:39:36:f7:1e:de:9a:5f:
a6:58:33:2e:0d:9f:28:db:64:16:7e:66:2e:56:d1:
0b:01:a3:3e:76:7e:38:6e:b1:44:e0:c0:61:aa:1e:
e3:af:23:04:22:d9:93:00:8a:3f:15:ce:b0:6b:15:
01:dc:15:0f:ce:ed:f0:e2:8b:2f:e9:63:94:c9:99:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EA:93:4F:17:D1:19:48:8A:58:0B:02:F0:7C:81:FB:61:A0:50:11
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0-qTTxfRGUiKWAsC8HyB-2GgUBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.150.0/23
82.152.55.0/24
82.153.145.0/24
82.163.0.0/24
82.163.10.0/23
89.213.151.0/24
89.213.226.0/24
109.176.30.0/24
109.176.208.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0f:b0:c4:44:bc:da:c7:43:1c:46:60:7d:f1:a1:fb:9e:5b:
d6:44:af:64:d7:fb:05:6e:f7:e7:20:20:9e:65:60:bf:ad:2a:
69:43:fb:94:80:65:58:3e:d3:59:44:77:e0:29:5f:51:16:d1:
9c:06:b3:56:ee:d2:d1:68:0c:9f:fd:a9:ae:8e:ce:b0:1b:9b:
51:1f:2c:48:86:1f:24:18:eb:19:94:ef:1c:58:36:17:d9:f6:
91:63:24:52:01:6f:f3:2f:b7:23:6e:63:02:b8:21:4e:fd:05:
84:d1:4b:09:74:1c:6c:f1:7f:de:78:ed:3b:66:95:43:5a:d6:
de:82:33:93:d2:f4:bf:14:dd:14:9a:62:2a:17:c7:64:df:40:
5e:76:ca:a2:8b:97:7f:d7:97:b2:67:97:fd:d6:80:72:a0:2b:
3c:f1:9d:c9:30:05:48:91:cf:3f:91:29:74:60:b6:d4:96:4c:
d2:3b:98:fb:73:2c:56:ef:44:1a:cb:38:f9:8c:9f:3a:52:e7:
32:bb:df:dd:00:2f:f6:43:a6:03:23:f3:91:6c:37:e1:ac:13:
81:a3:e3:79:cc:e7:43:ca:c7:87:73:d4:60:26:c0:05:50:4e:
fc:f7:66:f4:94:16:af:8b:70:a7:d9:06:c8:d9:62:44:7f:6e:
6b:4e:3a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:56:36 2025 by rpki-client