Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0tLdiaWu8s33uwdvjti4usLhh98.roa
File: 0tLdiaWu8s33uwdvjti4usLhh98.roa (raw, json)
Hash identifier: V+G3m+fMhfWcE4M7ui0umFKYdQuyQwvWZWxO8D3lQHc=
Subject key identifier: D2:D2:DD:89:A5:AE:F2:CD:F7:BB:07:6F:8E:D8:B8:BA:C2:E1:87:DF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EA6E3E3E0196BA3B7B9A409DCB5543713
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0tLdiaWu8s33uwdvjti4usLhh98.roa
Signing time: Mon 08 Jun 2026 11:00:13 +0000
ROA not before: Mon 08 Jun 2026 11:00:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197246
IP address blocks: 81.168.125.0/24 maxlen: 24
82.153.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 19:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:e3:e3:e0:19:6b:a3:b7:b9:a4:09:dc:b5:54:37:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 8 11:00:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2d2dd89a5aef2cdf7bb076f8ed8b8bac2e187df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:52:3f:47:30:e5:78:95:89:b9:a5:a4:4f:
08:f9:f6:31:7c:07:13:8b:1a:c7:b2:ff:a5:06:b5:
5b:57:06:73:b3:d0:c3:12:f6:d5:de:ce:b5:9b:40:
42:f8:cd:e3:84:f5:c5:5e:9f:b8:a5:c3:15:ce:a2:
de:f6:c6:6b:1f:54:4c:5e:51:9a:e2:91:04:e0:89:
30:ec:9a:f9:62:32:58:b4:1d:84:61:d7:31:b2:ca:
06:59:bf:16:b5:03:27:4e:5e:74:2b:61:d4:22:16:
4d:af:3d:0d:b5:8f:59:a2:d7:49:87:29:f1:a5:85:
fa:94:40:df:c1:b6:c3:e8:e9:0e:14:b8:78:b4:db:
67:77:e7:ce:c1:93:cb:e5:42:74:e2:aa:b3:c7:6e:
49:e1:f7:6b:9e:7f:85:0b:88:66:bb:ea:3d:56:b6:
36:a4:31:97:09:90:2c:03:94:a3:17:a8:5f:95:0c:
d1:3d:f1:36:ba:50:3a:e2:62:7f:2e:5a:67:21:7a:
9d:39:38:7e:c3:14:ce:aa:a7:9b:99:9c:a8:56:c6:
af:b1:80:bf:12:de:f2:b2:8a:85:37:9c:87:9f:61:
6b:12:c8:f2:f7:13:27:f7:fa:59:55:3a:58:d5:5e:
9d:e2:7c:4f:3e:7c:aa:71:37:de:5d:4b:bc:f8:83:
18:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D2:DD:89:A5:AE:F2:CD:F7:BB:07:6F:8E:D8:B8:BA:C2:E1:87:DF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0tLdiaWu8s33uwdvjti4usLhh98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.125.0/24
82.153.49.0/24
Signature Algorithm: sha256WithRSAEncryption
57:56:b0:78:29:be:e0:0e:43:ef:17:87:0a:2d:e4:06:57:b2:
c5:a2:e2:4f:d7:a9:47:95:2e:33:ce:51:14:c1:40:3b:ab:8b:
57:49:b1:16:26:ca:4c:83:b2:0a:1e:9e:1f:65:dd:c5:84:71:
b0:fb:7d:49:0d:37:82:4a:f1:3f:c9:3e:98:3c:d4:26:1b:f6:
9d:37:77:93:4e:46:c0:20:61:b1:dd:41:ac:4d:fa:98:ef:f8:
14:e5:e9:a8:7a:d1:9e:30:7a:2a:8c:67:7f:73:4a:56:0e:50:
eb:97:95:d2:ab:df:82:d7:fa:ad:61:a7:fb:0d:1f:e6:f7:16:
17:a3:37:a5:c0:4e:dd:38:3d:0f:f3:3c:2e:2b:b1:c9:c1:f2:
5a:04:be:81:54:c7:58:bd:f6:0a:62:4b:c2:46:62:8b:87:a1:
5c:16:79:b2:28:0b:eb:9b:63:69:d5:aa:77:aa:e8:a3:b2:d0:
32:f8:ac:47:c7:40:80:f9:66:2d:16:1a:db:78:9f:5d:67:29:
87:82:ac:6e:a1:6a:2c:a6:61:1f:22:74:db:40:c0:cf:7d:14:
25:c9:62:54:86:3b:42:19:73:26:95:11:8d:49:1a:79:6b:a4:
86:7e:48:01:e8:f8:0c:0e:59:3c:43:fe:53:79:90:1a:03:03:
fa:31:1a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 03:17:51 2026 by rpki-client