Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0wO0R6s4Q-JUd2zd-TbWKTAuoN4.roa
File: 0wO0R6s4Q-JUd2zd-TbWKTAuoN4.roa (raw, json)
Hash identifier: Iu165pHX6VpfQZ9e5l3f+CTZxUI7nNIsLJhYdiSqujI=
Subject key identifier: D3:03:B4:47:AB:38:43:E2:54:77:6C:DD:F9:36:D6:29:30:2E:A0:DE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E633E2A7445FE5674CAC74544C8977A81
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0wO0R6s4Q-JUd2zd-TbWKTAuoN4.roa
Signing time: Tue 26 May 2026 07:44:38 +0000
ROA not before: Tue 26 May 2026 07:44:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214962
IP address blocks: 109.176.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:3e:2a:74:45:fe:56:74:ca:c7:45:44:c8:97:7a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 26 07:44:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d303b447ab3843e254776cddf936d629302ea0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:a2:74:4d:32:c3:33:11:66:f0:13:ad:c7:
d1:ed:d7:14:98:03:7a:bd:80:8f:7a:9b:5c:71:8c:
6d:8c:ce:02:48:2e:31:ab:a8:22:33:d1:e9:a5:96:
d4:11:8d:ab:83:03:c5:24:94:d0:a6:1a:51:b6:fd:
3c:b6:6e:8b:f9:f8:18:79:5d:c7:de:53:50:00:1a:
96:24:b2:ad:e4:7d:e4:40:cd:d6:61:f8:a5:5a:ef:
20:c3:76:b2:57:7d:5a:1d:8b:4b:88:61:95:db:a7:
6a:92:21:70:eb:12:77:8d:46:5c:98:15:7f:71:f7:
3b:81:0a:c2:b7:57:b8:cf:2f:ac:eb:e0:0b:52:a7:
a0:09:17:4a:bf:62:a2:5f:12:45:46:eb:0b:49:6c:
28:7e:95:7c:ba:57:0f:29:38:59:9a:af:00:b8:8f:
79:cc:cb:f7:24:8a:c5:10:31:53:4b:7f:7e:73:03:
08:e8:0f:50:47:6a:23:1c:b4:15:2d:2d:06:fa:43:
e9:aa:00:99:84:9d:89:80:46:9d:1e:d7:43:38:cf:
8d:3f:7e:00:37:59:10:13:e8:81:bc:8d:56:fb:f4:
2a:97:26:45:9b:cc:c8:cd:4f:0a:9b:8e:05:7e:ad:
5b:6b:14:05:f1:30:ec:24:47:91:8b:7b:2b:62:fd:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:03:B4:47:AB:38:43:E2:54:77:6C:DD:F9:36:D6:29:30:2E:A0:DE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0wO0R6s4Q-JUd2zd-TbWKTAuoN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.83.0/24
Signature Algorithm: sha256WithRSAEncryption
83:49:22:f5:3f:e5:ee:7b:f4:9d:f9:7e:16:3a:cf:4a:42:c0:
f3:9a:34:b9:10:ed:d7:73:08:30:15:ac:43:77:60:5e:81:83:
09:54:33:cd:5d:22:63:27:ea:b0:12:4a:d0:36:ae:9f:f9:7d:
7c:a0:94:1c:dd:08:a3:2c:a5:9f:33:64:73:4d:89:ae:08:87:
7c:95:97:44:ca:a3:7a:d8:73:ea:1a:69:ff:b8:1f:28:66:cb:
14:71:d4:51:cc:b4:ad:58:2c:f8:8e:13:a2:5b:62:67:aa:b1:
ba:87:cb:7b:ff:18:ac:fc:72:b1:b3:83:b8:57:a0:20:df:4f:
63:13:c0:fe:9e:cb:1e:2f:56:c2:00:9b:ad:27:f2:e8:31:18:
e9:f4:d1:46:79:b1:f5:7c:ec:84:0f:a1:da:ed:ef:6c:ba:bb:
8b:53:2a:e0:ac:73:59:84:0d:19:ec:0b:05:1a:99:6a:39:af:
41:10:e8:30:11:67:ad:61:78:cd:bb:0f:d7:be:bb:b9:af:05:
56:47:0b:79:32:b7:2b:ae:03:64:69:5c:f6:2c:71:5a:0f:9e:
de:d3:b5:88:7d:4c:5e:7d:7e:2b:73:cc:8b:83:6c:a3:f0:87:
80:da:3a:5d:34:1f:8e:5c:0a:c0:33:63:2c:1b:f5:09:00:48:
40:2d:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 13:48:19 2026 by rpki-client