Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-bwkSpJ87RSLCbCTpmHW1yDcd2Y.roa
File: 1-bwkSpJ87RSLCbCTpmHW1yDcd2Y.roa (raw, json)
Hash identifier: PE780TaXRvNRzTXhEPzUyMdfNTMFE1f2UIt5WfcbmMQ=
Subject key identifier: F9:BC:24:4A:92:7C:ED:14:8B:09:B0:93:A6:61:D6:D7:20:DC:77:66
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DB50D673CE5A27277BA52FAFE40275261
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-bwkSpJ87RSLCbCTpmHW1yDcd2Y.roa
Signing time: Wed 22 Apr 2026 11:57:27 +0000
ROA not before: Wed 22 Apr 2026 11:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 82.152.136.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 15:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:0d:67:3c:e5:a2:72:77:ba:52:fa:fe:40:27:52:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 22 11:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9bc244a927ced148b09b093a661d6d720dc7766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:24:17:7f:e0:fa:84:dc:25:3d:d8:7f:0a:
c5:2d:b6:ac:3c:00:81:f7:2b:99:bc:47:8e:90:68:
da:b8:1e:be:95:2f:73:9a:26:2e:62:0f:b0:d9:c0:
31:08:21:76:36:31:8f:91:05:69:32:c4:3e:0e:76:
66:0f:1f:27:12:12:36:12:8e:8b:c0:74:b5:76:47:
30:87:b9:06:5c:65:a6:80:a5:69:95:96:50:6c:6b:
07:be:4a:3c:3f:4e:1b:f5:23:4b:d3:1a:1e:63:92:
9e:17:43:4f:ff:e5:03:d5:54:b5:ce:44:05:38:26:
cb:44:1f:74:b9:b2:3e:3e:f2:64:26:54:13:95:26:
57:be:21:68:5f:ff:ff:fe:5f:66:b2:a9:5d:f5:da:
ad:01:1f:be:c6:4f:a2:4b:10:33:7a:09:ef:30:38:
71:fa:f0:ba:90:a2:59:0e:54:b7:8e:ff:2b:46:4d:
6d:1a:0a:c2:77:57:5d:52:7b:b7:08:05:00:09:28:
0b:0a:a7:59:a5:38:12:64:aa:b9:bd:4f:1e:35:90:
f7:5b:6b:33:78:18:bb:e6:31:a3:d2:2a:04:c2:2d:
8d:e0:b9:1e:d3:07:ce:f3:5a:d1:ed:00:4c:2e:a8:
0f:05:28:27:6f:5b:ef:a7:0e:54:9d:0c:2d:fd:ad:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BC:24:4A:92:7C:ED:14:8B:09:B0:93:A6:61:D6:D7:20:DC:77:66
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-bwkSpJ87RSLCbCTpmHW1yDcd2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.136.0/24
109.176.208.0/24
Signature Algorithm: sha256WithRSAEncryption
28:2d:3e:55:50:7d:89:8a:d6:1a:e6:1d:29:2d:bb:65:ca:da:
c1:e1:fd:ac:c2:5c:4a:0a:52:aa:ce:e9:76:fc:9d:9f:10:36:
63:08:02:72:f1:ee:92:fa:fd:43:b3:d4:b4:81:fd:ab:fc:e4:
c8:bd:60:4f:8b:77:51:4a:77:6e:52:19:ab:27:7b:f9:fd:14:
39:eb:14:91:90:ee:0e:3c:ce:53:38:fe:7c:b7:89:44:c7:71:
75:a7:45:de:56:ca:70:fc:4b:4f:72:22:a4:bd:1d:c6:48:2b:
74:13:f9:43:b9:55:18:4a:e7:85:8b:4b:44:a1:c2:82:1e:db:
10:e6:0b:25:6b:b4:f2:6f:e5:85:59:53:bc:47:78:2c:0f:4c:
b5:61:c5:43:46:23:83:88:c7:3d:a2:31:4c:34:9d:fd:b6:7b:
70:c2:08:f3:6a:1b:1d:0a:ad:f9:d0:8e:26:8e:c9:0a:8d:5d:
6d:bf:a8:8b:4a:ee:b5:ed:f6:1b:87:42:20:a3:e6:d0:e9:8b:
62:0d:fc:2c:71:0c:03:60:38:d9:b3:ae:6c:54:94:aa:09:29:
df:1a:9b:6f:ef:f2:ac:2d:c0:27:93:84:0b:11:b2:34:2a:cf:
56:e7:68:20:8a:dd:cb:22:c1:8f:7e:9e:c6:ea:01:38:d2:04:
13:0f:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 23:16:09 2026 by rpki-client