Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1c-iCJYS7Xc9UHo0bP07QthtMzE.roa
File: 1c-iCJYS7Xc9UHo0bP07QthtMzE.roa (raw, json)
Hash identifier: hKOMBheKrzHYQdceQpJVlWY3o15eUdk0UF0Jynbx0AY=
Subject key identifier: D5:CF:A2:08:96:12:ED:77:3D:50:7A:34:6C:FD:3B:42:D8:6D:33:31
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D66DC61CDB66CFCA1F7BC0C11259BCAEA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1c-iCJYS7Xc9UHo0bP07QthtMzE.roa
Signing time: Tue 07 Apr 2026 07:33:32 +0000
ROA not before: Tue 07 Apr 2026 07:33:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 82.153.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 20:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:dc:61:cd:b6:6c:fc:a1:f7:bc:0c:11:25:9b:ca:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 7 07:33:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5cfa2089612ed773d507a346cfd3b42d86d3331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:7b:a9:7d:fa:5d:8a:50:11:64:dc:39:2f:
82:e3:31:8f:fc:33:b3:b5:6e:47:1b:84:99:4d:ed:
7e:53:45:d9:d4:63:5a:ea:a9:66:75:1a:aa:62:54:
b4:2e:9e:ea:18:8c:6b:bf:82:be:42:9a:fb:cd:22:
bd:29:5c:50:61:ae:44:09:5f:18:04:25:03:b7:ab:
de:24:c3:79:b5:c0:d4:2c:3a:52:b5:1c:84:ca:3b:
a8:4b:16:54:48:54:d7:cc:a2:22:ac:3b:b4:0a:f1:
46:7a:da:ab:28:74:f7:03:0e:91:03:42:b9:f7:96:
24:93:55:5a:82:40:df:40:96:bf:b0:6d:89:b6:5a:
1c:e1:f7:8c:f5:44:73:1a:9c:18:55:db:9a:e4:4c:
09:41:27:ed:40:d0:ba:3f:45:e5:52:14:94:c7:aa:
a4:6f:e5:00:c7:2d:a8:6a:5f:69:46:e1:f6:4a:8d:
9a:dd:42:76:c9:bd:b5:e0:c5:fe:85:c3:df:54:0b:
e3:ae:10:94:c3:7e:ab:c4:dc:ba:8b:94:dd:84:79:
55:e9:53:2e:8b:b6:43:b9:21:cc:d0:a3:2b:6a:65:
71:3a:8f:0d:d4:ce:c7:1a:38:8b:9d:7b:67:f8:0c:
4f:6b:c6:42:7c:c6:c9:75:82:94:dd:35:02:e9:0b:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CF:A2:08:96:12:ED:77:3D:50:7A:34:6C:FD:3B:42:D8:6D:33:31
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1c-iCJYS7Xc9UHo0bP07QthtMzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.216.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:07:20:c2:35:1f:d9:b0:11:7a:9e:fb:a4:94:eb:6b:32:fd:
61:40:d5:65:14:db:05:74:3e:b6:87:dc:1f:50:4b:51:cb:1b:
5c:81:f0:d3:5e:96:f1:8a:72:cd:69:bb:46:11:bb:9e:b4:66:
f6:5f:51:5e:cd:91:9b:4d:d5:f3:d2:43:cb:29:b7:55:e4:a9:
53:92:70:e5:b8:f1:b9:75:69:69:d0:39:cb:10:bc:45:14:9b:
33:86:d6:b5:1e:a3:b6:37:b5:48:eb:55:a2:c0:53:a6:57:2c:
a9:89:61:20:c0:e6:53:86:f0:96:29:b2:5d:09:6e:87:92:98:
15:ce:cd:67:cf:3d:56:b8:cb:a5:d8:12:a1:76:cf:fd:ae:ef:
6e:be:a6:d4:be:4f:a2:cc:3d:dd:ea:35:94:c8:12:77:64:22:
68:fd:26:00:4a:1d:2d:40:29:fb:d2:56:7e:9f:10:ca:81:00:
bd:53:0a:65:74:1b:8d:e5:cd:61:55:7f:ae:43:5f:77:2b:b1:
2f:63:10:94:0f:3b:c1:fd:82:8d:72:85:83:7d:02:e0:c5:be:
42:11:7f:69:b7:e3:25:8f:57:07:9c:d7:76:40:72:39:fc:0c:
3b:86:11:60:b3:73:71:6c:e7:db:ab:88:c5:9a:89:46:2d:36:
c5:63:14:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 05:18:54 2026 by rpki-client