Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2Em7BQhi-SCflcR8WzrFgaXqLOE.roa
File: 2Em7BQhi-SCflcR8WzrFgaXqLOE.roa (raw, json)
Hash identifier: AtaK8UiNtpFE79/0kgBzSXhBeIOzi85ltKqsCMd71OQ=
Subject key identifier: D8:49:BB:05:08:62:F9:20:9F:95:C4:7C:5B:3A:C5:81:A5:EA:2C:E1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E4B35CC444787A6D818CC0F0609CD79AA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2Em7BQhi-SCflcR8WzrFgaXqLOE.roa
Signing time: Thu 21 May 2026 15:44:37 +0000
ROA not before: Thu 21 May 2026 15:44:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215659
IP address blocks: 82.153.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:35:cc:44:47:87:a6:d8:18:cc:0f:06:09:cd:79:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 21 15:44:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d849bb050862f9209f95c47c5b3ac581a5ea2ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:c6:d5:91:5b:06:97:32:13:3b:00:aa:d5:
03:d9:da:70:60:a4:79:49:dd:19:cf:ee:21:fe:e8:
6a:2d:1b:c5:99:55:50:f9:21:98:6a:1e:85:93:f6:
5f:46:ca:12:e0:82:06:88:bf:00:a3:e6:79:ac:f5:
ac:c1:40:72:9e:b9:f5:60:7e:df:37:7e:7d:f8:03:
75:ef:c1:54:dd:75:c0:9a:ce:d5:47:b6:ea:f1:47:
ae:42:04:4a:30:b7:65:b3:96:9c:35:fc:50:cd:88:
2c:b1:d3:9c:3c:e9:48:2c:78:e3:f4:24:11:50:14:
bf:4f:ea:1e:45:7d:69:4f:e9:bb:3d:0c:28:39:76:
6b:3d:bb:7f:62:b9:d9:ea:74:3c:41:e1:7e:6c:39:
6b:81:4b:13:11:1a:d1:14:48:81:e1:12:0b:74:c7:
29:e6:cd:68:92:ec:1d:23:b9:a1:70:08:b5:36:46:
3b:46:38:6d:b9:6c:01:4b:1c:ad:11:fa:75:a8:2d:
85:a2:f4:7f:66:ca:8c:56:d0:fe:26:f1:a6:68:73:
44:5c:62:2f:88:ac:fd:e1:ee:55:91:fa:c5:06:15:
e9:66:ba:f3:f8:73:fb:c3:9d:5e:c5:b4:90:ed:83:
aa:a1:29:50:2c:d8:84:81:5c:68:11:31:7b:af:68:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:49:BB:05:08:62:F9:20:9F:95:C4:7C:5B:3A:C5:81:A5:EA:2C:E1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2Em7BQhi-SCflcR8WzrFgaXqLOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.138.0/24
Signature Algorithm: sha256WithRSAEncryption
85:4e:8c:f1:7a:11:cd:d8:2d:01:81:11:a7:4b:e2:8e:d0:1d:
08:93:5a:89:46:c0:af:f9:1c:43:b7:26:f1:6c:c5:6b:2c:22:
8d:1b:42:42:eb:97:d4:97:64:a7:ce:1f:a9:b3:2d:d2:b2:a8:
f4:fd:ee:74:ec:c7:fb:fb:3c:26:d6:a3:24:96:e3:95:e3:db:
42:54:53:e3:c2:b6:bf:93:77:d1:ab:e2:21:1a:9d:66:03:eb:
50:ff:7d:1c:f3:30:ff:24:d5:6d:61:a6:04:5e:bb:64:65:3f:
de:93:53:48:7a:74:5a:d2:37:b0:9f:b8:7f:41:6d:13:c7:ea:
55:1c:b6:90:6d:e4:80:84:a2:b2:4b:7b:15:f5:14:f6:f9:fe:
85:b9:6f:b8:6f:61:5f:92:45:9c:a0:21:f7:d7:0b:fd:8b:fb:
ec:9f:68:4c:70:9f:ac:98:e6:34:27:40:b6:42:cc:94:5b:d5:
4c:77:ad:16:9b:08:a2:8a:3d:b9:a7:52:12:42:b1:25:92:e2:
0a:84:79:22:aa:7d:a1:9d:ca:0a:0d:f8:2a:54:50:d3:d3:61:
66:52:5e:ef:cf:34:e9:cd:76:5c:d0:38:31:80:f6:c2:ed:ce:
56:2c:7d:30:72:ba:74:0f:3e:9f:c4:df:53:44:63:e5:69:85:
99:d7:65:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:36:55 2026 by rpki-client