Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8jYtqFDOlCK8OVhEblkGpp9cEhM.roa
File: 8jYtqFDOlCK8OVhEblkGpp9cEhM.roa (raw, json)
Hash identifier: Q5NxVq9rmT82NFJKD+XSK40c6SzJ9U3dEHrxJiUQA+4=
Subject key identifier: F2:36:2D:A8:50:CE:94:22:BC:39:58:44:6E:59:06:A6:9F:5C:12:13
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DE2BF7336E6BA27AB3F3CFF29F0176917
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8jYtqFDOlCK8OVhEblkGpp9cEhM.roa
Signing time: Fri 01 May 2026 08:54:50 +0000
ROA not before: Fri 01 May 2026 08:54:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 82.152.114.0/24 maxlen: 24
82.152.143.0/24 maxlen: 24
82.152.186.0/24 maxlen: 24
82.153.114.0/24 maxlen: 24
82.153.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:bf:73:36:e6:ba:27:ab:3f:3c:ff:29:f0:17:69:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 1 08:54:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2362da850ce9422bc3958446e5906a69f5c1213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:d4:54:81:08:99:c9:37:b5:b3:e4:37:c9:
6d:b6:d2:7a:d7:5e:0e:7a:94:b5:3b:37:94:03:49:
fe:3c:b4:fc:1f:db:f9:e5:1f:2a:10:0a:c2:cb:08:
59:29:33:59:21:3b:9b:e5:6d:05:b6:ff:25:07:7c:
00:6d:29:d1:e6:ad:87:a9:05:22:05:48:8a:8c:6a:
c3:83:ec:45:be:d6:d4:59:99:83:6e:fd:f4:bd:52:
75:e9:7f:41:b8:df:71:44:d1:eb:64:3e:c4:78:8d:
fd:68:f9:ee:97:ff:c8:6c:e4:27:dd:c5:d2:25:01:
f5:e2:9f:eb:56:d7:94:5a:1f:92:b0:76:5b:a1:0e:
1d:71:5d:4f:7e:71:85:76:e1:e9:40:8b:0d:3f:4e:
b4:d6:8e:70:1f:e4:b1:b0:b4:3e:4f:7c:c3:bf:23:
d7:d8:ff:4d:2f:10:51:e1:30:b1:30:9c:6a:2f:93:
9c:3f:e8:84:d4:ab:38:f6:e8:d9:04:64:98:35:e9:
d3:04:43:0e:c3:c0:55:d0:2d:a7:ef:4a:e8:5e:e6:
65:7a:81:ad:87:b0:08:40:c2:9e:02:49:7c:6d:7b:
d9:8a:89:95:f4:52:b0:c2:49:09:71:b6:32:9b:6d:
fa:ad:e6:b3:3f:f9:4a:3d:41:b7:57:37:1c:56:4a:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:36:2D:A8:50:CE:94:22:BC:39:58:44:6E:59:06:A6:9F:5C:12:13
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8jYtqFDOlCK8OVhEblkGpp9cEhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.114.0/24
82.152.143.0/24
82.152.186.0/24
82.153.114.0/24
82.153.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:cd:72:ff:ca:d8:aa:b9:02:63:35:ce:1a:8b:a8:2b:b8:30:
1f:1b:b4:68:ba:1d:7b:ec:88:e4:a3:b7:26:a9:81:b6:28:07:
cf:4a:cd:52:4f:51:8a:d2:ba:18:5c:25:0b:94:ab:de:57:83:
c4:6d:8d:f3:7b:3a:50:e8:33:59:0b:8b:f8:ea:ef:6f:98:a2:
64:44:44:06:d5:52:7e:42:a8:1d:5f:f4:39:10:1e:fc:77:6c:
65:d9:34:de:4a:ab:dd:4d:f5:ec:3d:16:11:24:9f:d8:89:9d:
80:8f:e9:05:e1:f8:fd:95:10:d9:1b:9d:ca:2c:60:74:0b:68:
f2:97:63:b3:c8:23:26:0b:4e:64:f1:73:04:e1:a7:d6:71:ac:
24:81:8d:e6:d0:17:5d:74:1f:c6:d1:71:7b:87:f5:b9:e1:67:
c1:47:4b:a6:fa:57:a4:0a:fa:af:a9:3b:05:12:a9:2f:54:a6:
34:83:d0:85:9e:64:ad:48:47:15:18:d1:53:c0:b7:32:4d:0d:
78:f1:c1:07:81:af:c8:ec:29:89:3d:f3:94:39:28:83:a7:4d:
f7:c5:90:c2:5e:e6:be:2a:51:3b:3b:2e:32:4e:c7:45:1f:52:
90:9b:f0:a5:23:d3:2d:c9:21:58:f6:b3:d7:ce:6c:b0:db:6c:
79:83:7b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:15:50 2026 by rpki-client