Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ABZTS0CS3IihuBtCoU8mu6BWfPo.roa
File: ABZTS0CS3IihuBtCoU8mu6BWfPo.roa (raw, json)
Hash identifier: wf+8e6lFthx0AoVecqpd7onUPcT5HBpK9fhYSGDd08w=
Subject key identifier: 00:16:53:4B:40:92:DC:88:A1:B8:1B:42:A1:4F:26:BB:A0:56:7C:FA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DB93801277B4E657332920B575515A727
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ABZTS0CS3IihuBtCoU8mu6BWfPo.roa
Signing time: Thu 23 Apr 2026 07:22:28 +0000
ROA not before: Thu 23 Apr 2026 07:22:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402306
IP address blocks: 37.98.149.0/24 maxlen: 24
82.152.63.0/24 maxlen: 24
82.153.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:38:01:27:7b:4e:65:73:32:92:0b:57:55:15:a7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 23 07:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0016534b4092dc88a1b81b42a14f26bba0567cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:6b:67:5d:97:20:be:2f:d3:9c:ac:30:f2:
04:e0:52:e7:6a:11:c4:b8:7f:78:5a:f3:45:e9:af:
fa:79:c4:37:ea:84:78:d7:2f:9d:71:c3:d0:aa:e0:
84:7c:6a:d1:07:6d:f0:45:5c:50:3e:3e:a0:a8:44:
63:d2:6e:19:c1:d9:09:c4:3b:40:93:a8:9d:bd:b7:
51:51:4d:85:94:ca:e6:7c:de:24:86:65:66:fe:45:
9f:5b:82:2c:35:2c:2f:94:81:74:4a:4a:dc:ee:79:
a7:3a:c3:a7:3c:f8:1f:64:f2:30:3c:1c:61:fe:1c:
dd:3e:e3:cc:e8:c2:ef:f7:67:4e:0d:5d:b2:44:7b:
36:d7:9c:2b:ee:99:8a:ac:84:97:94:20:fa:ce:73:
68:51:6c:a5:24:10:29:22:42:2e:ab:d9:da:75:ae:
ee:9a:06:5b:1b:48:99:dc:7c:fe:60:a0:b9:0d:ed:
9e:44:0c:dd:b0:82:17:5b:64:13:45:c0:90:46:33:
cf:ad:54:5c:54:2b:7f:c1:1a:26:67:63:3e:a7:80:
68:d8:9d:ba:21:bb:78:91:f2:cc:fe:b2:8c:56:65:
3c:53:dc:e3:5c:5b:ac:1f:80:5c:e5:db:72:ec:ed:
f2:fb:42:19:7c:7d:98:b8:16:71:f7:ba:79:0f:14:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:16:53:4B:40:92:DC:88:A1:B8:1B:42:A1:4F:26:BB:A0:56:7C:FA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ABZTS0CS3IihuBtCoU8mu6BWfPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.149.0/24
82.152.63.0/24
82.153.237.0/24
Signature Algorithm: sha256WithRSAEncryption
30:89:d6:8c:76:4d:36:91:d5:66:da:4a:c3:5f:10:07:2c:f8:
cd:1e:ff:54:8f:42:8c:ec:a9:6a:c2:4a:b2:d5:fe:1a:9c:07:
6e:75:93:a5:b4:81:2b:ee:5b:be:8a:14:b6:1a:3b:35:23:99:
eb:10:02:12:4f:8d:a6:94:14:a7:bf:c0:fa:9b:a6:76:ad:49:
4d:b0:84:ff:ff:4a:15:94:3f:64:f6:d4:da:db:ef:c1:65:16:
a7:d9:b8:35:32:ca:9b:91:4a:9f:29:6c:b1:1b:ce:4e:3b:ae:
82:a1:7c:46:6e:56:9f:7c:03:f0:ac:c1:93:bb:11:ca:f4:ff:
7a:b7:7e:37:ca:98:c6:33:ad:12:5e:47:8c:d7:6c:b8:1f:19:
bb:0b:ba:b0:f6:35:f4:5f:fd:06:ed:40:23:69:2a:9c:81:8b:
c6:c1:7b:0b:47:fe:3e:a7:90:38:51:bd:20:b0:c0:0f:30:1f:
84:7e:b1:71:44:57:2c:5e:64:3b:20:43:fb:92:cf:73:8d:78:
b7:8a:1d:26:bd:e4:7b:b5:e7:b0:f2:bf:39:23:08:81:db:54:
79:b0:3b:25:11:de:56:3a:0e:a1:6e:e7:dd:dd:00:d6:70:77:
a3:d1:04:75:12:ee:9f:8b:e2:74:65:bc:f9:87:ad:0b:b0:29:
4e:d0:b6:83
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ25OAEne05lczKSC1dVFacnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNDIzMDcyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDE2NTM0YjQwOTJkYzg4YTFiODFiNDJhMTRmMjZiYmEwNTY3Y2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R5rZ12XIL4v05ysMPIE4FLnahHE
uH94WvNF6a/6ecQ36oR41y+dccPQquCEfGrRB23wRVxQPj6gqERj0m4ZwdkJxDtA
k6idvbdRUU2FlMrmfN4khmVm/kWfW4IsNSwvlIF0Skrc7nmnOsOnPPgfZPIwPBxh
/hzdPuPM6MLv92dODV2yRHs215wr7pmKrISXlCD6znNoUWylJBApIkIuq9nada7u
mgZbG0iZ3Hz+YKC5De2eRAzdsIIXW2QTRcCQRjPPrVRcVCt/wRomZ2M+p4Bo2J26
Ibt4kfLM/rKMVmU8U9zjXFusH4Bc5dty7O3y+0IZfH2YuBZx97p5DxTB7QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAAWU0tAktyIobgbQqFPJrugVnz6MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvQUJaVFMwQ1MzSWlodUJ0Q29VOG11NkJXZlBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJWKVAwQA
Upg/AwQAUpntMA0GCSqGSIb3DQEBCwUAA4IBAQAwidaMdk02kdVm2krDXxAHLPjN
Hv9Uj0KM7Klqwkqy1f4anAdudZOltIEr7lu+ihS2Gjs1I5nrEAIST42mlBSnv8D6
m6Z2rUlNsIT//0oVlD9k9tTa2+/BZRan2bg1MsqbkUqfKWyxG85OO66CoXxGblaf
fAPwrMGTuxHK9P96t343ypjGM60SXkeM12y4Hxm7C7qw9jX0X/0G7UAjaSqcgYvG
wXsLR/4+p5A4Ub0gsMAPMB+EfrFxRFcsXmQ7IEP7ks9zjXi3ih0mveR7teew8r85
IwiB21R5sDslEd5WOg6hbufd3QDWcHej0QR1Eu6fi+J0Zbz5h60LsClO0LaD
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:15:52 2026 by rpki-client