Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AR-mUrO5E1rFpLPlGHR-9uuCRqk.roa
File: AR-mUrO5E1rFpLPlGHR-9uuCRqk.roa (raw, json)
Hash identifier: xXvIVJX6AD1igbnD3coRnvsaldUzgr76XmRvouqJaWQ=
Subject key identifier: 01:1F:A6:52:B3:B9:13:5A:C5:A4:B3:E5:18:74:7E:F6:EB:82:46:A9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DF762F45A6846BF6DFBFADA56DC4D9930
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AR-mUrO5E1rFpLPlGHR-9uuCRqk.roa
Signing time: Tue 05 May 2026 09:05:50 +0000
ROA not before: Tue 05 May 2026 09:05:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 81.168.80.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
109.176.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:62:f4:5a:68:46:bf:6d:fb:fa:da:56:dc:4d:99:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 5 09:05:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=011fa652b3b9135ac5a4b3e518747ef6eb8246a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5c:37:25:87:8d:a1:60:81:36:48:fa:90:ff:
91:38:4b:6a:39:38:44:68:26:fb:5c:f4:45:bb:3f:
9a:c6:4b:5d:a7:cf:69:91:7c:59:be:39:d9:cf:d6:
47:b8:1a:1f:40:6f:70:7c:2a:71:d5:48:bf:97:60:
69:ae:09:6d:e7:9c:04:76:ac:7c:7c:38:12:f4:eb:
40:b9:76:e2:ef:9d:3e:fd:7f:27:3a:a8:29:bb:2c:
a5:dd:11:b2:5d:b5:eb:8f:e3:ba:9a:2e:b9:e4:a5:
6c:b3:7b:62:3c:44:d0:fb:20:8c:e7:ee:76:cf:92:
02:78:d1:62:d2:e4:18:29:7c:b4:ec:81:0e:de:94:
7e:d4:38:55:e1:d8:13:93:1d:75:ff:b0:0f:db:ff:
65:cd:1e:e7:4b:77:ad:4a:cd:9f:53:7a:37:f9:a2:
26:c8:80:c9:6b:61:39:1a:88:d4:72:25:31:90:6f:
28:f4:b2:c2:2e:ef:3b:f7:1b:98:98:a0:ee:3d:ad:
2f:38:74:af:e5:f7:98:9c:a5:e4:3e:c7:6b:3e:11:
cb:ee:73:46:9e:3f:27:6e:54:65:50:7d:29:ab:0f:
c3:08:14:49:4d:a5:cb:74:68:1a:e2:20:4b:af:f5:
87:56:05:89:3f:65:aa:ce:b7:53:0d:78:01:d5:ee:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1F:A6:52:B3:B9:13:5A:C5:A4:B3:E5:18:74:7E:F6:EB:82:46:A9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AR-mUrO5E1rFpLPlGHR-9uuCRqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.80.0/24
82.152.251.0/24
109.176.18.0/24
Signature Algorithm: sha256WithRSAEncryption
49:9a:31:4e:18:5b:b5:05:0d:9d:bd:2e:e7:06:31:2a:ae:1c:
39:5c:95:3e:af:c1:d4:34:74:ed:36:96:06:90:22:3e:e8:dd:
51:0d:e2:1b:fd:91:19:3f:05:ec:f9:db:31:28:f3:99:c8:55:
de:a8:46:33:39:cf:48:32:1b:6f:32:fd:b8:f7:e6:11:f8:fc:
d1:a9:21:62:d3:f0:bb:c9:b1:20:79:d7:03:f2:e2:e2:cb:d0:
bf:38:7c:a9:57:05:cd:4e:d7:1c:81:97:02:72:8a:85:43:ce:
03:ef:2a:94:83:f9:45:c6:6f:b3:40:89:90:cf:54:ab:c4:9a:
f4:42:3a:dd:8b:46:a2:a7:5d:09:87:94:06:70:3f:d4:bb:eb:
d9:6c:cb:f9:75:0e:48:49:d0:74:da:5f:32:72:7c:ac:f6:22:
69:ce:4d:99:2f:53:e0:0e:a4:bf:71:d8:c5:ae:7a:3e:44:26:
a8:d4:2b:84:50:b9:b5:e4:44:fd:c2:2d:6a:89:d3:f9:3b:6d:
35:ed:b8:c9:eb:76:88:16:8a:8b:f1:71:ac:60:d3:42:00:90:
0e:39:38:a6:ba:9b:5c:da:57:4c:ad:ab:b3:a8:91:ae:ba:2c:
21:fb:33:84:52:d8:68:dc:6f:4d:ce:77:78:c6:3f:dc:08:78:
bf:ad:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:38:06 2026 by rpki-client