Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AbhH6f-oj-Ywhs5Y-WLrVAI36c4.roa
File: AbhH6f-oj-Ywhs5Y-WLrVAI36c4.roa (raw, json)
Hash identifier: qP3L+nPyjfNEliMIax8oU7ReYkzhPN12UFu6K6TNy5Q=
Subject key identifier: 01:B8:47:E9:FF:A8:8F:E6:30:86:CE:58:F9:62:EB:54:02:37:E9:CE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019C41813BB6756AB7C22693A119AC2DEC69
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AbhH6f-oj-Ywhs5Y-WLrVAI36c4.roa
Signing time: Mon 09 Feb 2026 08:25:14 +0000
ROA not before: Mon 09 Feb 2026 08:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201949
IP address blocks: 77.93.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:81:3b:b6:75:6a:b7:c2:26:93:a1:19:ac:2d:ec:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 9 08:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01b847e9ffa88fe63086ce58f962eb540237e9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:e0:15:ca:b7:c9:94:79:82:be:1c:f3:32:
3c:0b:2d:3c:1b:d7:62:a0:89:fa:25:27:a0:62:e4:
a0:c8:dc:eb:e7:a9:2c:a5:15:70:2b:f8:66:e2:39:
28:03:a0:3e:d7:61:37:9a:79:e6:15:34:bf:1e:c9:
a2:6a:43:ff:50:4c:ed:f8:67:8e:1d:5e:47:5e:2b:
5c:a5:56:26:70:57:3f:3c:8f:ae:ad:eb:65:d8:7f:
fd:97:9f:d6:7c:85:4f:eb:c3:90:8c:3d:0a:e6:69:
ab:f1:ac:d3:1e:b2:b3:69:a7:4e:fd:30:38:2a:a8:
6b:e2:5c:54:5f:6b:5a:a6:08:2c:6c:1f:5a:2a:a2:
d1:e9:1d:b4:1e:e2:6a:f6:1b:bf:f6:c7:fb:00:0d:
b6:b0:eb:9c:18:dd:5b:18:f8:03:72:bc:50:25:08:
55:95:27:f4:b0:ac:42:99:e1:07:b8:68:0a:11:30:
f9:84:b5:97:2f:4a:90:70:0a:dc:9a:48:20:c4:8a:
cd:3b:22:30:90:8c:e4:5b:61:96:b9:2e:49:33:58:
47:99:89:90:85:58:b0:d8:97:19:53:67:fc:4e:85:
d1:a2:35:bd:fc:27:5b:54:e0:d0:7e:f0:61:48:63:
31:e5:d5:7b:90:5b:f3:db:a1:ee:04:56:e6:ad:c7:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B8:47:E9:FF:A8:8F:E6:30:86:CE:58:F9:62:EB:54:02:37:E9:CE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AbhH6f-oj-Ywhs5Y-WLrVAI36c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.136.0/24
Signature Algorithm: sha256WithRSAEncryption
82:64:c5:26:1e:ef:b1:4d:6f:c9:b6:39:a9:51:53:bb:75:6a:
ea:62:32:30:15:f1:5b:ef:f9:33:05:b2:91:98:d5:9d:8c:db:
7e:99:49:12:81:e0:b3:6d:7b:13:82:a6:4e:8a:ce:77:d0:25:
c1:c5:f2:81:c2:bf:33:a7:c7:8a:95:74:ca:af:e7:15:d0:f6:
07:95:fe:e7:0f:51:be:6d:7a:31:a4:f5:b0:4d:bc:c5:e6:c9:
4a:23:b9:f7:9c:1f:61:2c:b5:16:f0:01:61:9a:e3:60:a7:b9:
dc:6c:fd:62:ff:4c:a1:ba:9e:96:9f:f4:b1:6d:91:e8:73:28:
0b:dc:fb:47:fb:72:0b:cf:37:ea:d0:a0:82:e9:26:32:e9:c4:
2a:26:df:73:6b:52:da:17:7e:45:30:74:60:33:2d:2f:e9:d0:
d3:ad:a7:1d:11:8f:6f:28:b9:d4:25:51:b6:06:fb:d3:0d:06:
7f:a9:61:8f:2e:bf:54:2c:61:97:4b:1b:79:c7:37:24:02:93:
e3:3f:20:59:bb:93:b2:b6:d4:60:93:c0:e9:d7:66:a4:03:1d:
d6:e6:35:da:f5:0a:eb:2a:56:75:16:8f:0d:96:7d:09:f0:40:
0d:2e:55:18:5c:df:5c:f1:4e:a9:6e:f8:9a:94:9b:91:f6:b9:
c1:d8:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:05:25 2026 by rpki-client