Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Fjh54yVCJG02GfYc2jJcqC_5VNY.roa
File: Fjh54yVCJG02GfYc2jJcqC_5VNY.roa (raw, json)
Hash identifier: OzunPyjDmcYemrtUoGIV+NP7l4wCB1Nnnvc5Fqo+iBk=
Subject key identifier: 16:38:79:E3:25:42:24:6D:36:19:F6:1C:DA:32:5C:A8:2F:F9:54:D6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D292C9207F4D59515AAAB2A8F19E9250C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Fjh54yVCJG02GfYc2jJcqC_5VNY.roa
Signing time: Thu 26 Mar 2026 08:04:39 +0000
ROA not before: Thu 26 Mar 2026 08:04:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22427
IP address blocks: 213.130.154.0/24 maxlen: 24
213.210.53.0/24 maxlen: 24
213.218.225.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 20:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:2c:92:07:f4:d5:95:15:aa:ab:2a:8f:19:e9:25:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 26 08:04:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=163879e32542246d3619f61cda325ca82ff954d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:c7:d8:c9:9d:4f:32:0a:be:97:dd:50:2e:
d0:d0:23:fa:2f:55:5e:4a:70:12:ca:37:44:0e:49:
f6:10:fe:08:ac:a4:ce:25:c1:2b:45:6b:e8:8a:af:
54:d9:54:49:8c:c3:4a:c3:4b:5c:09:5b:d5:a2:a9:
d7:14:cd:9e:c9:cd:47:1c:e4:46:55:3a:5c:fa:26:
4e:eb:e5:d3:bc:79:67:71:2c:b3:a6:f7:5b:9b:d6:
89:d8:14:66:92:b1:7e:58:25:f8:51:0a:f5:1f:ce:
64:7f:06:30:77:35:3c:e6:9e:c7:ed:c5:a6:65:a8:
ac:4d:a2:ab:d9:0e:00:c0:40:c3:95:e6:f6:2e:dd:
19:23:e8:d4:69:ef:27:43:d5:40:78:43:c9:30:e5:
53:62:a3:7b:a6:8e:bc:66:9b:8b:9a:3a:b3:c4:9c:
6d:49:10:50:de:70:30:82:8e:51:6d:29:9a:5d:4c:
9d:61:c2:9b:f9:49:23:f1:df:7a:aa:55:bc:9b:c8:
a3:86:33:07:a1:9a:4c:f0:5e:a4:36:15:e8:02:77:
4f:3a:69:5e:05:26:16:4b:0c:ac:48:63:62:64:fc:
07:d6:22:28:5e:e2:a1:11:52:e4:a3:a4:92:ce:fe:
20:f1:6d:35:b4:5e:08:25:97:cf:b4:ea:20:91:b9:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:38:79:E3:25:42:24:6D:36:19:F6:1C:DA:32:5C:A8:2F:F9:54:D6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Fjh54yVCJG02GfYc2jJcqC_5VNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.154.0/24
213.210.53.0/24
213.218.225.0-213.218.226.255
Signature Algorithm: sha256WithRSAEncryption
12:d2:61:ac:7f:ff:4a:30:b1:dc:e8:ee:1b:87:b7:75:c1:a8:
37:a6:7c:20:24:ae:f4:e8:26:fe:d0:11:90:60:59:6e:7e:19:
ec:38:a5:8c:a5:34:86:9d:28:6f:c2:a5:ba:52:58:83:9f:c1:
c3:8e:61:6b:9c:35:88:f4:60:09:1c:0f:42:9a:f5:88:e2:07:
04:8a:ac:f3:ae:23:5c:91:1c:7b:e3:97:47:38:00:b0:d7:9e:
16:cc:d5:b4:7d:e0:8d:5d:ac:92:d6:88:bc:cd:97:68:82:81:
53:a5:30:ff:f6:0f:1f:6d:92:20:63:db:e1:b8:b6:a4:d4:aa:
b5:be:88:52:0e:f1:8f:a0:a2:de:ab:3a:fc:91:2a:96:0a:34:
38:4f:71:0f:dc:f7:83:01:10:05:13:e5:f3:bf:45:9c:18:7e:
06:67:65:8a:ef:6e:9c:4a:58:5f:06:05:59:03:05:ca:28:ee:
38:42:83:75:4c:86:31:5c:54:f4:03:ea:cf:34:31:75:75:5c:
fe:d5:b6:de:d3:35:1b:fa:06:c5:3e:92:bd:f3:2d:40:c1:1c:
85:ae:e1:33:1d:a1:4a:73:14:29:6a:b1:4c:46:06:04:81:cb:
a5:03:b9:76:0d:45:cf:65:9b:a1:63:ce:a7:6f:96:ca:aa:ba:
ff:2d:40:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 05:18:55 2026 by rpki-client