Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/I_Dx4E2R6NCpsYgeWS_iFDfaMO0.roa
File: I_Dx4E2R6NCpsYgeWS_iFDfaMO0.roa (raw, json)
Hash identifier: tlrHXVmBar3GmWuWPTPHPPF7gjZCq8FzOD+eHfXJtZg=
Subject key identifier: 23:F0:F1:E0:4D:91:E8:D0:A9:B1:88:1E:59:2F:E2:14:37:DA:30:ED
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E6D79BDA7040837D157CF6A30C37159FA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/I_Dx4E2R6NCpsYgeWS_iFDfaMO0.roa
Signing time: Thu 28 May 2026 07:25:55 +0000
ROA not before: Thu 28 May 2026 07:25:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395470
IP address blocks: 89.213.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:79:bd:a7:04:08:37:d1:57:cf:6a:30:c3:71:59:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 28 07:25:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23f0f1e04d91e8d0a9b1881e592fe21437da30ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:d2:3f:72:04:89:21:f8:48:27:b2:e0:75:
2c:97:62:01:3a:72:6d:e0:18:a8:05:22:21:21:bb:
bb:1b:ac:9b:91:8b:15:6b:98:74:87:25:9d:6a:30:
47:ef:6c:6e:b2:ef:b9:75:ef:d7:41:fc:cb:74:94:
96:57:81:e6:a7:b8:47:f2:8a:ef:ce:d7:e9:f5:86:
c3:2f:35:3e:48:55:cd:42:84:28:8b:7a:36:62:ce:
67:7f:49:8d:8e:a4:55:6b:8d:1c:ee:b9:56:cf:c6:
ba:bd:28:7f:01:c0:48:16:fa:ef:1b:ad:91:b4:cb:
b2:f3:2d:7d:07:ee:18:a3:ad:91:71:2b:70:12:54:
2a:1b:36:99:6b:d5:ac:96:f3:07:e7:ae:ac:c8:7f:
9b:2c:a1:ff:66:b8:39:e8:3c:56:f5:8a:bf:60:d7:
3e:2b:68:3e:46:0e:68:16:05:ec:ba:16:4b:9d:e6:
98:5a:d5:32:d9:d8:a8:ce:08:49:88:ed:0c:5d:96:
c1:32:1c:39:d1:4d:62:c9:43:29:96:18:fa:57:80:
ec:be:9a:81:b4:7f:16:1e:3f:c5:3c:e1:43:1f:1c:
37:c5:26:c5:e7:77:e3:24:ff:cf:bc:ed:b2:47:3b:
7d:e0:9f:f2:59:ff:83:c3:e4:ef:d9:0e:07:97:31:
4e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F0:F1:E0:4D:91:E8:D0:A9:B1:88:1E:59:2F:E2:14:37:DA:30:ED
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/I_Dx4E2R6NCpsYgeWS_iFDfaMO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:2f:ad:82:f3:ce:16:21:7f:0c:08:e2:7d:66:01:93:e0:c4:
f7:15:92:77:1b:c0:e2:09:1d:3a:1b:4d:cc:ec:59:fc:fc:e0:
f2:ec:ab:74:a0:f5:f6:3c:4f:32:84:bd:06:cd:46:64:99:42:
3f:0c:1f:bf:b7:33:46:fc:fd:e3:7a:52:0a:75:a5:97:8f:57:
64:44:e1:87:fc:b0:c6:10:c2:c3:6b:9f:35:25:16:b9:c7:cd:
f4:cc:f8:24:68:4c:c5:c7:24:be:69:1f:18:9b:60:11:bc:f7:
0f:3b:be:53:83:6c:76:13:6c:f8:f6:8e:af:bf:87:63:f3:37:
d7:e0:ed:69:4f:41:2b:92:60:b4:a8:b7:83:50:a7:44:03:0d:
47:28:15:c8:6d:b5:86:a2:43:56:b3:00:e0:28:6e:1c:0b:c7:
95:0e:d4:70:8a:09:0d:3b:a3:f7:b4:97:10:57:9e:76:3d:7e:
b6:61:0f:6c:0e:92:2f:27:c7:fa:1e:9e:6d:aa:4a:35:67:1b:
a1:08:2e:e1:90:c4:27:c9:ae:7b:d8:60:4b:5c:26:5c:71:cb:
b8:45:c1:4e:52:b0:8d:f1:34:2e:13:6b:5b:6e:e4:d9:d5:00:
dd:d8:04:4b:12:d5:47:df:cf:fd:d5:5c:06:b7:92:eb:9d:de:
c8:a2:fa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 16:38:21 2026 by rpki-client