Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R41O4bkG5mOv4CT4hYTv6TEhoYc.roa
File: R41O4bkG5mOv4CT4hYTv6TEhoYc.roa (raw, json)
Hash identifier: LsqGejnl03r+MH7hoSfplQ3h9k1/y8ugBjvvANMqBsY=
Subject key identifier: 47:8D:4E:E1:B9:06:E6:63:AF:E0:24:F8:85:84:EF:E9:31:21:A1:87
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019C292C71B3A26EFDC7936108CF50EBC99F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R41O4bkG5mOv4CT4hYTv6TEhoYc.roa
Signing time: Wed 04 Feb 2026 15:01:44 +0000
ROA not before: Wed 04 Feb 2026 15:01:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 80.240.90.0/24 maxlen: 24
81.168.32.0/24 maxlen: 24
82.152.127.0/24 maxlen: 24
213.210.28.0/24 maxlen: 24
217.145.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:29:2c:71:b3:a2:6e:fd:c7:93:61:08:cf:50:eb:c9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 4 15:01:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=478d4ee1b906e663afe024f88584efe93121a187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:05:e6:31:74:c4:64:2c:04:21:fe:7f:22:
4c:79:aa:cb:4f:96:92:0d:90:5b:50:20:08:b3:71:
c9:e5:ed:1e:16:44:c3:54:30:97:d1:34:74:7b:61:
a5:b7:2d:f2:52:f6:29:62:c7:d2:14:1f:d6:f3:74:
2f:e4:02:1f:02:f8:5f:bb:cb:22:65:b8:a8:27:fb:
b2:45:99:a9:0b:19:36:cb:72:79:8b:d0:42:a2:7a:
c1:93:09:76:af:6e:8f:98:4e:9c:f1:6a:a5:c6:dd:
bf:cc:48:d5:8f:33:e8:ef:13:f4:82:63:a9:e7:de:
eb:c4:97:59:93:55:c5:29:32:43:22:4e:43:97:5c:
dc:b7:26:c2:db:06:4e:26:2c:f4:e3:6c:06:4f:df:
e9:2c:88:8c:f6:db:20:54:d4:98:5d:d9:39:58:e3:
b5:fa:ab:f3:81:69:b9:a1:35:d6:d6:86:17:06:3c:
57:34:89:ec:2d:45:61:06:d1:f4:5a:35:64:78:b7:
9a:40:fe:0d:9c:46:39:c3:b6:14:dd:b5:18:e6:4e:
dd:8b:97:99:9c:f2:12:a2:cb:7e:62:ca:a2:f5:c6:
ba:44:37:a7:ec:6e:9b:33:70:12:2c:d9:df:ad:28:
1a:63:e9:1f:a3:2e:40:29:be:c9:53:cf:13:64:4e:
d7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8D:4E:E1:B9:06:E6:63:AF:E0:24:F8:85:84:EF:E9:31:21:A1:87
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R41O4bkG5mOv4CT4hYTv6TEhoYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.90.0/24
81.168.32.0/24
82.152.127.0/24
213.210.28.0/24
217.145.75.0/24
Signature Algorithm: sha256WithRSAEncryption
88:cc:1a:80:a3:d8:80:72:52:28:e1:32:d8:38:15:00:31:47:
06:d7:fa:20:3b:ec:6b:7e:7c:4a:01:1b:1d:10:28:e1:bf:24:
41:06:a2:1e:ce:b5:1e:cd:89:a8:a2:56:e5:b3:54:8f:ed:04:
76:9f:80:7f:c2:2d:49:d2:8a:26:82:56:8e:0c:06:8e:ad:c4:
fb:92:95:e6:9a:ba:b9:fc:ee:df:28:56:14:f3:de:c4:e5:31:
43:b8:c8:cb:26:7d:99:b5:ce:67:99:29:ed:96:7d:41:b6:6d:
09:18:ef:cf:53:c8:52:08:29:ce:5e:ca:42:3a:2b:a4:38:81:
c9:30:fb:5d:c8:af:9c:57:89:18:32:55:6e:b7:49:bb:07:6f:
e8:87:88:96:a0:c2:fb:11:73:c2:9a:8a:da:59:8b:90:52:c5:
df:f0:75:4f:62:4f:1f:fb:2b:2a:7e:05:6b:c9:ba:6e:36:03:
68:47:9c:41:58:ba:18:ba:3b:7e:9f:dc:a3:87:8a:12:03:de:
64:00:4f:91:be:02:3c:c5:1e:42:c6:41:d7:d8:a9:3b:d6:47:
f9:cb:87:a8:a0:a6:2f:aa:5c:62:c7:43:ad:41:36:59:00:ad:
d7:1f:be:b4:68:32:af:9b:69:c1:ab:92:7c:11:1b:cf:8d:45:
1e:c8:5e:8c
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZwpLHGzom79x5NhCM9Q68mfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwMjA0MTUwMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzhkNGVlMWI5MDZlNjYzYWZlMDI0Zjg4NTg0ZWZlOTMxMjFhMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphYF5jF0xGQsBCH+fyJMearLT5aS
DZBbUCAIs3HJ5e0eFkTDVDCX0TR0e2Glty3yUvYpYsfSFB/W83Qv5AIfAvhfu8si
ZbioJ/uyRZmpCxk2y3J5i9BConrBkwl2r26PmE6c8Wqlxt2/zEjVjzPo7xP0gmOp
597rxJdZk1XFKTJDIk5Dl1zctybC2wZOJiz042wGT9/pLIiM9tsgVNSYXdk5WOO1
+qvzgWm5oTXW1oYXBjxXNInsLUVhBtH0WjVkeLeaQP4NnEY5w7YU3bUY5k7di5eZ
nPISost+Ysqi9ca6RDen7G6bM3ASLNnfrSgaY+kfoy5AKb7JU88TZE7XtQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEeNTuG5BuZjr+Ak+IWE7+kxIaGHMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUjQxTzRia0c1bU92NENUNGhZVHY2VEVob1ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUPBaAwQA
UaggAwQAUph/AwQA1dIcAwQA2ZFLMA0GCSqGSIb3DQEBCwUAA4IBAQCIzBqAo9iA
clIo4TLYOBUAMUcG1/ogO+xrfnxKARsdECjhvyRBBqIezrUezYmoolbls1SP7QR2
n4B/wi1J0oomglaODAaOrcT7kpXmmrq5/O7fKFYU897E5TFDuMjLJn2Ztc5nmSnt
ln1Btm0JGO/PU8hSCCnOXspCOiukOIHJMPtdyK+cV4kYMlVut0m7B2/oh4iWoML7
EXPCmoraWYuQUsXf8HVPYk8f+ysqfgVrybpuNgNoR5xBWLoYujt+n9yjh4oSA95k
AE+RvgI8xR5CxkHX2Kk71kf5y4eooKYvqlxix0OtQTZZAK3XH760aDKvm2nBq5J8
ERvPjUUeyF6M
-----END CERTIFICATE-----
Generated at Mon Feb 23 00:05:58 2026 by rpki-client