Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SyAgwcrQioXDHzbixkxNo8-PKcc.roa
File: SyAgwcrQioXDHzbixkxNo8-PKcc.roa (raw, json)
Hash identifier: hLbAf9wgrDYaax95Qg9A8uKMDesL2vZCjSW0kw5OUmM=
Subject key identifier: 4B:20:20:C1:CA:D0:8A:85:C3:1F:36:E2:C6:4C:4D:A3:CF:8F:29:C7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CDC02BA7E835DF5D36A3F4396F23A6CDC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SyAgwcrQioXDHzbixkxNo8-PKcc.roa
Signing time: Wed 11 Mar 2026 08:28:12 +0000
ROA not before: Wed 11 Mar 2026 08:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 89.213.3.0/24 maxlen: 24
109.176.25.0/24 maxlen: 24
185.49.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:02:ba:7e:83:5d:f5:d3:6a:3f:43:96:f2:3a:6c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 11 08:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b2020c1cad08a85c31f36e2c64c4da3cf8f29c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:fc:95:2e:34:3d:cc:82:f5:2d:0a:62:01:
26:fe:4c:5b:ec:db:a1:51:b9:cf:d0:e3:31:1a:3b:
e6:42:e0:9a:4a:72:81:73:b3:fb:7d:c7:24:95:76:
0e:38:02:0f:d9:19:aa:b6:76:b7:2e:53:00:c6:fb:
66:05:3d:67:6c:b5:0a:2d:d7:1a:cb:57:18:fd:a8:
de:f3:60:bf:95:1b:d2:e1:2f:7c:bd:6e:74:ed:77:
ab:e6:e5:01:e9:14:0b:3d:e3:3c:7a:60:5a:11:f4:
e1:9e:7f:67:8a:df:d8:36:af:e2:00:9b:6e:df:a2:
13:17:85:04:a2:0a:e2:7a:0f:89:98:9f:da:3b:f1:
8c:de:2a:1b:b8:d6:12:bb:e1:5c:4a:b9:a6:3b:bf:
ff:f9:e6:c9:a3:aa:f0:e6:6c:f7:1d:8c:8c:96:23:
c6:e2:49:e5:01:36:a4:24:f4:6b:0c:04:74:59:cf:
8f:a1:86:82:79:db:4c:ad:53:72:6c:d6:8d:15:81:
3e:26:6e:43:3e:b9:89:d4:13:7e:52:c7:1d:0a:d7:
e7:33:f3:b0:66:7e:c4:1f:a7:09:f3:d1:c1:6a:d8:
45:f1:af:6a:ff:e8:71:cf:f4:fd:79:9a:84:2c:aa:
f8:1e:e0:4f:6d:c2:44:94:4a:22:64:2e:3b:74:a4:
ff:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:20:20:C1:CA:D0:8A:85:C3:1F:36:E2:C6:4C:4D:A3:CF:8F:29:C7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SyAgwcrQioXDHzbixkxNo8-PKcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.3.0/24
109.176.25.0/24
185.49.127.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2a:89:62:58:75:fa:2f:2e:10:8e:74:c4:78:da:ef:34:a0:
7b:f7:a4:3d:f1:dd:9d:ae:e9:2e:b1:c6:95:46:ce:a4:7f:88:
98:73:b4:6c:41:ae:26:fa:02:5c:01:a7:7a:af:20:26:7c:b9:
76:da:0d:ad:72:7d:29:b6:59:5d:88:bd:a6:72:fe:f6:64:a9:
74:57:59:32:ef:49:89:e2:31:b7:c2:18:2b:9c:8f:a0:91:f0:
c6:32:62:02:8b:39:fd:8d:83:68:37:c5:e6:4e:39:3c:c2:bf:
78:4d:d0:24:c7:7b:f2:ee:3d:58:6f:f2:25:28:05:2f:e5:68:
7a:36:27:c3:67:be:b4:9b:92:70:2b:4a:5c:a6:8d:7a:c5:f0:
96:39:46:e1:3a:2e:67:bd:7e:92:cf:40:9a:bc:27:6e:fe:f9:
c3:82:89:24:78:df:ba:ec:26:2d:f6:d6:c9:05:48:47:d3:d6:
f1:9d:33:a9:11:e3:87:54:c2:d4:5b:3f:9c:e5:82:b4:60:85:
4d:08:06:1f:fc:a9:4c:de:37:4a:f5:08:87:a1:a0:17:9f:7e:
97:46:dd:6c:55:ca:ca:8c:1e:00:78:56:d1:d5:38:f9:74:11:
3e:05:4f:22:ca:a8:aa:25:91:38:2d:1a:fe:6b:52:5a:e1:18:
3f:e5:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:27:54 2026 by rpki-client