Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T83gKmhXz1TIGEfvV9PMXnIuzPk.roa
File: T83gKmhXz1TIGEfvV9PMXnIuzPk.roa (raw, json)
Hash identifier: 46gWYqj3RMCEXjS6u0Q+seGJFbaWAJ+AfoLhaO1kqGg=
Subject key identifier: 4F:CD:E0:2A:68:57:CF:54:C8:18:47:EF:57:D3:CC:5E:72:2E:CC:F9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E88832466FDEAACEC94C32723421B10E6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T83gKmhXz1TIGEfvV9PMXnIuzPk.roa
Signing time: Tue 02 Jun 2026 13:25:56 +0000
ROA not before: Tue 02 Jun 2026 13:25:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 89.213.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 13:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:83:24:66:fd:ea:ac:ec:94:c3:27:23:42:1b:10:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 2 13:25:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fcde02a6857cf54c81847ef57d3cc5e722eccf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ec:d1:77:9e:6f:b0:8d:af:1e:1a:4a:25:67:
4f:06:50:f4:fe:21:9e:96:84:62:16:c8:35:f9:b7:
c9:96:59:b3:6f:dc:48:36:b2:d4:13:c4:2f:90:5b:
ff:fd:3d:51:71:81:00:21:a5:64:69:e9:7e:63:cf:
f2:54:53:75:dc:37:23:69:0f:94:8e:bf:83:84:69:
2a:13:6b:36:2c:6c:75:0a:ec:7d:64:ba:ec:0b:3c:
93:58:f2:04:2e:5d:41:d3:19:c2:80:d9:fb:61:40:
5a:47:3a:88:52:be:ba:00:64:64:6a:1e:e7:27:e5:
a1:92:1c:c4:c6:1a:6a:7e:20:e4:f3:21:5e:6b:24:
91:98:38:82:44:88:4c:6b:74:f1:19:71:09:ef:df:
2e:75:e5:37:1b:1b:ed:d7:13:32:75:10:0c:23:65:
d2:33:4f:8b:fb:39:e1:bc:ae:c4:6c:43:f1:8e:1e:
35:ee:c7:17:6b:9b:8c:b3:54:dd:4d:20:90:8e:0b:
1b:bb:3e:c7:97:72:f6:78:52:45:52:a3:06:d0:2b:
99:a8:28:19:dd:81:80:e6:6b:08:b3:cd:f0:2d:e9:
6f:24:93:73:01:35:28:7f:e5:76:b8:f5:85:81:e9:
ce:f9:c8:63:de:b9:45:ab:52:60:a4:70:ed:d8:d1:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CD:E0:2A:68:57:CF:54:C8:18:47:EF:57:D3:CC:5E:72:2E:CC:F9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T83gKmhXz1TIGEfvV9PMXnIuzPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:70:ec:b9:51:45:05:25:3c:9a:18:3a:5d:d0:51:b6:f8:da:
41:83:0e:58:57:e3:9f:e2:59:2a:fa:0e:c1:49:5e:76:3b:87:
29:b7:0c:71:79:10:38:a6:ce:a6:12:16:0e:56:89:05:9e:d7:
c9:02:65:af:c7:a5:91:e6:a7:23:83:15:c3:52:b1:5a:40:f8:
5b:e2:b8:80:cb:b5:b2:52:76:f0:05:67:b3:e2:90:d1:4f:72:
2e:0c:92:b9:52:e0:04:48:6c:dc:75:9d:4d:ed:29:fd:a1:e2:
ba:17:ff:fc:5e:42:3d:48:45:2c:db:8c:00:3e:a1:5c:cb:ce:
8b:e1:1d:06:b1:82:28:9c:57:82:d4:de:65:44:21:f7:47:ef:
a7:4e:7f:86:24:13:5d:aa:7e:11:91:ac:c1:e9:ba:4f:46:3f:
25:20:d1:92:25:c5:bc:5e:6e:e3:e2:13:71:94:75:22:17:c5:
6c:b5:49:9c:b5:01:a1:1e:93:d2:ab:c8:a1:46:02:94:f1:f8:
8f:3a:e8:ac:49:2e:e4:54:db:1f:6d:44:fd:98:42:b5:46:0d:
d9:3b:2f:4d:52:e3:2d:14:d1:5d:f3:bc:70:3f:88:f8:77:47:
be:2a:cb:52:e8:38:bf:4e:9d:61:34:65:99:26:4c:05:10:1b:
23:57:10:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 19:36:18 2026 by rpki-client