Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Uh19vaoGCOqETQL5zo3p96ZLCGs.roa
File: Uh19vaoGCOqETQL5zo3p96ZLCGs.roa (raw, json)
Hash identifier: W5s8A9MSsjZ5QXYDGBxbJ9eHSd+Try0xTWyDG1P6ubs=
Subject key identifier: 52:1D:7D:BD:AA:06:08:EA:84:4D:02:F9:CE:8D:E9:F7:A6:4B:08:6B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EAB4800F5E663C8515CACA92DE159D04A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Uh19vaoGCOqETQL5zo3p96ZLCGs.roa
Signing time: Tue 09 Jun 2026 07:28:03 +0000
ROA not before: Tue 09 Jun 2026 07:28:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395374
IP address blocks: 89.213.65.0/24 maxlen: 24
213.218.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:48:00:f5:e6:63:c8:51:5c:ac:a9:2d:e1:59:d0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 9 07:28:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=521d7dbdaa0608ea844d02f9ce8de9f7a64b086b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:b5:ae:2c:86:73:f2:c2:05:f3:39:66:5c:
3d:98:10:a6:ab:98:6a:52:35:9d:05:1b:91:b4:42:
8c:8b:05:8f:4f:33:06:6f:b6:e3:71:64:71:08:60:
47:a7:47:d7:cf:c3:e5:ea:8f:fd:29:95:c0:c8:e8:
60:06:12:ad:06:60:16:21:69:bb:ab:27:3c:e9:d9:
5e:1e:79:6a:5d:64:59:ea:b4:88:c0:59:82:82:d6:
04:b4:7d:e1:88:e6:0c:d5:d9:da:4a:f1:bb:25:7f:
a3:33:dd:67:b8:28:8a:96:5c:55:ee:ea:89:52:11:
d0:bd:7b:44:4e:f2:14:33:7d:74:3c:18:dc:9e:48:
df:88:55:80:b9:a9:1f:97:ce:ff:71:22:dc:7a:59:
65:73:02:0b:35:8d:2a:69:35:90:56:82:f3:00:20:
82:de:e8:f9:c7:87:57:8d:23:c0:23:09:d9:d1:3d:
91:5e:56:0e:3e:31:98:06:bb:bd:cb:f2:17:fe:fb:
3c:9d:e5:61:15:24:26:ed:c6:65:be:59:d0:8d:c6:
13:69:a6:33:a8:54:17:fa:e6:dc:12:7a:72:30:dd:
d8:0a:4c:52:bb:12:c3:e9:35:69:9d:60:7e:16:c1:
af:15:f2:c5:c0:24:88:72:7b:65:a8:7a:3c:9a:9b:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1D:7D:BD:AA:06:08:EA:84:4D:02:F9:CE:8D:E9:F7:A6:4B:08:6B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Uh19vaoGCOqETQL5zo3p96ZLCGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.65.0/24
213.218.228.0/24
Signature Algorithm: sha256WithRSAEncryption
25:79:54:b8:bf:0b:91:e9:be:44:b9:d6:4c:6f:89:72:a0:23:
c9:dc:c4:e0:0e:6f:a0:f3:44:c9:8a:eb:94:26:7a:d7:50:de:
33:56:7b:ec:7e:fd:74:85:71:61:89:ee:e8:82:54:c7:fb:a1:
54:ac:f8:60:1f:dd:c8:f3:dd:35:50:90:82:8a:86:fd:d8:bd:
4a:32:83:30:5c:e1:ec:ee:a8:ac:df:31:64:3e:90:8a:a3:d4:
4a:0a:f7:24:58:55:c1:6d:48:45:6b:40:ef:05:3f:7f:36:5d:
21:af:1f:7d:5e:a6:23:10:cd:a3:ea:a2:f4:26:22:92:10:ea:
fe:39:5c:5b:c6:e0:bb:ec:91:ab:21:ef:b0:e0:d3:1b:81:eb:
5e:42:01:5d:f0:a4:90:58:fe:0e:02:fd:0f:a7:30:76:0d:b8:
a7:4b:42:29:cf:bf:70:bd:4f:7e:ca:41:d2:fb:9f:41:b0:74:
a3:4d:d5:e6:96:52:01:91:ba:3c:bb:55:20:83:2c:28:30:83:
62:11:8d:e5:b2:9f:23:1b:f3:fa:98:33:99:56:d5:1c:06:e4:
ca:96:36:eb:db:f9:c0:25:50:11:63:6e:49:72:bc:9b:32:30:
57:c7:46:fa:f4:88:bf:01:fd:f6:88:3d:4f:cb:ca:f0:8c:88:
53:8c:af:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:19:51 2026 by rpki-client