Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XAV8_PV3QpifwdNa9nMCET5AuoI.roa
File: XAV8_PV3QpifwdNa9nMCET5AuoI.roa (raw, json)
Hash identifier: yFDsZlAUWUXTdV73K4FJ2kARntmUjyYdCVoiZIYzkuo=
Subject key identifier: 5C:05:7C:FC:F5:77:42:98:9F:C1:D3:5A:F6:73:02:11:3E:40:BA:82
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CB7D39DA8480EAEC6895DEA9EC38A747E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XAV8_PV3QpifwdNa9nMCET5AuoI.roa
Signing time: Wed 04 Mar 2026 07:50:24 +0000
ROA not before: Wed 04 Mar 2026 07:50:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137517
IP address blocks: 82.152.12.0/24 maxlen: 24
213.130.156.0/24 maxlen: 24
213.130.158.0/24 maxlen: 24
213.130.159.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
213.218.237.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:d3:9d:a8:48:0e:ae:c6:89:5d:ea:9e:c3:8a:74:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 4 07:50:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c057cfcf57742989fc1d35af67302113e40ba82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:21:a1:99:2a:ae:3b:3d:e6:43:01:04:9e:
73:9e:13:f9:ff:4c:40:5d:45:8c:48:51:54:02:72:
ae:4f:e7:45:64:60:a4:a3:6f:5f:24:79:f7:37:f7:
ad:c8:1f:ed:b2:05:2e:be:cc:a6:b1:1d:47:09:84:
0a:38:03:1d:91:1c:73:0d:d7:81:69:3f:ad:72:bf:
6f:e1:e0:52:db:77:7b:9d:fb:c5:5f:7a:e3:aa:35:
c9:d7:3c:47:f6:51:5f:02:01:46:49:f5:3b:40:43:
80:db:8a:1e:b1:98:68:c3:71:99:a7:1e:ba:93:83:
6b:e4:99:40:81:56:2c:ce:84:1f:95:3a:f5:2c:d9:
2d:d2:ad:57:24:cd:0c:da:40:d9:ab:68:97:7f:2f:
3d:09:10:e7:d8:18:c8:69:66:ce:47:c2:5f:67:4a:
7a:8f:5e:a6:6b:9e:9d:a4:c9:98:13:7d:d1:ff:51:
52:9e:94:cb:4f:37:56:97:3f:56:72:f4:0e:1f:96:
41:b9:51:27:69:cd:2c:c3:83:cf:92:72:0a:9f:d1:
47:51:5f:26:4f:3b:ea:42:c4:bb:6a:54:f3:5c:a7:
d8:03:e6:8d:86:e5:f6:31:21:d1:ba:5d:9b:13:6c:
29:91:ea:43:c8:f5:2e:1d:41:85:15:94:78:c6:a0:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:05:7C:FC:F5:77:42:98:9F:C1:D3:5A:F6:73:02:11:3E:40:BA:82
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XAV8_PV3QpifwdNa9nMCET5AuoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.12.0/24
213.130.156.0/24
213.130.158.0/23
213.218.227.0/24
213.218.237.0/24
213.218.239.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9d:15:ae:37:c0:b6:4d:b4:4d:70:ef:bf:4f:3b:aa:6d:c6:
0e:c6:43:09:7a:16:96:c7:8b:3f:98:62:28:5d:f4:29:94:f6:
0c:e8:41:8e:04:0d:91:a2:2d:df:cd:1f:27:b7:f9:cb:08:f7:
53:04:50:d0:cb:96:2e:71:ed:1f:4a:3e:17:fe:33:b6:a8:02:
b6:7d:91:55:85:aa:f7:28:6b:01:63:b1:6e:10:93:f8:bc:56:
df:5e:4a:28:5f:62:e1:20:bf:de:2c:00:8b:57:ce:c8:5f:0c:
f3:8b:e7:61:0c:75:52:af:9b:2f:dd:69:d3:bb:90:6c:94:23:
07:11:52:29:98:5f:c5:4b:37:aa:cc:57:14:88:ad:6a:fa:35:
8f:e5:2b:2a:52:53:97:7d:d9:d6:f9:80:ff:ff:cd:ee:2c:ac:
c7:da:2d:57:60:2c:e2:d9:b3:30:cf:28:f7:b4:fc:31:c3:65:
25:d4:96:75:32:93:1d:9e:be:4c:39:0c:24:e9:56:17:78:b3:
e4:7d:17:95:99:2c:91:15:b1:dc:49:94:62:a3:56:d7:f1:ce:
3d:d2:e0:0d:06:8b:be:52:83:69:0d:7c:78:ea:d0:c1:5a:53:
26:70:04:c3:07:83:cc:78:44:3b:d8:05:c9:8f:fa:5c:e7:fe:
4a:6f:ca:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 08:32:46 2026 by rpki-client