Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_SFZDLZjnHa6TMqWvSdqNK_tTBA.roa
File: _SFZDLZjnHa6TMqWvSdqNK_tTBA.roa (raw, json)
Hash identifier: HhivDvlKEUBX63M5peIOtBoDsjC+6Xz9roeJ4Os//5o=
Subject key identifier: FD:21:59:0C:B6:63:9C:76:BA:4C:CA:96:BD:27:6A:34:AF:ED:4C:10
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D6C0ACF0FC61464312CFC620C4CB9BEF4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_SFZDLZjnHa6TMqWvSdqNK_tTBA.roa
Signing time: Wed 08 Apr 2026 07:42:20 +0000
ROA not before: Wed 08 Apr 2026 07:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 77.93.140.0/24 maxlen: 24
82.163.0.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
217.144.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 20:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:0a:cf:0f:c6:14:64:31:2c:fc:62:0c:4c:b9:be:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 8 07:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd21590cb6639c76ba4cca96bd276a34afed4c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e0:a8:64:37:75:b6:50:10:ed:47:fb:a4:63:
9e:07:b9:f1:54:09:f1:50:e5:30:cc:ba:ac:d3:61:
04:2e:79:3c:c4:b4:b8:77:50:5d:1d:5c:74:eb:7c:
4a:e3:3f:81:d3:29:12:24:7f:44:00:84:ce:5d:5c:
1f:5e:49:e1:26:d5:ca:06:37:98:ec:28:49:17:74:
22:2e:7f:db:10:ca:6a:84:ca:e8:5e:6b:52:03:11:
43:40:2e:90:a3:58:22:0c:a4:cc:84:98:9e:7f:ab:
cf:1a:9c:01:07:09:09:1b:a8:dc:f0:b1:29:51:a0:
6b:ea:78:c5:e1:5f:d0:17:7e:ca:e8:0a:66:2c:b6:
a9:f4:19:d4:e7:72:37:fb:bc:1f:04:aa:64:b6:e6:
a1:8a:17:a9:e9:86:dd:f7:49:d5:22:95:17:06:68:
e2:20:e2:30:95:a4:41:63:6a:f0:bc:ff:09:12:d4:
60:22:84:47:66:49:58:46:90:9d:47:85:c7:ef:15:
8a:e9:8c:91:f7:5e:14:ba:43:82:86:58:33:f9:df:
eb:1a:7e:79:96:f2:5e:0f:5d:e5:59:76:86:b7:77:
2f:fe:bf:12:fe:04:66:12:c8:bf:3f:96:20:0f:bf:
d5:62:7a:ca:e5:62:ef:94:00:a9:10:25:56:e1:b7:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:21:59:0C:B6:63:9C:76:BA:4C:CA:96:BD:27:6A:34:AF:ED:4C:10
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_SFZDLZjnHa6TMqWvSdqNK_tTBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/24
82.163.0.0/24
185.49.125.0/24
217.144.153.0/24
Signature Algorithm: sha256WithRSAEncryption
62:fc:38:31:dc:5f:ab:0c:46:4b:b6:8c:cf:52:50:86:ed:19:
b0:ad:30:d5:d7:53:72:69:42:45:ee:42:a5:b6:36:52:77:65:
ff:3e:29:af:43:99:c5:88:8a:05:d3:36:e7:1b:c5:22:6c:2f:
bd:a7:66:e8:45:5b:52:9e:dc:59:07:43:28:13:45:41:1f:5e:
ba:c2:87:97:65:bf:56:1a:c4:46:68:8e:4a:0b:0f:6e:7c:35:
cc:e8:01:fd:83:74:3c:bd:2c:71:72:82:82:9f:24:7f:90:68:
3f:41:1d:46:c8:1d:ca:ea:4c:73:15:05:89:97:f6:ae:63:18:
21:95:2e:d0:10:4f:11:35:e8:76:30:0f:d1:ae:1c:c7:1d:ef:
03:5d:18:54:72:21:aa:6f:52:c8:4c:67:63:96:f7:4b:45:a1:
c6:9a:65:66:fd:51:91:e3:61:da:eb:63:21:16:ff:54:45:9b:
b7:a4:8a:ed:29:bc:d2:79:a8:5f:75:90:eb:4e:2f:ad:c4:48:
38:67:63:27:e4:45:ec:5b:be:6d:fc:57:b0:64:b8:69:ce:65:
a5:a2:a8:89:89:98:d1:23:d9:a9:08:87:1b:4b:67:88:be:60:
5c:a0:cf:0d:c4:f0:22:47:80:2d:71:39:ed:9f:bc:dd:68:3d:
7a:e2:b8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 05:14:33 2026 by rpki-client