Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/d3kWZ7pWlfkJeGcCqAUoX9ifWw4.roa
File: d3kWZ7pWlfkJeGcCqAUoX9ifWw4.roa (raw, json)
Hash identifier: 4uoHGA/dDtnXiW1KhsX5DT3JJXJknsnVbAk0yY82ZSU=
Subject key identifier: 77:79:16:67:BA:56:95:F9:09:78:67:02:A8:05:28:5F:D8:9F:5B:0E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CB7D39D4D9C5E545F13DECDCA3C51426F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/d3kWZ7pWlfkJeGcCqAUoX9ifWw4.roa
Signing time: Wed 04 Mar 2026 07:50:24 +0000
ROA not before: Wed 04 Mar 2026 07:50:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137235
IP address blocks: 213.130.135.0/24 maxlen: 24
213.210.52.0/24 maxlen: 24
213.218.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:d3:9d:4d:9c:5e:54:5f:13:de:cd:ca:3c:51:42:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 4 07:50:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77791667ba5695f909786702a805285fd89f5b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:a3:bd:c0:93:09:47:c1:72:2a:0f:39:96:
d3:e1:a1:9e:9a:6f:88:c2:dc:9f:74:1d:3c:4e:cd:
c6:d7:a3:be:05:d9:b0:72:7f:05:8a:ab:72:0b:e2:
4b:1d:c6:5b:8d:92:db:84:90:a0:f1:d8:bc:be:4d:
33:bc:48:8c:bf:c2:0c:1e:d6:5d:6b:51:66:2f:54:
7f:0c:7d:ad:95:76:95:4a:94:c0:0f:55:e4:05:2a:
eb:c7:f2:fd:c7:d1:b1:40:6d:c8:e5:c3:90:d3:bd:
cc:b2:c6:e6:db:c5:d0:d5:76:0e:91:db:be:9a:57:
a0:da:8c:7d:d9:0f:36:f1:f8:57:c5:f2:68:90:ff:
b8:b9:c9:4d:46:8a:f7:f6:a5:9d:af:c0:de:ec:18:
65:c8:77:ae:6f:c7:e0:26:4f:0a:ec:97:1e:e9:cc:
9c:e6:fd:80:ab:ec:9d:b5:6d:b7:ce:38:c7:d8:d7:
95:d4:7b:5b:33:08:c2:4b:fa:72:ef:22:bc:69:ac:
03:76:61:cc:a0:99:62:f7:3c:6d:15:05:a4:7e:a3:
22:1e:fe:f5:b7:87:e9:73:c4:c6:4c:6b:96:13:70:
47:7d:ca:26:90:b3:d5:ae:49:29:c2:af:d8:8a:76:
a7:cb:ab:87:a4:10:16:b6:45:1f:2c:87:6c:87:fe:
0a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:79:16:67:BA:56:95:F9:09:78:67:02:A8:05:28:5F:D8:9F:5B:0E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/d3kWZ7pWlfkJeGcCqAUoX9ifWw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.135.0/24
213.210.52.0/24
213.218.233.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:2c:3a:48:a4:a2:72:86:ed:79:34:51:8f:68:e7:af:53:55:
fe:59:f1:8c:89:ee:03:32:d7:0b:c9:f4:53:1e:a0:93:f4:5c:
3f:28:ee:86:f2:01:17:6a:b3:e4:e4:7e:08:8a:11:7c:41:90:
d7:08:49:8c:24:d3:d6:6e:ba:00:70:4d:82:9e:8b:47:de:40:
be:e2:14:4e:03:b7:0f:ed:f7:2d:f1:ea:c2:f4:95:f5:10:67:
c6:82:ad:4f:8b:cc:30:ed:64:29:d6:e7:e7:da:c4:7a:d9:06:
b8:23:71:bb:5a:57:e4:5c:81:95:53:ca:fe:84:04:a8:f5:36:
45:e9:e6:ef:63:c8:82:35:d9:df:9b:b2:56:f2:10:8b:21:e1:
5e:fa:0f:4c:9b:89:74:01:8a:1d:00:59:c2:18:01:fc:7a:43:
0f:e5:2f:73:03:bb:9d:cb:5a:18:ac:7d:ac:fe:90:10:3c:c7:
c9:a5:e5:26:65:25:14:51:8c:a7:7b:92:de:0d:1d:2c:e4:5f:
c8:c8:32:fe:99:94:f2:ff:d3:e0:ec:8e:26:80:f9:bf:dd:40:
05:4b:fa:b2:6b:8c:f6:0b:93:18:a5:b2:6e:64:12:c0:77:3e:
3d:03:be:1c:1d:ac:ff:15:94:f7:27:f4:09:40:3f:1a:20:e5:
2e:7f:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:25:16 2026 by rpki-client