Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/di60tTEg-WQ71H3cZH0b4XMWP9E.roa
File: di60tTEg-WQ71H3cZH0b4XMWP9E.roa (raw, json)
Hash identifier: H+ufiwUKHSgYmg0ZXrZf9RaJ6HSur+0iZqiQ/eGU+DQ=
Subject key identifier: 76:2E:B4:B5:31:20:F9:64:3B:D4:7D:DC:64:7D:1B:E1:73:16:3F:D1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019C28193DC0B7657526BE2D70858849AA11
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/di60tTEg-WQ71H3cZH0b4XMWP9E.roa
Signing time: Wed 04 Feb 2026 10:01:08 +0000
ROA not before: Wed 04 Feb 2026 10:01:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 82.152.234.0/24 maxlen: 24
82.152.235.0/24 maxlen: 24
82.152.239.0/24 maxlen: 24
82.152.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:19:3d:c0:b7:65:75:26:be:2d:70:85:88:49:aa:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 4 10:01:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=762eb4b53120f9643bd47ddc647d1be173163fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:d4:1a:57:83:ff:cb:f3:24:a4:d1:e4:9c:
9e:02:1f:f2:5c:99:b9:99:53:62:98:47:7c:df:f2:
e6:f2:ba:d9:f2:cb:f1:e7:d8:2e:14:34:32:b0:b4:
3e:01:c4:43:8e:e0:96:2c:9c:cb:0e:4d:ce:92:62:
c1:25:b0:50:6f:54:fb:7d:b6:25:0d:c2:58:a5:3f:
fb:67:18:46:02:ae:34:a8:c0:c7:03:9f:ac:b4:df:
65:40:f8:05:e5:99:fe:99:fb:4e:c7:4a:4d:9c:ec:
51:16:62:53:d1:08:43:ad:d8:7f:77:94:a8:9e:7f:
2f:e4:c6:79:25:1b:f5:c5:b1:3d:7b:40:5f:c3:d7:
97:74:cd:da:0f:37:b4:03:05:3f:5f:58:2a:63:bb:
70:97:36:25:5c:f6:37:de:78:dc:71:c3:24:7c:b2:
dc:5c:92:36:1e:f5:94:ec:a8:39:2a:21:27:7c:bd:
3e:1f:b7:5f:99:2f:0f:4a:1a:d1:41:bb:91:32:52:
91:ae:cb:23:bb:be:af:22:5b:2b:68:00:a6:25:62:
32:b9:f5:c1:2b:38:67:8b:36:80:19:f9:c6:97:bd:
0d:cf:72:8a:06:52:f4:f4:be:b9:26:11:92:5f:d1:
a0:cf:5b:01:8e:2a:d5:3a:7b:fc:4f:e0:87:be:7c:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2E:B4:B5:31:20:F9:64:3B:D4:7D:DC:64:7D:1B:E1:73:16:3F:D1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/di60tTEg-WQ71H3cZH0b4XMWP9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.234.0/23
82.152.239.0/24
82.152.241.0/24
Signature Algorithm: sha256WithRSAEncryption
10:2b:1e:20:9e:a5:33:a2:48:0b:ee:f2:5c:9d:75:b2:7a:76:
8a:eb:f8:66:eb:67:b9:58:60:bd:75:03:5a:92:db:fa:7a:25:
85:8d:20:31:67:5a:6e:6f:f0:50:be:36:63:4f:74:87:08:26:
de:02:13:11:76:3e:8a:51:37:26:b0:9b:5b:b0:ed:48:06:d5:
7f:ea:c3:ca:97:bb:f4:db:76:ff:bb:7e:b7:16:0e:39:ec:d8:
46:d9:d6:44:52:4a:26:f9:54:f1:9b:f8:cf:bb:4d:b4:b8:c6:
8d:3b:48:ba:c9:06:a9:73:30:df:66:45:a6:14:c5:82:a1:39:
c9:77:19:88:1d:38:bc:ad:83:14:0d:25:24:d8:4d:e6:53:d3:
94:cd:56:c4:ee:49:ef:e2:f1:94:ee:50:2a:58:8f:f9:7b:6a:
06:f0:94:6e:bf:c0:fb:82:97:96:da:ef:db:f8:9a:5f:4a:77:
34:4c:ca:6e:b8:f4:99:8b:ce:d9:09:a0:a0:b2:03:48:e8:78:
58:7c:61:e4:a5:4a:56:ac:0c:3f:63:bf:2b:ea:64:7f:d5:30:
b0:1b:8b:49:44:07:1c:0b:53:db:cd:ce:4d:83:37:9f:b6:ab:
3c:76:c2:ed:56:9b:dd:ce:24:48:53:e2:71:bd:a0:0a:e1:44:
a1:de:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:05:58 2026 by rpki-client