Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dklpk5CXBlDVn2qggFt8kgblXzo.roa
File: dklpk5CXBlDVn2qggFt8kgblXzo.roa (raw, json)
Hash identifier: HgkKIRTibffi/f1+rUjHPl5MbBBX3tpECRr9BdKZJKo=
Subject key identifier: 76:49:69:93:90:97:06:50:D5:9F:6A:A0:80:5B:7C:92:06:E5:5F:3A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019C7A2E810ABCF60892B4935FA50ECF6637
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dklpk5CXBlDVn2qggFt8kgblXzo.roa
Signing time: Fri 20 Feb 2026 08:33:13 +0000
ROA not before: Fri 20 Feb 2026 08:33:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 81.168.97.0/24 maxlen: 24
82.152.10.0/24 maxlen: 24
82.152.70.0/24 maxlen: 24
82.153.34.0/24 maxlen: 24
82.153.37.0/24 maxlen: 24
82.153.132.0/24 maxlen: 24
109.176.244.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
213.210.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:2e:81:0a:bc:f6:08:92:b4:93:5f:a5:0e:cf:66:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 20 08:33:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7649699390970650d59f6aa0805b7c9206e55f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:f8:30:62:e9:62:82:01:d7:bd:60:11:56:
ab:9a:65:45:e8:7c:a2:c3:6c:bb:d9:43:e9:59:64:
94:9e:f1:70:54:5f:fa:65:d3:fe:c0:5e:f5:93:07:
e7:b0:f9:70:45:f0:ce:e6:a3:12:99:92:9d:d4:05:
df:f1:e3:8e:e0:2d:8b:5f:43:ac:e6:5c:59:74:e8:
f9:87:53:92:e7:a6:2e:46:83:6c:fe:00:82:78:9d:
03:6a:6a:5c:d2:0b:a9:c4:5b:d3:be:44:30:f7:12:
ce:aa:fd:06:a5:aa:7c:ae:1d:d0:44:fd:53:1a:a5:
c8:d9:96:65:82:10:75:e1:34:3c:74:88:2d:28:5f:
97:78:46:fd:66:15:71:75:a5:38:27:95:6a:fe:60:
19:ba:f5:3e:75:3f:74:76:08:d8:a7:18:45:90:3b:
c2:03:f3:73:52:bf:c9:98:5c:64:93:27:dd:7e:e4:
b0:e4:b1:c4:04:bf:70:32:a4:32:37:e6:8b:e1:32:
71:45:2e:1d:0e:d6:6f:b4:70:3d:05:c1:6e:49:cd:
60:e3:e8:84:90:88:9f:90:7b:70:a1:eb:2f:12:1b:
f7:fc:af:3f:83:e0:ac:15:54:6c:3c:51:9e:f7:71:
fd:14:61:66:3a:74:65:7c:4a:78:6f:8e:1d:dd:16:
2b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:49:69:93:90:97:06:50:D5:9F:6A:A0:80:5B:7C:92:06:E5:5F:3A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dklpk5CXBlDVn2qggFt8kgblXzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.97.0/24
82.152.10.0/24
82.152.70.0/24
82.153.34.0/24
82.153.37.0/24
82.153.132.0/24
109.176.244.0/24
109.176.247.0/24
109.176.251.0/24
213.210.62.0/24
Signature Algorithm: sha256WithRSAEncryption
38:f0:d4:30:ca:ab:82:c6:d6:33:f3:5e:8a:ac:bb:10:18:c7:
85:16:dd:38:32:42:35:8b:8b:2a:b6:13:4d:86:9f:41:bb:5e:
ac:41:da:bb:2f:3e:76:f9:f7:8d:db:5c:8b:b7:6f:cc:10:9b:
bd:3f:66:20:e5:80:16:63:34:67:0f:b4:06:21:d0:78:fd:0a:
30:02:dc:2f:42:59:23:3e:03:2a:ea:9f:4e:ab:70:66:b5:a9:
38:cf:24:d7:d1:af:9a:0e:16:21:fe:70:c7:b2:c6:1d:b9:59:
90:58:ce:97:95:04:de:0f:29:af:7d:4e:fb:93:60:b0:04:6b:
cb:d9:a9:08:63:a5:c1:61:f3:4e:f4:5b:65:f8:d3:a1:30:9d:
01:23:5e:da:ae:04:a6:64:f5:ec:2a:68:32:3d:63:ba:a1:86:
22:4f:22:3e:65:65:2f:95:2b:d1:61:66:b6:e7:62:f3:1b:92:
66:b6:5e:04:6a:52:76:c6:7a:8b:c4:19:dd:65:cc:38:84:50:
51:00:16:18:06:3a:41:51:69:78:f5:ea:3b:d6:89:be:ca:87:
3e:ca:ef:d1:0c:17:13:02:0b:85:4f:36:fc:35:2d:cc:95:e1:
20:99:b6:a1:04:5a:b6:63:da:d6:d9:27:09:de:59:81:d6:1b:
54:d3:63:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 21:29:54 2026 by rpki-client