Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/e26CYSPDfCWiLdwSLtTTGzd9DiU.roa
File: e26CYSPDfCWiLdwSLtTTGzd9DiU.roa (raw, json)
Hash identifier: MAsW+aGDOC+Q5q8Iix7lq9Tg4/6GnbO0w2mTV7huxNM=
Subject key identifier: 7B:6E:82:61:23:C3:7C:25:A2:2D:DC:12:2E:D4:D3:1B:37:7D:0E:25
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EDF9ADEEAEA5D4F5528215CA12ED1CFDA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/e26CYSPDfCWiLdwSLtTTGzd9DiU.roa
Signing time: Fri 19 Jun 2026 11:18:49 +0000
ROA not before: Fri 19 Jun 2026 11:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149978
IP address blocks: 82.152.234.0/24 maxlen: 24
82.152.241.0/24 maxlen: 24
82.153.191.0/24 maxlen: 24
82.153.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:9a:de:ea:ea:5d:4f:55:28:21:5c:a1:2e:d1:cf:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 19 11:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b6e826123c37c25a22ddc122ed4d31b377d0e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:56:b8:02:f2:f7:56:40:3a:af:84:57:4f:
70:9b:9e:20:cd:2e:0d:0c:eb:8d:9f:b8:6f:0f:f9:
93:2c:b3:7c:7c:f6:75:98:33:57:c7:53:97:82:e9:
1c:be:4e:a3:0a:1f:b5:e8:a4:cc:ef:fa:cc:b3:d8:
e0:1a:36:6f:01:38:68:68:9c:82:91:e0:92:ff:39:
f9:79:bb:90:1c:99:83:08:48:75:8f:42:03:5f:4e:
32:48:16:5c:13:f6:ef:84:a9:44:9a:a1:30:ed:6b:
34:d8:55:f5:4b:b0:39:32:02:6c:76:04:32:4b:cf:
c5:5d:c3:42:36:dc:1c:65:21:56:d4:a6:68:d3:5f:
eb:3e:71:f8:5b:d8:8b:b3:b1:99:d2:2a:ec:c8:c2:
8a:a4:46:d5:9b:fd:fd:ce:e4:88:31:9d:b0:43:cc:
08:a6:d1:a4:62:31:60:c9:3c:5a:db:c5:9a:bf:36:
1c:bf:64:e6:fa:79:47:52:3b:3a:ff:2b:88:6e:88:
13:7a:0a:dd:50:51:54:88:e6:56:26:b9:e8:95:a4:
ba:b7:7b:41:62:d9:6f:f3:f1:6e:63:8a:49:cd:13:
2f:6c:68:9a:13:d9:40:18:51:8d:bd:2c:fa:0d:b4:
38:6b:02:76:75:92:01:a8:8e:95:98:2d:73:53:ba:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6E:82:61:23:C3:7C:25:A2:2D:DC:12:2E:D4:D3:1B:37:7D:0E:25
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/e26CYSPDfCWiLdwSLtTTGzd9DiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.234.0/24
82.152.241.0/24
82.153.191.0/24
82.153.244.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8d:d4:81:e6:c3:3f:83:a8:1b:86:3e:06:4f:64:34:59:00:
57:c3:70:3c:0e:e8:38:91:9e:3f:85:2c:e1:25:c4:ec:3f:16:
ed:f2:79:66:7f:4a:d3:ee:95:fb:19:04:92:16:4b:f8:fc:1f:
74:b8:a5:55:cc:0e:e4:b0:10:89:41:29:eb:5f:ab:7b:2f:8a:
f9:92:d2:e6:ca:bf:3c:2f:63:e3:3f:59:ff:d4:1e:9a:0c:1f:
0c:ee:81:e5:59:c5:df:0e:fc:18:a1:d9:0f:29:3d:2c:17:15:
28:3f:f4:18:86:0a:aa:1d:00:d4:f7:26:4f:da:a2:08:bf:f0:
f5:7f:e7:b5:8b:41:c1:11:e7:53:4d:36:da:cf:6f:f5:4c:3d:
8a:6c:d4:c3:62:e0:39:18:78:08:60:cc:56:18:ae:ee:4b:60:
15:2a:f8:20:5c:79:63:3f:e2:64:a5:73:25:14:ff:ef:b8:44:
ce:de:e9:d9:c4:e6:03:40:cd:86:f2:50:63:91:ec:20:24:0a:
62:2f:a4:4c:cc:53:11:82:cc:ae:f1:d0:e4:ed:65:3d:55:6a:
b0:05:d0:e5:ed:ff:41:2e:a7:f6:4a:a3:97:e5:2a:bc:ca:cd:
2e:56:31:24:06:0f:97:8f:3f:12:eb:0b:e7:d8:af:ba:fe:da:
69:e5:fb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 22:08:50 2026 by rpki-client