Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fI-pQ_zQwfqWWAPwNs08VRCMSnY.roa
File: fI-pQ_zQwfqWWAPwNs08VRCMSnY.roa (raw, json)
Hash identifier: IuE79HWsw55TBOohbyPW8yBSesWTmDn9qwtquQFtPH8=
Subject key identifier: 7C:8F:A9:43:FC:D0:C1:FA:96:58:03:F0:36:CD:3C:55:10:8C:4A:76
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EF8DD5BB9015E2C2D120C16F5FB0B62C0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fI-pQ_zQwfqWWAPwNs08VRCMSnY.roa
Signing time: Wed 24 Jun 2026 09:01:57 +0000
ROA not before: Wed 24 Jun 2026 09:01:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219450
IP address blocks: 77.93.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 08:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:dd:5b:b9:01:5e:2c:2d:12:0c:16:f5:fb:0b:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 24 09:01:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c8fa943fcd0c1fa965803f036cd3c55108c4a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:74:25:40:62:82:da:30:fe:1a:ed:ed:ca:
f8:d4:44:bb:49:14:04:94:62:36:20:97:d5:9d:af:
ef:be:b3:ee:f8:d5:1c:a1:34:99:51:82:0d:41:67:
bb:2d:23:e3:ba:b8:cc:90:cd:6c:4a:5f:37:39:ec:
4f:c8:5d:93:7b:4b:45:12:c6:c1:f8:1b:8b:19:6b:
81:69:26:af:5c:f8:7c:57:49:07:2e:e0:02:d6:ed:
58:c3:98:9d:39:c7:39:8a:6d:ab:8a:9f:6a:43:bb:
e4:e3:1b:90:dd:2b:ce:ee:30:03:a6:c0:d2:f8:a4:
f1:9b:67:b3:a1:f8:ca:39:d7:bc:8f:cd:68:35:88:
aa:0b:19:8c:d4:ab:05:d6:d8:1a:6a:9e:e4:6d:80:
e0:3e:bc:18:c7:38:68:20:6e:96:fe:69:43:bf:d0:
99:c4:f0:22:be:cb:ec:19:d3:e3:d6:9d:f2:6d:da:
53:02:3e:1b:e3:25:2d:42:9b:19:25:dd:06:3a:04:
7a:4d:78:26:f3:40:a6:28:ed:8b:be:10:9f:c8:97:
9c:4b:fc:73:54:99:6e:65:d0:a3:3e:5a:6c:f5:c2:
1e:b8:da:7d:f8:a5:51:a3:17:aa:29:06:dd:49:ef:
49:ef:06:8d:d0:69:ca:35:05:53:17:d3:5f:e4:04:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8F:A9:43:FC:D0:C1:FA:96:58:03:F0:36:CD:3C:55:10:8C:4A:76
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fI-pQ_zQwfqWWAPwNs08VRCMSnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.148.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:59:56:be:5a:b7:fa:e8:4c:6a:cc:c6:6e:e2:2c:fe:ea:63:
a5:d4:81:49:2a:85:42:ea:fb:90:93:73:f9:b3:2d:85:82:da:
64:b8:2a:11:00:9e:5e:26:2e:ac:61:4a:54:15:02:3b:ea:2c:
04:65:9c:60:83:13:3f:2a:18:d0:0b:c0:6b:e2:95:47:ca:32:
f7:a9:a6:37:58:9e:8c:11:c5:69:65:69:93:68:31:dd:e9:72:
81:d2:6b:e4:a6:7e:be:6b:89:bf:d1:b0:3a:e6:bb:81:60:94:
8a:2f:9a:4a:79:f2:01:d5:48:f0:9d:ff:44:75:8e:6a:71:fb:
c4:1e:10:a8:c9:ff:fe:84:46:8b:73:4d:c9:45:21:06:b8:1d:
da:ac:53:c5:fd:a4:4f:dc:88:92:cc:fc:14:a2:c5:7a:db:fa:
de:31:a1:8b:ee:23:d8:7e:e7:c0:09:97:58:dc:dc:71:44:cb:
10:3e:3d:b2:fb:2c:a9:22:26:a7:33:9f:f2:cd:ad:e5:6c:8c:
4b:ca:91:1d:37:e8:1b:a0:ec:fc:ac:ab:53:c2:42:eb:68:83:
5b:75:ed:4d:71:d5:05:e0:e4:16:0e:a1:ae:1f:67:58:0e:5b:
9e:26:9f:ee:22:a5:9e:46:25:bf:aa:44:7d:96:44:0b:d4:c9:
c2:14:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 16:12:27 2026 by rpki-client