Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k0S6lEM_XIq1ZU89e9Kt9Ep2edM.roa
File: k0S6lEM_XIq1ZU89e9Kt9Ep2edM.roa (raw, json)
Hash identifier: SDZAgx85Cwa3p1MQvVfBSXBXaFScCwupPLFqZu0hcoA=
Subject key identifier: 93:44:BA:94:43:3F:5C:8A:B5:65:4F:3D:7B:D2:AD:F4:4A:76:79:D3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E2ACB77AC159F8B9516126D6195FD834C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k0S6lEM_XIq1ZU89e9Kt9Ep2edM.roa
Signing time: Fri 15 May 2026 08:40:38 +0000
ROA not before: Fri 15 May 2026 08:40:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393942
IP address blocks: 213.218.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:cb:77:ac:15:9f:8b:95:16:12:6d:61:95:fd:83:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 15 08:40:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9344ba94433f5c8ab5654f3d7bd2adf44a7679d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:ab:9b:70:97:3a:a0:1a:2f:9a:e8:6d:a2:
6c:ee:39:aa:d0:a7:4e:f8:b7:42:2f:57:c6:d6:dc:
a2:35:2d:3d:55:30:6e:52:6c:ba:5d:9a:99:06:6d:
7e:c2:19:13:3a:03:1e:90:5c:8e:7d:b0:d3:0a:84:
27:a0:8c:01:a4:3e:95:ea:88:03:6a:47:3b:d5:91:
bf:6f:82:6f:ef:36:f2:4c:69:83:24:d6:89:24:0e:
e6:38:a9:f4:0b:6c:74:3f:b2:0b:e6:4a:3b:24:bb:
d2:f8:8f:e7:02:9e:f7:a7:bd:6e:fb:39:7d:23:45:
6f:6b:fb:dd:35:dc:0d:b9:34:ed:01:54:04:a2:38:
62:2c:f5:e3:33:50:48:52:5d:b7:2f:d5:63:de:07:
06:79:49:46:5e:69:a9:35:81:3a:65:65:23:3e:62:
02:ef:34:60:eb:ff:80:8c:0c:dc:16:8b:8a:c4:c1:
df:2b:8d:51:35:9d:14:20:6f:a5:4d:90:84:60:65:
1a:a0:fb:56:de:4a:1f:54:34:2a:4a:8f:7a:1d:52:
f7:b3:72:15:48:15:e5:bf:ad:ba:e1:6f:6f:aa:3a:
fc:b0:71:d5:d2:2e:0b:bc:ad:99:55:4e:64:fb:c5:
2c:bb:8a:69:e2:fc:3d:61:a8:94:5b:5a:a4:a2:fe:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:44:BA:94:43:3F:5C:8A:B5:65:4F:3D:7B:D2:AD:F4:4A:76:79:D3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k0S6lEM_XIq1ZU89e9Kt9Ep2edM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.235.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c8:5f:14:e8:72:5d:c0:f4:d0:43:ac:a1:2c:d9:1c:ed:c0:
a7:75:f1:7b:7a:52:97:24:e5:7e:ef:5f:d3:ff:56:56:26:67:
95:a9:d5:24:90:ab:7d:da:2d:8a:82:82:4d:8c:7f:96:ea:f4:
86:b8:3f:70:dd:d6:cb:c7:6c:f4:3c:6a:a6:db:eb:33:10:21:
ab:a2:f0:f7:1f:78:46:1e:b5:a4:03:e5:4b:25:f9:9e:a9:8b:
7c:b8:0b:8e:6f:ac:55:18:71:fa:cf:31:7c:b5:04:f5:6b:7f:
86:ff:61:7a:34:04:61:54:e7:75:8a:64:3a:32:03:49:d9:f8:
d8:96:01:09:c4:fb:d1:49:ef:5d:40:00:04:e8:22:56:9f:7c:
ca:10:27:d8:47:6a:7e:f1:e7:fe:e1:5e:95:53:f8:10:22:23:
a4:c7:29:0b:2f:1a:79:aa:01:9f:39:1a:2f:75:b1:ee:a2:37:
55:d1:07:58:2e:9d:5a:67:f1:cf:6b:3d:09:f5:d5:e9:31:dd:
d0:09:b5:2b:ba:06:43:da:01:ae:18:b1:ba:ae:f2:15:48:96:
26:bd:ae:e1:46:5b:45:4e:9f:da:b7:5a:62:fe:e6:a9:62:5d:
12:1d:a7:6d:4e:13:08:52:d2:16:c3:79:cc:4f:34:57:d8:34:
17:a7:61:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:40:23 2026 by rpki-client