Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/li28iVdg4kdT1C39jid82daa-Sw.roa
File: li28iVdg4kdT1C39jid82daa-Sw.roa (raw, json)
Hash identifier: PH1P8v0fLlZYm2P3HhhwAimRnXXM7Tc1ZnqGjhIFt0o=
Subject key identifier: 96:2D:BC:89:57:60:E2:47:53:D4:2D:FD:8E:27:7C:D9:D6:9A:F9:2C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CB7D39E553A5A8994B6CEC4B93125F836
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/li28iVdg4kdT1C39jid82daa-Sw.roa
Signing time: Wed 04 Mar 2026 07:50:24 +0000
ROA not before: Wed 04 Mar 2026 07:50:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395374
IP address blocks: 213.130.134.0/24 maxlen: 24
213.218.228.0/24 maxlen: 24
213.218.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:d3:9e:55:3a:5a:89:94:b6:ce:c4:b9:31:25:f8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 4 07:50:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=962dbc895760e24753d42dfd8e277cd9d69af92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:63:c2:ca:a8:38:54:45:65:96:d5:94:53:bc:
58:d4:2d:15:9a:52:b0:c2:69:58:8c:5d:ef:68:5d:
9a:df:e6:03:c0:d0:83:df:97:83:e7:cf:f7:d8:9e:
98:00:2e:03:1d:84:de:53:bc:54:d4:33:18:1b:a2:
21:3c:ad:82:7f:79:61:eb:13:ea:0f:59:cf:af:c5:
f1:12:97:51:0f:40:dc:6b:09:ed:fb:0b:fd:ec:53:
87:5b:77:a7:39:70:e6:fe:84:2e:bb:b1:cf:5b:f3:
9c:13:b0:42:85:e4:75:e4:26:b4:21:2c:de:2f:e9:
be:28:8e:e8:41:44:8e:17:ff:83:62:87:a1:57:b7:
15:85:22:7f:c7:f6:22:d9:a3:a4:6a:3a:db:cb:c3:
6d:bc:39:ac:bc:9b:c3:f3:f1:d8:3d:77:f8:06:8a:
e8:5d:53:7f:64:d8:29:a1:45:7a:71:94:80:64:cb:
be:b0:d3:84:b9:13:d3:11:f8:bd:3e:bb:e5:92:17:
89:91:83:a6:96:3c:24:ac:ee:56:e9:0c:ba:58:d6:
39:36:41:82:5b:ae:a5:f4:8a:f0:b4:7b:7b:ec:b4:
13:ab:ad:48:ef:21:d3:73:92:14:60:81:32:dd:80:
09:40:45:40:89:f7:59:59:b4:31:4c:68:08:d2:36:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2D:BC:89:57:60:E2:47:53:D4:2D:FD:8E:27:7C:D9:D6:9A:F9:2C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/li28iVdg4kdT1C39jid82daa-Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.134.0/24
213.218.228.0/24
213.218.255.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d4:02:bf:06:de:69:aa:2b:b1:5e:84:cd:db:9d:ce:80:17:
2a:00:98:da:46:17:09:e9:f5:b8:af:13:9b:14:75:f8:cc:a3:
31:bc:27:9b:6b:32:8e:95:33:f7:9a:30:99:cd:09:01:9d:fb:
21:ed:51:ce:f9:09:5a:fe:0d:0c:9b:a4:fb:94:32:4b:60:f3:
e2:00:63:fa:2f:b3:ea:23:26:e7:79:6a:5f:e8:57:6c:c4:8d:
ba:36:1e:57:c9:87:79:ef:1b:b2:81:b8:e7:f8:be:ef:94:19:
d3:63:05:6b:7c:57:a6:08:6b:7f:43:99:97:3d:b5:08:b4:1e:
2e:26:f0:bd:2d:db:e0:3b:78:3f:51:8b:59:d1:52:69:5e:1d:
a0:59:16:75:93:ca:86:93:1e:83:46:6b:e7:c6:d3:10:68:22:
23:69:bf:52:5f:39:63:83:d0:89:68:c7:69:75:61:80:9a:a4:
02:41:bf:4b:db:cf:a3:0a:7c:c1:ee:40:b3:28:eb:09:d7:e6:
c1:cc:94:7b:08:e7:cb:ed:08:74:ca:b9:e9:2e:9b:71:41:b1:
25:db:4e:db:ca:e5:6f:83:c9:d6:5d:d9:9a:a5:01:c2:50:9c:
2b:79:5c:77:31:78:11:61:82:c5:d7:cf:c0:e5:26:7c:d6:30:
14:3d:82:d6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZy3055VOlqJlLbOxLkxJfg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwMzA0MDc1MDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjJkYmM4OTU3NjBlMjQ3NTNkNDJkZmQ4ZTI3N2NkOWQ2OWFmOTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62PCyqg4VEVlltWUU7xY1C0VmlKw
wmlYjF3vaF2a3+YDwNCD35eD58/32J6YAC4DHYTeU7xU1DMYG6IhPK2Cf3lh6xPq
D1nPr8XxEpdRD0Dcawnt+wv97FOHW3enOXDm/oQuu7HPW/OcE7BCheR15Ca0ISze
L+m+KI7oQUSOF/+DYoehV7cVhSJ/x/Yi2aOkajrby8NtvDmsvJvD8/HYPXf4Boro
XVN/ZNgpoUV6cZSAZMu+sNOEuRPTEfi9PrvlkheJkYOmljwkrO5W6Qy6WNY5NkGC
W66l9IrwtHt77LQTq61I7yHTc5IUYIEy3YAJQEVAifdZWbQxTGgI0jb7/wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJYtvIlXYOJHU9Qt/Y4nfNnWmvksMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvbGkyOGlWZGc0a2RUMUMzOWppZDgyZGFhLVN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1YKGAwQA
1drkAwQA1dr/MA0GCSqGSIb3DQEBCwUAA4IBAQAY1AK/Bt5pqiuxXoTN253OgBcq
AJjaRhcJ6fW4rxObFHX4zKMxvCebazKOlTP3mjCZzQkBnfsh7VHO+Qla/g0Mm6T7
lDJLYPPiAGP6L7PqIybneWpf6FdsxI26Nh5XyYd57xuygbjn+L7vlBnTYwVrfFem
CGt/Q5mXPbUItB4uJvC9LdvgO3g/UYtZ0VJpXh2gWRZ1k8qGkx6DRmvnxtMQaCIj
ab9SXzljg9CJaMdpdWGAmqQCQb9L28+jCnzB7kCzKOsJ1+bBzJR7COfL7Qh0yrnp
LptxQbEl207byuVvg8nWXdmapQHCUJwreVx3MXgRYYLF18/A5SZ81jAUPYLW
-----END CERTIFICATE-----
Generated at Fri Mar 13 03:24:26 2026 by rpki-client