Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m0IgvFL7-zHTIWuY_e_cQQn7J24.roa
File: m0IgvFL7-zHTIWuY_e_cQQn7J24.roa (raw, json)
Hash identifier: rkZw4Auhk4DsRLg9eX/o4y9Sjjf20Z5L1UqmKYlIm1Q=
Subject key identifier: 9B:42:20:BC:52:FB:FB:31:D3:21:6B:98:FD:EF:DC:41:09:FB:27:6E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CBD10E97EAE8C3D97C8FBA958C02139FF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m0IgvFL7-zHTIWuY_e_cQQn7J24.roa
Signing time: Thu 05 Mar 2026 08:15:27 +0000
ROA not before: Thu 05 Mar 2026 08:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 89.213.128.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:10:e9:7e:ae:8c:3d:97:c8:fb:a9:58:c0:21:39:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 5 08:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b4220bc52fbfb31d3216b98fdefdc4109fb276e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:7c:f2:bf:90:89:99:76:62:e5:d6:ae:f2:
55:b3:59:40:bd:54:a2:35:81:92:e2:8c:87:b8:90:
b9:fc:9a:95:1a:30:b2:97:13:ff:3c:67:72:c2:11:
a4:5a:45:a5:08:ce:37:3a:63:fd:9c:60:60:81:57:
9d:94:1b:91:e6:5a:23:bc:8c:4b:db:87:a7:4d:a4:
04:7e:4e:70:6f:b8:24:dc:b3:f7:76:a3:0c:81:eb:
69:62:b1:b4:51:9c:a5:7f:e6:f6:d1:23:3d:a8:0c:
16:a0:97:6c:f2:9b:34:e3:cb:e0:f3:0e:1d:ae:29:
70:85:5c:2f:3a:53:04:89:e4:31:38:48:42:94:44:
c0:62:1b:92:c5:ed:bc:07:48:9d:cc:c4:98:c9:85:
33:57:3f:f3:8a:31:73:6c:8e:74:d5:05:07:47:41:
be:e6:7a:ec:b6:a8:fd:48:bb:d2:b4:94:21:d2:f5:
9b:dd:1f:32:5c:1b:5e:fa:70:4f:b2:54:ab:aa:19:
40:99:52:8e:90:91:c6:4a:d3:13:fe:78:ec:f5:b2:
a6:c4:92:c6:7a:e5:50:19:9b:8d:11:2f:29:27:65:
ec:be:19:3f:1c:2e:22:f1:da:b1:0b:7b:ad:27:c0:
76:95:a9:f0:4d:38:ad:67:dc:48:da:34:13:6f:a0:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:42:20:BC:52:FB:FB:31:D3:21:6B:98:FD:EF:DC:41:09:FB:27:6E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m0IgvFL7-zHTIWuY_e_cQQn7J24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.128.0/24
89.213.169.0/24
89.213.176.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:69:7e:14:63:4a:8a:23:62:6c:87:5f:21:9a:75:f6:fd:c0:
ed:2c:7c:99:9c:97:84:7b:02:e5:7c:a8:88:38:d3:ca:fe:4b:
78:12:8f:a2:89:1b:74:93:e1:b2:65:00:62:78:e6:48:96:c3:
1b:88:60:83:c0:2a:08:6f:9a:82:d9:0c:14:7e:9b:b2:4d:af:
0b:8b:05:fb:b1:21:e9:6f:f3:59:74:22:45:5d:76:ed:7f:ad:
0c:cd:77:8c:19:6f:54:d7:ff:47:c4:aa:6e:2e:3e:9c:74:ce:
23:f3:44:27:45:ba:21:7e:72:e2:62:85:f7:90:8a:1a:f4:a0:
92:1e:b8:9d:e3:0b:30:89:9b:30:7e:71:89:79:42:f1:ea:e7:
67:30:66:fa:36:c6:a7:b4:79:bf:30:2e:06:2c:f3:62:a7:0b:
67:7d:2c:5d:78:b2:cd:c7:f1:41:e6:6a:50:84:5c:6b:a0:ed:
2a:08:f8:4e:0e:d1:24:d7:e9:f9:96:fb:ab:09:76:ff:56:58:
a7:c2:92:5d:dd:f3:84:ba:2d:91:fe:c0:45:b6:1d:7c:30:4f:
37:08:a4:a8:bc:ff:1b:1c:94:ad:a9:b9:48:6f:7d:3d:e5:94:
ce:18:a0:0f:17:12:fc:b7:0c:40:10:d4:c2:2f:3b:1e:c0:17:
08:ad:19:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:17:47 2026 by rpki-client