Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mupm2jhXCKJivrwg8ilKbllZ52s.roa
File: mupm2jhXCKJivrwg8ilKbllZ52s.roa (raw, json)
Hash identifier: fRX63CAUoLrXAoJYdf1djqGb86eOqN6xxvomUBSHN8I=
Subject key identifier: 9A:EA:66:DA:38:57:08:A2:62:BE:BC:20:F2:29:4A:6E:59:59:E7:6B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019C4305682FFFD375D4200B0C7EA95DAEF4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mupm2jhXCKJivrwg8ilKbllZ52s.roa
Signing time: Mon 09 Feb 2026 15:29:13 +0000
ROA not before: Mon 09 Feb 2026 15:29:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 81.5.189.0/24 maxlen: 24
89.28.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:05:68:2f:ff:d3:75:d4:20:0b:0c:7e:a9:5d:ae:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 9 15:29:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9aea66da385708a262bebc20f2294a6e5959e76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:f5:6e:0a:e7:4d:80:8d:31:8d:86:02:25:
42:59:28:65:4e:9e:b0:99:8f:e3:26:87:af:46:9e:
bf:9a:97:8f:c3:91:05:df:ee:43:3f:4e:22:33:ed:
e5:a7:14:e6:0c:7e:73:26:c3:81:e5:e3:fd:28:63:
4a:98:7f:7b:2d:8f:67:c0:5c:61:a1:b9:79:b2:f7:
b6:d9:90:98:80:36:ed:9d:31:a9:89:83:ce:92:bb:
0c:51:75:e1:d2:46:06:18:9c:07:b2:3a:a5:b5:18:
fc:13:33:6a:46:51:d7:5d:3c:5c:f5:a1:1a:34:01:
35:03:26:cd:b7:11:ba:8b:5d:a5:3a:4f:39:87:da:
b4:a1:06:8e:56:a0:8c:b3:d3:df:14:8c:96:ef:5c:
59:1d:a5:d1:45:71:3f:0c:5a:d9:82:b4:32:d1:cd:
9f:48:68:c5:ff:94:4d:d7:dc:59:10:9c:5d:47:f8:
5c:2e:85:21:d0:47:21:af:96:03:9d:53:8d:a7:a2:
d5:5e:76:2f:99:36:bc:0e:5e:ff:80:44:94:9b:91:
e8:a3:e2:1b:e1:2d:66:dd:df:93:3a:11:25:85:cd:
f4:1c:93:0c:36:04:3f:88:86:b7:55:14:50:09:de:
db:d5:29:71:1f:fe:21:95:31:9a:5b:24:58:5d:ae:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EA:66:DA:38:57:08:A2:62:BE:BC:20:F2:29:4A:6E:59:59:E7:6B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mupm2jhXCKJivrwg8ilKbllZ52s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
89.28.234.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:dd:fc:12:74:04:b7:11:77:56:db:55:8c:ae:ad:8c:9d:d5:
22:86:c6:da:65:6c:b2:da:cb:06:78:1a:7d:bc:18:5f:eb:22:
30:7a:96:b0:9a:4b:cf:c1:a0:9d:8c:e2:d8:eb:80:b3:09:41:
3d:99:54:60:da:75:07:dc:2b:86:68:91:9b:05:d3:5f:8f:5c:
c6:fe:39:26:38:5b:b8:62:85:01:dd:e5:8e:a1:34:46:54:d7:
d6:10:40:2d:8c:c8:c4:b4:9d:b5:98:87:ae:11:18:7a:22:5a:
6b:32:05:1e:84:f3:55:54:1a:d5:23:2a:6b:ba:fc:9e:ca:dd:
6c:3f:30:5d:d5:03:84:e7:0d:df:7f:b3:cb:60:e3:10:bd:29:
8c:51:a9:11:09:1f:2d:0b:7d:1c:43:d7:bb:4d:2c:3d:4c:95:
2e:a1:06:74:bd:0e:1b:96:e4:56:b4:f8:0b:57:00:7b:8f:dc:
38:88:18:28:5a:2f:6a:97:e6:67:a3:72:e7:91:c6:ce:f5:9e:
82:ab:79:08:ed:2b:7e:43:dd:57:77:8f:6c:f7:27:1b:cd:d3:
7b:e6:c1:e7:93:9b:95:b1:d9:6f:63:97:a5:1a:db:90:24:b9:
fd:1d:23:81:b1:ce:de:e6:d9:4e:87:8b:34:cf:7e:87:82:ac:
b4:25:55:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:05:25 2026 by rpki-client