Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rgEbvGhAA93vFR1aMEpmwdBuHVY.roa
File: rgEbvGhAA93vFR1aMEpmwdBuHVY.roa (raw, json)
Hash identifier: vQ3u17EjyTIQqaRPn2sM61l+ynGog8vrwoKkdG/h/I0=
Subject key identifier: AE:01:1B:BC:68:40:03:DD:EF:15:1D:5A:30:4A:66:C1:D0:6E:1D:56
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D447B367116E7CEA591221680F16AD5FF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rgEbvGhAA93vFR1aMEpmwdBuHVY.roa
Signing time: Tue 31 Mar 2026 15:20:18 +0000
ROA not before: Tue 31 Mar 2026 15:20:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402203
IP address blocks: 81.5.141.0/24 maxlen: 24
89.31.239.0/24 maxlen: 24
89.213.4.0/24 maxlen: 24
213.218.238.0/24 maxlen: 24
217.145.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 20:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:7b:36:71:16:e7:ce:a5:91:22:16:80:f1:6a:d5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 31 15:20:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae011bbc684003ddef151d5a304a66c1d06e1d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:28:a9:74:f7:46:7a:81:bf:6b:6c:fa:ce:
80:91:cd:29:4e:12:d7:1f:12:3e:22:d1:b3:7f:b6:
b4:5f:3e:18:a5:18:90:fe:69:c8:0a:e2:5f:a8:31:
1b:e5:cd:0a:b7:90:8d:c5:64:da:23:3a:93:05:88:
31:ed:5b:c5:2f:34:1c:db:fa:d3:20:41:45:70:bd:
d5:69:78:36:16:2e:f3:6d:59:0d:bb:72:4a:ec:c0:
7f:76:64:24:6f:fb:9b:4e:e7:f1:eb:df:e9:ef:75:
7f:86:0d:d4:53:2d:76:64:fe:2d:59:80:b6:a7:1f:
54:bc:ae:29:5d:69:90:04:33:a1:bd:c9:28:ed:1d:
45:18:c0:ac:75:d8:17:dd:40:f7:f1:5e:3a:95:5b:
44:b0:e8:10:8f:87:80:d3:cb:ab:1d:d6:b0:34:95:
82:d1:ec:a2:8f:e0:be:69:7a:b7:48:db:23:53:c8:
a9:05:6c:be:37:68:72:c7:05:42:23:22:a0:e3:a9:
55:92:9e:12:6f:41:35:26:76:2d:ec:b3:ef:01:6f:
ce:21:35:f5:23:2d:92:d2:41:c8:95:c1:a7:54:ce:
08:b5:5d:18:6e:7c:79:cb:5c:83:66:97:5b:c0:f0:
ad:ad:b7:06:f8:b8:d3:e0:71:2b:17:22:cb:03:a1:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:01:1B:BC:68:40:03:DD:EF:15:1D:5A:30:4A:66:C1:D0:6E:1D:56
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rgEbvGhAA93vFR1aMEpmwdBuHVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.141.0/24
89.31.239.0/24
89.213.4.0/24
213.218.238.0/24
217.145.75.0/24
Signature Algorithm: sha256WithRSAEncryption
92:2d:d5:8b:13:cf:8d:f5:17:ed:a9:d1:87:9e:cf:47:ff:27:
4d:bd:fb:9e:f2:52:8e:de:3c:d7:90:dd:a2:34:8c:28:2a:f5:
f8:bf:4e:f6:d1:43:de:a6:54:6e:e3:3c:73:4e:2f:c5:74:ba:
d8:7d:68:39:75:42:b3:ba:bb:7f:3a:ff:82:17:95:23:29:71:
a4:d8:da:5c:64:b4:b8:0e:f3:ca:a5:55:e5:6f:69:90:b7:63:
e8:da:75:43:ad:c6:41:24:c8:83:e4:ff:5c:c5:11:a8:ad:59:
c7:81:be:6d:fc:b1:b5:22:bf:2b:7d:66:cf:e4:69:5c:ff:ce:
53:2d:a8:47:0e:0c:97:ed:47:cc:52:b3:1d:ae:1d:07:8a:c2:
8d:4c:eb:e3:cc:89:ff:21:8e:ec:cf:67:c5:69:06:59:1c:64:
0e:d1:be:0c:9b:52:3d:d7:6d:79:d9:af:bc:7a:57:e4:4d:3f:
42:9a:c5:20:0b:9e:61:14:da:f5:63:0a:1b:52:04:78:6a:91:
08:6d:94:02:0c:ea:61:43:5b:8c:1a:06:71:1b:4b:22:df:a6:
24:78:68:a5:f1:81:f9:ad:16:b1:de:6b:8e:47:3e:cd:b1:39:
f1:b3:dd:be:49:86:12:6d:e3:a5:98:29:75:9a:1b:da:ed:a6:
48:be:dc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 05:18:53 2026 by rpki-client