Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/oP5ts0FtfK91btZ3P7x-bBdVAcw.roa
File: oP5ts0FtfK91btZ3P7x-bBdVAcw.roa (raw, json)
Hash identifier: Hav/3aYz5+a57hb3pfiEZH2IAAqH/VmCtBV7UH/ck2A=
Subject key identifier: A0:FE:6D:B3:41:6D:7C:AF:75:6E:D6:77:3F:BC:7E:6C:17:55:01:CC
Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial: 019E49AFC61A1494546478C799037F69261D
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/oP5ts0FtfK91btZ3P7x-bBdVAcw.roa
Signing time: Thu 21 May 2026 08:38:36 +0000
ROA not before: Thu 21 May 2026 08:38:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44152
IP address blocks: 82.98.75.80/29 maxlen: 32
82.98.90.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:af:c6:1a:14:94:54:64:78:c7:99:03:7f:69:26:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Validity
Not Before: May 21 08:38:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0fe6db3416d7caf756ed6773fbc7e6c175501cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:a0:8f:31:03:44:ad:e7:d8:cc:86:4c:ba:
6d:6c:89:85:94:53:05:03:e9:71:33:86:be:c9:89:
84:51:5b:54:8c:9a:c9:b6:8d:9c:1e:67:e8:a5:6f:
cf:7f:d6:c5:0c:98:8b:94:03:d4:bd:3b:45:61:11:
61:6e:32:93:bf:6a:79:bb:f1:e1:54:7c:72:1b:fc:
5e:9c:a2:3c:4e:0f:8a:eb:1f:e4:5d:04:e2:7f:99:
1f:0b:ef:5b:64:0e:ae:c4:ed:b4:df:41:ca:47:dc:
11:c6:cd:e9:35:b6:53:b9:bf:97:c4:8d:b7:d6:ae:
eb:8b:72:91:1d:3f:36:96:00:ec:e8:e7:db:0e:c0:
a1:a0:c1:31:c7:2c:80:c0:48:34:df:b1:7f:8e:be:
0e:41:b7:4e:58:80:04:76:83:9a:0c:b6:3e:8d:ef:
81:2b:f7:4c:63:b9:b5:f4:e8:3a:be:4f:79:f3:05:
be:19:f5:f4:9e:bd:15:98:31:e7:8a:4f:4f:43:e1:
91:cd:e4:db:f6:f6:d3:51:59:82:7b:91:ca:1b:b5:
e8:65:9b:17:62:24:e1:69:9d:55:d8:b4:7a:db:37:
b6:46:d7:e3:f0:86:a9:ba:23:79:81:45:b2:9e:d9:
ee:f0:ee:27:43:08:73:fe:b6:5a:88:91:9d:93:aa:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FE:6D:B3:41:6D:7C:AF:75:6E:D6:77:3F:BC:7E:6C:17:55:01:CC
X509v3 Authority Key Identifier:
keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/oP5ts0FtfK91btZ3P7x-bBdVAcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.75.80/29
82.98.90.0/24
Signature Algorithm: sha256WithRSAEncryption
20:2d:9b:f8:11:b6:02:c6:8f:51:5a:b2:e2:cc:70:38:41:3b:
4e:1c:5a:f2:3a:ca:17:65:e6:27:76:7f:f5:67:34:2a:ca:62:
00:e9:63:81:11:4c:d6:5b:30:9e:5c:69:8f:54:27:ba:fe:89:
76:be:5c:b0:ac:29:d2:ef:3f:97:2f:0e:6b:aa:89:c6:c9:a5:
0f:c7:51:1f:97:e6:78:92:75:66:e5:5e:19:08:51:e7:12:d4:
95:da:da:06:f9:27:de:e2:2d:7d:43:2d:a6:ba:56:3e:3d:7b:
a2:32:f5:35:bc:27:85:cb:09:d0:13:10:85:5d:cd:22:7b:a5:
84:19:64:a8:34:58:77:6f:16:3d:b2:e9:68:77:79:ef:78:3d:
2e:be:78:be:a8:ab:26:5b:9d:79:ee:16:a2:da:1b:8e:f7:20:
5a:ac:5f:05:c9:f4:c4:b8:cd:e9:0e:18:d3:a5:6e:61:ce:2b:
a4:9d:37:62:18:ba:9a:5a:54:fa:fe:07:c8:d6:6c:66:c5:fb:
9e:d0:56:b3:47:5f:28:c3:f7:8d:04:64:11:ce:95:a1:bc:43:
3c:c5:ec:19:d0:81:40:3a:3b:84:2f:c6:61:af:54:f0:a3:d7:
f6:65:3c:ac:d3:cd:68:82:17:f7:45:f2:47:21:78:d5:dd:1d:
28:f4:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:23:32 2026 by rpki-client