Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/p0F1Di07cfHgVtNuzv6FJ4iFClI.roa
File: p0F1Di07cfHgVtNuzv6FJ4iFClI.roa (raw, json)
Hash identifier: 9lY1NiQxftdsmh+IAe0uysjcwZzDj+ipCzGUQqD681I=
Subject key identifier: A7:41:75:0E:2D:3B:71:F1:E0:56:D3:6E:CE:FE:85:27:88:85:0A:52
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019CD2A5DC367CC3CCAF851154B1138CF5BB
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/p0F1Di07cfHgVtNuzv6FJ4iFClI.roa
Signing time: Mon 09 Mar 2026 12:50:10 +0000
ROA not before: Mon 09 Mar 2026 12:50:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.117.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:a5:dc:36:7c:c3:cc:af:85:11:54:b1:13:8c:f5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Mar 9 12:50:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a741750e2d3b71f1e056d36ecefe852788850a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:85:90:0e:ff:04:88:8a:bb:28:25:5c:b6:
ba:4c:9e:2f:48:8a:88:f5:65:4c:38:21:09:78:32:
4c:c8:14:1f:7b:e0:78:f0:19:2a:c6:34:d2:cc:4b:
50:ff:bd:65:56:f0:a8:d4:6f:ce:9f:6b:1d:52:be:
24:a9:22:75:ff:42:d1:d4:a3:28:00:bb:02:e7:c1:
71:e9:59:46:54:de:54:47:b1:bd:45:d5:74:a4:6d:
25:20:dc:44:f1:ff:53:47:3b:56:4a:3f:6b:ce:22:
d1:6f:30:53:1d:1f:da:29:69:16:d9:9f:dc:4b:e7:
83:f8:79:a4:2a:ec:c6:fa:3a:74:5d:15:77:41:d8:
8a:f7:ba:e6:c0:74:f5:48:c0:e4:ca:2c:3d:02:bd:
a4:e6:19:98:10:a9:0a:2d:89:8d:b5:b9:3f:cf:46:
ef:8d:4f:b7:3e:73:74:1e:ea:72:0d:3b:fc:ed:23:
2a:db:30:7c:6c:c8:d2:e3:7b:54:32:4d:14:ce:6b:
fd:97:7c:e9:f0:de:6d:3a:77:e3:7b:31:34:a2:0b:
44:8a:6c:92:dc:1b:ae:58:5b:21:3a:45:1e:67:d7:
20:47:10:cf:15:e5:65:ae:54:61:e4:e0:a4:cd:43:
94:29:ad:5e:2b:5d:99:59:86:ab:75:18:75:77:ad:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:41:75:0E:2D:3B:71:F1:E0:56:D3:6E:CE:FE:85:27:88:85:0A:52
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/p0F1Di07cfHgVtNuzv6FJ4iFClI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.252.0/24
Signature Algorithm: sha256WithRSAEncryption
27:48:01:a4:5e:fb:98:3a:5a:34:8e:37:04:8d:4d:bf:60:15:
c9:37:42:68:57:ae:13:dc:ab:68:15:7f:ff:33:5a:8a:83:f8:
b4:1e:73:5f:e1:55:c9:73:8f:98:c8:51:65:db:3b:d9:af:e3:
70:9d:8c:ec:55:c8:34:e3:02:8c:c6:c1:fa:40:09:b4:18:70:
45:be:3b:f0:d1:8a:30:f8:8c:47:53:c0:87:b3:41:23:fd:c4:
3a:39:49:8e:71:87:eb:fc:d4:a6:e9:cc:e5:ff:52:b2:4e:48:
99:5f:5d:c1:d9:24:5d:5c:a5:7f:00:c7:9c:1c:a0:94:24:87:
ae:35:87:92:1a:7e:c6:95:cb:19:d4:35:89:a8:44:f7:20:45:
8d:b2:fa:8c:c9:cd:a4:ac:dd:c1:9d:4a:e1:58:0a:e9:11:f3:
0a:39:77:39:e1:ed:28:bc:1e:53:4c:98:45:93:62:0e:b7:ee:
22:0c:51:c6:d9:df:d1:77:92:4b:5a:7b:49:72:c5:a7:aa:53:
de:dc:8e:5e:3e:37:20:5a:6f:c0:02:40:b9:f7:f6:ec:7e:f9:
4d:82:90:3e:3c:35:ce:ef:d6:d3:57:cd:57:d6:ba:6f:e4:f9:
e2:14:87:d7:75:a6:40:73:ee:2b:93:96:69:e0:46:8f:42:4d:
78:57:d5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:06:33 2026 by rpki-client