Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/57cWtQUaD8BBNMC-JtlwbWN021Y.roa
File: 57cWtQUaD8BBNMC-JtlwbWN021Y.roa (raw, json)
Hash identifier: FPUhhu7bTlL7YO1bd/qQVdnfmW9NXv9Yqx7Uy4BEUj8=
Subject key identifier: E7:B7:16:B5:05:1A:0F:C0:41:34:C0:BE:26:D9:70:6D:63:74:DB:56
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D25286E2BFF96079F9025808261CA3C2D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/57cWtQUaD8BBNMC-JtlwbWN021Y.roa
Signing time: Wed 25 Mar 2026 13:21:39 +0000
ROA not before: Wed 25 Mar 2026 13:21:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 82.153.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:28:6e:2b:ff:96:07:9f:90:25:80:82:61:ca:3c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 25 13:21:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7b716b5051a0fc04134c0be26d9706d6374db56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:14:19:7f:e1:00:51:e4:81:0f:4a:16:f9:
ab:5a:53:2a:d6:3e:41:db:b9:51:7c:a5:38:2b:aa:
96:a3:62:85:bc:26:bb:1d:e5:32:4c:22:ee:1b:c0:
98:2f:fa:05:3c:d8:99:3c:24:16:c9:8a:52:c5:21:
ce:ef:de:76:09:4a:4b:7b:55:51:17:0b:7d:36:71:
da:72:57:6d:5a:b9:8e:80:98:58:eb:6d:19:67:fc:
ce:b1:98:86:7a:72:67:c6:f9:60:83:ca:b4:6d:ed:
c0:a0:0e:35:31:02:96:85:b5:1b:74:1b:19:80:d4:
7f:ee:cf:ef:3b:83:5c:2a:c5:00:e3:a2:47:e5:98:
c6:1c:26:b7:88:d1:fc:3b:ae:86:51:90:e3:68:d0:
c9:76:bb:74:5c:6e:48:76:18:cf:19:d6:06:a3:f6:
c2:5a:74:95:f0:a6:d0:3d:6a:1d:49:a0:b2:41:e4:
72:22:58:5c:c8:83:ec:19:bb:80:12:30:f2:5a:ee:
6c:c9:7a:79:65:50:d1:a1:e4:51:96:96:17:16:f4:
c6:1b:d7:90:22:53:e0:18:f0:58:e9:54:97:49:bf:
d2:91:b6:de:63:48:12:f1:87:3a:c0:68:18:04:06:
06:8d:8c:aa:b8:fa:0f:bc:91:be:ab:21:ad:95:83:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B7:16:B5:05:1A:0F:C0:41:34:C0:BE:26:D9:70:6D:63:74:DB:56
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/57cWtQUaD8BBNMC-JtlwbWN021Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.97.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ae:69:d8:22:21:31:f2:7a:8d:cb:e3:3a:7a:29:cb:32:cc:
ad:47:8e:7c:43:cf:66:e6:0b:b5:e2:19:62:48:c9:89:21:b2:
9e:df:15:f1:e7:eb:41:44:c4:a9:a5:c9:26:3f:76:38:a8:02:
b8:2b:67:c9:ce:0c:bf:5c:a6:f0:aa:28:08:4e:50:83:16:12:
c4:fa:2b:4f:2c:e9:90:60:cc:7b:80:25:a8:9f:25:8f:2d:c3:
2f:3c:1b:6c:46:40:76:ac:33:6e:92:57:27:c7:48:d7:aa:95:
90:74:67:d4:84:f4:a4:f9:8a:53:a5:c3:0c:cc:c8:25:29:52:
78:2a:72:91:2a:4b:bd:ca:52:4c:56:4a:16:ad:99:83:6b:16:
26:6b:f5:18:b6:cf:6c:a0:78:2c:34:d6:5d:db:d8:14:78:00:
09:cd:04:e6:77:6c:01:0e:77:c6:7f:3b:e1:23:cf:11:0f:a8:
e8:19:c2:7a:0a:00:a3:7f:bb:2b:fe:e3:3a:96:1c:c7:bb:df:
e9:8c:34:a6:5e:89:36:a0:4a:f4:28:67:4b:21:24:41:09:78:
ba:d3:a0:a4:02:29:93:ec:68:01:c1:98:10:7a:4d:4e:18:f0:
9f:ff:4e:74:7b:80:05:39:59:23:ef:2a:b8:9f:01:93:74:be:
3b:c8:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:11 2026 by rpki-client