Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7Bcp1ZS2gjEplU8t_nCuxcaoj8s.roa
File: 7Bcp1ZS2gjEplU8t_nCuxcaoj8s.roa (raw, json)
Hash identifier: BRa4VXATf0q6vJhWNRbwscETjKh+jhmwkcjcwHE8WBI=
Subject key identifier: EC:17:29:D5:94:B6:82:31:29:95:4F:2D:FE:70:AE:C5:C6:A8:8F:CB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D05925A2321A4332641E6F8FA12513A9B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7Bcp1ZS2gjEplU8t_nCuxcaoj8s.roa
Signing time: Thu 19 Mar 2026 10:09:30 +0000
ROA not before: Thu 19 Mar 2026 10:09:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9232
IP address blocks: 79.99.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:92:5a:23:21:a4:33:26:41:e6:f8:fa:12:51:3a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 19 10:09:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec1729d594b6823129954f2dfe70aec5c6a88fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:8b:2e:88:b5:03:7a:f3:d8:92:e7:6b:8d:
e7:8b:87:4e:d2:56:9d:f7:0d:9d:0d:02:8c:3e:00:
58:74:ce:a2:72:10:cd:fe:89:af:00:35:77:42:09:
df:d4:69:25:53:fc:0c:4f:8f:d1:a4:fd:5b:5a:e6:
06:57:1f:d9:75:5d:9e:7f:e6:d1:04:57:97:89:ba:
b3:7c:a1:2a:7a:43:7b:dc:5a:da:77:6b:13:2a:07:
8c:27:a2:91:20:06:e2:78:22:4c:e2:76:2a:49:ac:
bf:93:95:a6:f1:99:c7:0d:94:f5:54:97:9b:ab:b3:
45:26:1a:88:47:33:62:1d:14:e9:4c:91:4a:3e:53:
7a:3f:b7:92:97:a6:7a:ed:29:0b:45:8b:a0:22:e5:
d1:21:62:c0:de:b0:9b:17:a4:02:0f:7f:5e:1a:ad:
88:af:2c:e1:19:c3:cb:fb:f9:c3:6a:7b:49:35:8f:
d8:9f:15:0a:b1:27:8b:79:c5:c5:4f:1a:03:d1:fc:
31:f5:0b:a4:fc:da:02:9b:18:10:2d:f1:32:eb:8f:
2b:f1:8b:df:6f:65:c1:eb:36:b6:65:5d:94:cc:28:
db:86:43:50:9f:fe:d0:5f:47:86:76:a4:d2:4e:f3:
a6:26:46:4e:fc:5a:7b:9c:f6:bb:b0:f7:d0:3a:c6:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:17:29:D5:94:B6:82:31:29:95:4F:2D:FE:70:AE:C5:C6:A8:8F:CB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7Bcp1ZS2gjEplU8t_nCuxcaoj8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.146.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3d:3f:2a:a1:8e:79:fb:95:18:e9:a0:7c:61:1b:9c:8d:01:
85:b2:96:05:e4:77:08:db:18:8f:da:69:6b:cc:b3:aa:89:a2:
e8:99:63:ed:d5:95:70:ab:71:e5:af:2f:3e:8b:4f:7f:05:63:
ae:49:ed:d3:7e:c6:ae:d0:5e:2a:ad:9d:e8:40:2e:b6:7d:68:
e7:f8:bc:78:ac:0e:d4:19:8a:2a:f1:b7:78:89:dc:2b:1d:d1:
9a:d1:a5:a3:58:5a:27:0e:95:07:4d:90:ba:89:cf:ce:42:a3:
2d:01:3e:bc:a2:de:b2:ee:48:e1:b3:e4:bb:04:82:b0:73:5c:
c7:d8:dc:79:cb:d1:7a:07:93:bb:d2:57:d6:05:60:d4:c5:35:
24:88:6b:e5:a8:33:18:6f:93:0d:f0:bb:dc:c1:3e:6d:94:a3:
49:26:a8:35:4e:98:c2:88:6e:24:b6:91:c9:53:40:14:9e:a7:
cb:69:fa:8d:d4:d0:ef:c3:91:e6:e5:3d:c8:73:3c:7b:a7:9a:
d7:eb:95:eb:70:3e:bd:49:40:10:4c:85:d7:d8:16:0c:61:7a:
e7:01:b5:f7:06:ae:28:85:2c:27:7d:44:a2:1d:ea:86:e8:5e:
d0:9a:5d:b2:30:1e:57:af:02:55:0a:87:48:d1:99:fb:57:e4:
c6:0b:09:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:32:13 2026 by rpki-client