Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AugT4IhuAJTEberq5TbepUIDepA.roa
File: AugT4IhuAJTEberq5TbepUIDepA.roa (raw, json)
Hash identifier: vNy3iHkdpU1zcALqSH2vFszYBedPE5Qgts6yjbtV6BA=
Subject key identifier: 02:E8:13:E0:88:6E:00:94:C4:6D:EA:EA:E5:36:DE:A5:42:03:7A:90
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E0663A72CEAE9723DD50F3F542AC2FED3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AugT4IhuAJTEberq5TbepUIDepA.roa
Signing time: Fri 08 May 2026 07:00:54 +0000
ROA not before: Fri 08 May 2026 07:00:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151389
IP address blocks: 82.152.120.0/24 maxlen: 24
82.153.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:63:a7:2c:ea:e9:72:3d:d5:0f:3f:54:2a:c2:fe:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 8 07:00:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02e813e0886e0094c46deaeae536dea542037a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:ae:d8:57:37:1e:4f:3c:ca:53:03:c1:2a:
0b:8e:70:af:b7:54:88:85:2f:27:94:7e:cc:f3:16:
ed:ac:47:49:fe:ed:12:d3:dd:03:08:29:15:17:42:
fe:57:fa:3f:b6:1a:f9:85:bc:f9:76:9f:f5:9d:26:
36:c8:bd:f0:b1:a6:85:bc:60:eb:f3:72:67:c9:1e:
0f:f9:70:d0:04:4e:78:fe:66:b5:44:37:20:00:19:
06:1d:e0:f7:55:71:d6:13:3d:54:35:24:1b:9d:02:
40:7c:ed:d0:fb:57:af:1a:c2:11:c7:d9:35:f3:59:
7a:d2:1f:dd:c1:83:c1:40:92:d2:15:83:c3:7d:09:
0b:99:ce:20:63:01:31:f0:13:24:5d:5b:37:b0:6f:
ad:5e:c7:ef:3f:d1:9b:3b:86:48:1d:47:4a:04:2c:
96:46:df:3b:fc:dc:25:48:5e:2d:4c:91:14:27:22:
c0:05:af:24:bc:3a:bf:9b:8e:99:cc:31:a1:fe:af:
75:ee:2c:5c:24:58:31:80:74:9a:5f:11:a6:ef:ba:
11:a2:92:7e:e0:8e:8b:0f:eb:7a:91:f0:66:ca:f5:
6d:15:f7:7e:5e:b6:95:28:42:26:34:35:33:47:c2:
36:0f:50:3c:a8:dc:59:06:c4:03:4e:a8:34:19:d3:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E8:13:E0:88:6E:00:94:C4:6D:EA:EA:E5:36:DE:A5:42:03:7A:90
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AugT4IhuAJTEberq5TbepUIDepA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.120.0/24
82.153.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:06:10:e8:57:a5:a3:ef:96:9e:86:90:78:4d:73:8c:8f:7e:
7f:79:65:cd:94:cd:f1:0a:4b:09:97:77:87:44:dd:2c:48:00:
84:e1:13:a1:6f:fc:16:63:49:b9:70:75:a8:d5:42:fe:0c:fe:
32:d0:1a:49:3c:85:29:e0:36:3a:62:58:9f:c8:28:32:54:b5:
32:32:2b:de:ad:de:08:0e:4c:09:ee:bc:6b:e7:b2:2e:18:69:
da:06:95:a5:5f:68:f6:be:7f:46:44:d0:14:71:e4:2f:c1:f5:
f7:11:ba:cf:ed:d1:ba:15:c6:af:d6:17:07:1e:e9:d9:f7:ba:
da:a5:a9:42:b4:39:e2:77:a4:eb:96:52:4f:a0:6b:f2:c3:4e:
02:5c:6a:f0:73:04:3a:2f:a5:fd:53:d6:e0:10:7b:a9:60:2c:
e0:64:cb:be:bf:aa:1a:1f:cc:30:36:ac:50:15:a8:2c:e4:64:
40:78:06:13:f2:d9:dd:90:58:11:95:2c:fc:44:8c:9b:21:ad:
3c:89:4d:ad:85:1f:e3:8f:2c:89:c7:f1:5a:6f:8c:5f:db:0e:
29:3b:0f:85:2a:24:da:41:f2:34:cf:42:17:65:8d:96:98:0f:
da:6d:c1:0a:9d:89:c4:29:e7:a6:1b:95:0c:ab:9d:59:54:e5:
1a:12:05:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:07:29 2026 by rpki-client