Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BhyprkPafPuSeBhxm6qb4lm8-ek.roa
File: BhyprkPafPuSeBhxm6qb4lm8-ek.roa (raw, json)
Hash identifier: QZ2gcyMz1JcxKUhAKpiw4kZxzOA544cHou0KgBzVPw0=
Subject key identifier: 06:1C:A9:AE:43:DA:7C:FB:92:78:18:71:9B:AA:9B:E2:59:BC:F9:E9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CE6A83DE27B7A3FF7A00F5B5D1E2DD9AF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BhyprkPafPuSeBhxm6qb4lm8-ek.roa
Signing time: Fri 13 Mar 2026 10:05:11 +0000
ROA not before: Fri 13 Mar 2026 10:05:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 89.213.112.0/24 maxlen: 24
89.213.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a8:3d:e2:7b:7a:3f:f7:a0:0f:5b:5d:1e:2d:d9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 13 10:05:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=061ca9ae43da7cfb927818719baa9be259bcf9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:31:94:90:2c:e5:24:65:3c:0a:c3:28:1e:
cc:e9:ec:0f:b6:1f:8e:ed:24:d9:6c:06:1e:32:f1:
26:4f:b2:1c:ab:80:04:78:eb:ab:cc:09:29:6e:19:
2c:04:81:b5:b7:7b:57:22:79:f7:76:f1:88:f6:ba:
84:ee:af:36:62:b1:39:f9:cd:b6:d8:13:a1:2b:41:
db:6a:ed:7f:69:8a:da:65:6e:52:9d:10:3c:e5:97:
83:9a:b5:e8:5c:a4:7e:36:f9:2e:0f:bc:35:6c:46:
a6:b9:cf:e9:74:78:0a:6b:4e:1a:68:7a:4d:5f:e0:
d8:17:b2:b7:33:fa:1e:fd:cd:ec:9e:59:6c:77:0a:
88:a5:2c:3e:34:23:58:4c:06:7c:85:1e:4e:18:4d:
c9:11:eb:a0:55:81:bf:df:b0:74:8c:08:88:b3:9c:
9d:c8:15:ec:33:a8:dc:89:76:81:74:dd:fb:10:88:
c3:c3:69:47:f6:c1:09:54:93:50:a3:6e:62:e0:f9:
c1:57:d1:e3:03:61:32:70:5d:16:6a:a8:67:72:b7:
aa:01:c7:a3:dc:57:7d:11:30:2d:38:a9:36:06:47:
95:df:ab:d6:aa:30:3b:8b:49:ee:e3:71:8a:0c:c8:
07:4a:e7:0d:ac:d5:af:91:d5:4f:3b:0a:48:c9:42:
02:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1C:A9:AE:43:DA:7C:FB:92:78:18:71:9B:AA:9B:E2:59:BC:F9:E9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BhyprkPafPuSeBhxm6qb4lm8-ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.112.0/24
89.213.114.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:3b:d9:f4:f3:9d:f4:e7:fd:57:a0:7f:28:29:bc:14:4e:c8:
4f:a9:5d:d8:0f:73:19:f0:55:6f:81:c8:d2:17:74:2b:91:ed:
b2:be:95:55:3f:28:12:3b:99:08:f7:b8:05:a3:ab:de:67:07:
01:ac:a1:23:59:13:17:98:fa:c0:dc:8e:25:fd:f4:d5:b9:3b:
ee:db:2e:69:3d:d3:59:3a:27:64:80:46:22:77:94:78:7a:6a:
a5:53:8a:72:01:ed:d9:88:8d:f2:63:89:7f:48:90:e6:66:cc:
fa:44:c4:90:0a:e8:3b:1b:4c:4d:cd:a6:f8:0a:70:c4:03:67:
f1:2c:9f:3d:4f:b4:5b:58:f7:55:27:cb:6d:b5:7a:01:20:51:
9f:12:0e:00:24:f4:5f:76:50:e7:dc:f7:ce:b1:e0:90:a8:11:
44:52:e1:5c:5d:6f:90:73:2b:48:9d:d5:7e:b4:1f:84:32:7d:
6e:f2:aa:24:59:ad:42:23:37:ca:54:a0:98:de:2c:18:ca:00:
d9:33:9c:39:7c:fe:0d:a9:2c:90:62:24:8d:ac:8f:12:36:42:
19:2d:8e:c5:f2:c1:b5:ba:6d:b9:dc:ca:75:7c:b5:b8:d1:07:
94:15:1c:eb:53:d2:7e:ea:15:c2:89:32:8a:1c:f7:31:97:1c:
92:42:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:14 2026 by rpki-client