Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EAAqhS69dgAeBHZN5pTDlQkNwPA.roa
File: EAAqhS69dgAeBHZN5pTDlQkNwPA.roa (raw, json)
Hash identifier: 8zHAZZKkQSsVfsllZ5uEm+Y0lUqlfUZFpqz5c5s1IxE=
Subject key identifier: 10:00:2A:85:2E:BD:76:00:1E:04:76:4D:E6:94:C3:95:09:0D:C0:F0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DFDBE1242121ABE20B37738ABE0697A96
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EAAqhS69dgAeBHZN5pTDlQkNwPA.roa
Signing time: Wed 06 May 2026 14:43:05 +0000
ROA not before: Wed 06 May 2026 14:43:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400031
IP address blocks: 82.152.140.0/24 maxlen: 24
82.152.179.0/24 maxlen: 24
82.153.35.0/24 maxlen: 24
82.153.134.0/24 maxlen: 24
82.153.207.0/24 maxlen: 24
82.153.217.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.50.0/24 maxlen: 24
89.213.51.0/24 maxlen: 24
89.213.112.0/24 maxlen: 24
89.213.114.0/24 maxlen: 24
89.213.117.0/24 maxlen: 24
89.213.121.0/24 maxlen: 24
89.213.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:be:12:42:12:1a:be:20:b3:77:38:ab:e0:69:7a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 6 14:43:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10002a852ebd76001e04764de694c395090dc0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:9b:0d:9e:61:00:a1:da:a3:c9:af:31:2b:
6a:da:c2:12:01:f1:ff:df:1d:b0:55:28:46:a9:4a:
c5:e4:4e:b5:fd:09:0d:9f:ce:9d:e7:fa:a0:08:bc:
17:e8:8b:64:4c:8d:73:9a:6e:88:b0:89:2d:38:0b:
ed:13:cd:fe:fa:5d:c3:16:6a:4b:dd:96:e2:b9:10:
c6:dd:88:cc:68:b9:ce:34:ad:3b:96:b3:ef:6c:2f:
c7:53:0b:a0:4b:75:8d:b6:7b:73:78:62:cd:74:04:
f0:57:3c:fb:96:0e:bf:fa:4a:83:62:26:cc:88:23:
df:69:1e:c5:a9:b1:be:c4:21:9c:04:05:ab:b6:71:
1b:a8:79:0f:97:eb:41:a1:1f:c3:df:28:35:e3:4c:
a9:51:66:8f:5a:9a:73:44:2e:07:4a:20:e8:33:12:
95:ca:23:fb:95:90:e1:12:8d:36:d0:e5:c3:b1:87:
cf:7c:67:8c:e8:00:fb:54:16:fe:34:2a:e5:4d:73:
cb:1f:69:bf:ef:c6:40:f1:77:c5:64:f1:55:d6:61:
dc:cb:4c:d2:62:7f:69:e3:3f:a9:60:7c:7d:78:d3:
aa:c0:13:f0:a8:71:dd:86:04:c8:5a:a1:38:47:c6:
4d:d2:bc:ea:4a:fb:ce:c3:89:26:ad:8b:8a:19:9e:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:00:2A:85:2E:BD:76:00:1E:04:76:4D:E6:94:C3:95:09:0D:C0:F0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EAAqhS69dgAeBHZN5pTDlQkNwPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.140.0/24
82.152.179.0/24
82.153.35.0/24
82.153.134.0/24
82.153.207.0/24
82.153.217.0/24
82.153.255.0/24
89.213.50.0/23
89.213.112.0/24
89.213.114.0/24
89.213.117.0/24
89.213.121.0/24
89.213.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:24:3c:d2:74:3d:b9:fa:9e:bd:02:d1:0c:a0:a8:6c:83:e1:
9c:c9:f5:c8:4b:35:7f:79:71:b3:c6:12:3c:f7:a8:c7:ec:90:
9e:af:e7:08:9d:7f:b2:de:21:ae:8d:c7:5d:f2:56:de:69:f7:
ad:e5:46:a8:5e:20:eb:e4:04:20:2c:8c:9c:f1:92:7a:df:bd:
f9:f6:5e:76:f8:71:91:11:bc:ec:36:35:77:e1:91:fb:5e:56:
d3:f9:e5:de:6f:32:5e:d9:be:a8:ed:fa:39:c4:82:c8:7f:b1:
e6:9d:a8:1e:63:fe:fd:69:b1:5e:5c:e9:02:4f:f4:45:50:42:
0d:b5:5a:de:70:a0:91:32:44:58:1f:db:4e:2d:86:b5:19:16:
30:d4:67:9f:17:65:46:b3:fa:0d:e8:68:e0:52:2c:d3:e4:1b:
59:e1:f1:62:d6:ec:de:c4:fa:cf:8d:3c:48:c8:dc:e8:95:03:
f3:43:53:d8:72:15:db:a2:4d:c6:81:16:a2:d2:d1:d1:42:e6:
b3:59:02:e6:d6:50:b3:62:8e:3a:1c:bb:3b:0b:4d:c7:5f:5e:
53:36:ba:b3:2d:48:e3:0b:dc:46:3e:c8:c9:48:ff:d6:ab:a8:
18:b1:d2:a2:af:f8:b2:4d:f3:49:4f:95:0d:fe:7e:e3:b1:1f:
e2:e3:27:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:58 2026 by rpki-client