Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/F4MneALNMgJzwICTt5kTLj91NiU.roa
File: F4MneALNMgJzwICTt5kTLj91NiU.roa (raw, json)
Hash identifier: Cv1skOHIPHvD65xrVTOIRwk37a80xqDzr2RpmCZpEnk=
Subject key identifier: 17:83:27:78:02:CD:32:02:73:C0:80:93:B7:99:13:2E:3F:75:36:25
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CE16D225E343024F27A60715FB23AFD5C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/F4MneALNMgJzwICTt5kTLj91NiU.roa
Signing time: Thu 12 Mar 2026 09:42:31 +0000
ROA not before: Thu 12 Mar 2026 09:42:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153383
IP address blocks: 82.163.24.0/24 maxlen: 24
82.163.25.0/24 maxlen: 24
82.163.26.0/24 maxlen: 24
82.163.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:6d:22:5e:34:30:24:f2:7a:60:71:5f:b2:3a:fd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 12 09:42:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1783277802cd320273c08093b799132e3f753625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b2:b8:3b:e2:08:29:3b:41:ae:28:0e:c2:1e:
84:25:11:de:74:07:93:93:d9:45:f5:a2:c5:c8:2f:
37:8d:01:65:cb:16:55:02:e3:d8:f5:c8:c3:a0:e2:
68:7d:6c:92:47:29:d4:46:6d:80:f9:e2:b4:21:75:
b6:94:40:fa:b8:75:ef:56:ef:09:12:96:c0:f5:d6:
0a:cc:f9:1b:31:2d:23:63:af:9e:34:d9:4e:09:4c:
88:bd:8e:d7:ec:40:92:d0:e5:5f:b6:d5:e7:4f:4f:
58:28:fe:f0:eb:6c:de:e9:2a:ee:72:47:dd:40:ef:
20:28:f1:51:fe:01:e4:5d:b2:41:95:1a:ef:3c:1e:
bf:87:41:cf:a1:58:0d:42:7b:f8:9e:3d:98:09:79:
6c:82:d3:89:de:2b:b4:c0:72:9b:3e:49:93:ed:12:
f4:67:21:b0:68:44:0a:41:34:c5:7a:a1:6c:93:07:
81:ba:79:a1:73:8a:a5:9c:24:a5:62:31:f6:f4:b3:
e4:fc:c2:ea:cf:ef:b8:04:a8:f1:a9:c1:69:cc:d1:
2b:f1:e6:5d:3d:ac:0b:97:53:c6:3c:9d:58:c1:06:
b7:c8:91:d8:59:70:b8:9a:01:56:e6:3d:34:81:f8:
a3:d2:a2:ba:46:7d:7d:e0:77:08:10:b2:a2:a9:b3:
14:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:83:27:78:02:CD:32:02:73:C0:80:93:B7:99:13:2E:3F:75:36:25
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/F4MneALNMgJzwICTt5kTLj91NiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.24.0/22
Signature Algorithm: sha256WithRSAEncryption
37:66:64:39:4f:a4:da:f8:ae:91:61:10:fd:30:df:bd:23:1e:
05:99:49:ca:b1:b5:0c:b1:3f:67:99:25:7f:a2:b6:a5:87:e2:
72:e6:55:9c:53:ac:ef:fb:17:96:7f:f4:f9:cb:bd:bd:94:db:
39:01:fe:d7:3b:e5:ae:e4:b2:60:41:59:4d:90:7b:1c:07:1d:
c7:c9:27:3e:c3:b3:30:8e:97:37:63:6f:41:24:6e:5b:bb:db:
19:98:9c:46:c5:d2:2e:84:19:b7:ce:03:e3:32:33:26:85:59:
3a:5e:ba:97:ad:60:4d:a3:2b:c9:c6:1b:c2:b2:5b:6d:52:ee:
d7:5b:6b:6c:79:f1:4c:a9:f1:0a:f2:a4:1f:7b:d6:9a:f3:ee:
2b:8f:5b:d4:7c:bc:88:1c:eb:cf:8d:ea:2c:73:6f:96:6e:f5:
69:f2:76:8a:b6:e2:cd:b8:66:0d:7c:51:68:0e:df:ba:69:c7:
70:8d:93:a0:ca:9e:a7:81:d2:68:38:d2:7b:79:bf:f4:86:ae:
35:99:bb:a1:23:70:b2:f9:8a:ea:58:4e:8b:d8:df:99:4c:3a:
d3:84:12:86:f2:8c:f8:8c:e3:92:74:31:0b:9b:e8:95:2b:5e:
9e:26:9d:1f:70:f8:42:3d:bd:64:93:db:ee:af:fa:82:c9:83:
a7:c1:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:03:25 2026 by rpki-client