Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JOUzdUH5Du1d34jDudISmRasWYg.roa
File: JOUzdUH5Du1d34jDudISmRasWYg.roa (raw, json)
Hash identifier: TbEm66MhOThIfcRWrbrUaBq1c1BBEQQigKjVgwF+2J4=
Subject key identifier: 24:E5:33:75:41:F9:0E:ED:5D:DF:88:C3:B9:D2:12:99:16:AC:59:88
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E06FD975C97D88A4D134255D25A775150
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JOUzdUH5Du1d34jDudISmRasWYg.roa
Signing time: Fri 08 May 2026 09:49:03 +0000
ROA not before: Fri 08 May 2026 09:49:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204535
IP address blocks: 81.168.109.0/24 maxlen: 24
82.153.64.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:fd:97:5c:97:d8:8a:4d:13:42:55:d2:5a:77:51:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 8 09:49:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24e5337541f90eed5ddf88c3b9d2129916ac5988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5e:3e:bb:72:97:64:18:09:36:b8:22:b4:d1:
5b:af:24:62:ee:a5:15:67:b5:e6:0c:30:a7:90:b1:
70:2b:eb:b2:3f:63:2e:fc:f5:eb:28:9b:e1:c8:23:
3f:27:47:32:3a:89:8c:80:bb:2f:43:e9:30:57:a9:
95:6b:67:41:36:d0:2f:3c:7f:44:f5:14:d8:c3:3f:
64:81:68:a2:a2:83:1f:1d:80:59:f2:ea:14:54:61:
29:de:c2:54:99:be:39:5b:4c:8a:97:6a:9f:db:1c:
92:ed:1c:27:55:7d:9c:66:cc:f5:ea:4b:44:d7:c5:
fd:72:9c:27:f0:7a:74:43:03:70:cc:58:c3:d8:b4:
3b:e5:b3:a7:8d:3f:71:ab:de:3f:10:a1:7e:30:8d:
95:29:e6:87:2a:59:0e:69:dc:1e:86:61:23:79:3e:
11:51:87:b2:e6:03:43:db:27:5f:cb:49:7f:2f:f3:
20:39:14:aa:a4:cb:17:60:05:44:d8:86:b4:3a:31:
46:cb:d9:9e:d3:9e:36:c4:48:f8:52:13:4a:68:32:
55:54:9c:9b:de:5f:e7:5f:b4:27:1a:48:4d:89:6f:
33:8b:86:84:c5:17:63:dc:f7:07:26:27:be:78:72:
36:24:21:ec:fb:f3:70:17:b9:85:d2:10:a6:0b:c7:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E5:33:75:41:F9:0E:ED:5D:DF:88:C3:B9:D2:12:99:16:AC:59:88
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JOUzdUH5Du1d34jDudISmRasWYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.109.0/24
82.153.64.0/24
89.213.43.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d6:1d:d8:4e:76:ad:f6:ee:5a:99:bf:4d:19:b3:e9:2a:d9:
0e:92:ce:2a:b9:6c:3d:bd:85:cd:7e:b0:59:8e:b8:ce:47:91:
58:05:e5:7f:3a:d1:8d:b7:a3:74:a9:5c:22:cb:a7:e7:42:06:
32:b8:64:1a:b9:ba:37:07:de:6e:b6:bc:8c:3a:41:0a:2e:3e:
53:cc:f2:49:63:cc:1d:fe:01:a1:cc:f6:20:18:31:f7:ee:b4:
13:fe:0e:dd:2e:e8:b9:bb:a6:bb:04:23:c8:a5:7d:9f:be:9f:
41:79:00:54:6a:c1:0b:05:f2:46:d6:9f:e0:5d:8d:34:d4:5a:
0e:86:82:be:2b:49:e5:d2:cd:e8:7a:c7:e5:5f:5a:ef:6a:70:
25:90:63:4a:1f:0f:cd:d2:d5:17:5b:45:ba:7a:50:5e:97:29:
ce:e6:c1:e7:1c:a7:e6:51:9e:49:8c:05:48:1a:4f:1c:ca:1d:
9f:95:40:b4:64:a0:e4:df:6e:a5:95:39:f2:90:64:5c:74:bb:
a8:80:82:47:dc:3f:5c:a7:99:65:ce:c9:fc:04:12:04:09:aa:
0b:45:bd:22:03:8c:00:af:db:00:20:ea:4d:dc:b7:f1:40:15:
d6:c2:c4:1f:59:07:67:ca:78:8b:26:4a:49:b4:e6:a1:48:a6:
63:a0:d7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:27:39 2026 by rpki-client