Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Lku3uDIE201uki6Nhg_9Yt3uhN8.roa
File: Lku3uDIE201uki6Nhg_9Yt3uhN8.roa (raw, json)
Hash identifier: Vj149HvfKXR5dmxseRkqH+01ofJInece/hBvwxo28hE=
Subject key identifier: 2E:4B:B7:B8:32:04:DB:4D:6E:92:2E:8D:86:0F:FD:62:DD:EE:84:DF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DB9F1D8B141CF9A8DA47B4E4B26182D6D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Lku3uDIE201uki6Nhg_9Yt3uhN8.roa
Signing time: Thu 23 Apr 2026 10:45:27 +0000
ROA not before: Thu 23 Apr 2026 10:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 80.240.88.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:f1:d8:b1:41:cf:9a:8d:a4:7b:4e:4b:26:18:2d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 23 10:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e4bb7b83204db4d6e922e8d860ffd62ddee84df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:42:67:60:31:bf:79:7c:47:03:21:95:d0:
ce:a4:13:f8:c4:58:e8:af:ec:b8:2f:27:7b:3a:5e:
1f:27:5a:33:42:54:e6:fa:50:81:32:64:97:76:77:
f5:a2:fb:df:da:3b:9d:8c:f8:76:a3:4f:6a:4a:e4:
42:7a:9a:09:60:23:c6:63:cc:21:0f:82:1e:45:98:
68:bb:bc:7c:d2:9c:bd:ad:77:f2:cc:42:82:64:21:
5f:80:b8:aa:65:42:ca:bf:a9:6a:73:c0:f6:80:35:
0b:14:79:34:0d:5d:af:03:06:75:a1:03:e0:a3:40:
ca:d4:31:e6:d3:63:91:2e:d6:fb:24:cd:6f:13:07:
69:b2:14:5a:1c:22:1a:c0:8c:b6:1a:99:c2:4b:02:
57:41:52:31:80:f4:38:c5:3a:e1:c5:2c:96:1a:20:
1b:0b:c1:1e:62:32:8a:29:f4:af:ba:7d:75:6d:bf:
4b:a0:ec:07:52:82:6f:44:a3:e7:5d:d9:6f:84:6e:
5f:33:ea:13:8f:b0:16:92:fe:38:c1:f0:46:65:0a:
8c:8f:e5:66:8c:d1:0b:85:00:64:b6:17:8f:fd:c9:
82:ba:2f:38:b4:c6:1a:b4:79:03:c5:04:be:56:29:
c4:a5:ea:5a:de:8d:6a:b8:3d:e6:f3:59:ba:75:46:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4B:B7:B8:32:04:DB:4D:6E:92:2E:8D:86:0F:FD:62:DD:EE:84:DF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Lku3uDIE201uki6Nhg_9Yt3uhN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/24
81.168.123.0/24
89.213.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:81:85:11:f7:6b:ab:72:9b:df:f1:e5:29:35:4a:25:f9:b7:
be:b0:34:33:2d:48:70:e2:ee:7f:b6:1a:cb:08:94:71:f2:2b:
9e:27:fc:07:ed:b5:25:79:f7:50:63:ad:35:d2:bc:a4:ca:b6:
8c:b7:cd:46:83:b6:c4:a1:5e:a5:e6:1e:61:21:8d:e6:8c:2a:
ab:08:5b:b8:21:1b:4a:42:9d:c0:55:0c:23:fd:54:39:86:59:
e4:96:2a:93:f6:51:16:f2:2d:3c:25:4c:31:e9:c5:8a:bc:7c:
bc:71:a6:8e:1a:80:d2:bf:92:53:bf:5d:18:d2:b6:66:54:d9:
ba:10:27:75:97:bf:3d:b3:bc:bf:44:25:67:dd:7b:de:a1:57:
a9:9c:29:aa:47:12:14:f0:25:7a:f9:9f:13:dc:e5:f6:17:52:
49:a1:d2:96:c2:eb:1c:44:3a:47:b7:9c:6d:1c:ed:9c:f9:62:
7f:ee:27:c5:0d:71:b7:58:49:c0:a1:c4:b3:a5:40:5f:7c:66:
bc:b9:26:be:51:ed:6f:21:60:23:e8:12:a6:99:81:3b:86:93:
5f:85:bc:63:97:3d:bc:54:de:88:e0:4d:43:40:6b:d8:b8:9b:
70:f4:db:c3:bb:2b:8a:27:05:a2:bd:10:93:47:57:a6:14:6c:
a1:be:7c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:54 2026 by rpki-client