Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RA2ybu72eNzFURhjRGZJdXRpR2o.roa
File: RA2ybu72eNzFURhjRGZJdXRpR2o.roa (raw, json)
Hash identifier: Ey8acda0Leasaz9nTVFd4jg7pDMWduSSzHmWGyWIum8=
Subject key identifier: 44:0D:B2:6E:EE:F6:78:DC:C5:51:18:63:44:66:49:75:74:69:47:6A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CDC02BAEB68A03011E6E337C9C55D0A52
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RA2ybu72eNzFURhjRGZJdXRpR2o.roa
Signing time: Wed 11 Mar 2026 08:28:12 +0000
ROA not before: Wed 11 Mar 2026 08:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22427
IP address blocks: 213.130.154.0/24 maxlen: 24
213.210.53.0/24 maxlen: 24
213.218.225.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
213.218.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:02:ba:eb:68:a0:30:11:e6:e3:37:c9:c5:5d:0a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 11 08:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=440db26eeef678dcc5511863446649757469476a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6f:70:9c:67:e5:13:6b:ee:32:07:12:93:ff:
6a:80:d2:79:2a:e4:e7:d7:ac:da:65:14:57:dc:80:
9c:99:45:b1:e5:7f:34:83:5b:5f:ca:bf:d0:50:5a:
5c:04:1d:13:d9:7f:90:db:aa:72:4a:80:68:9f:20:
88:de:d7:c5:e0:c5:02:23:5c:6a:aa:b1:81:ce:a0:
9b:e7:7b:b3:c6:bf:11:45:3e:88:56:9a:7a:25:fe:
df:cd:a5:da:76:ca:54:ef:84:68:cc:ee:0e:55:8a:
11:2c:38:23:84:b2:e5:67:b8:6e:23:a9:77:e6:57:
4b:77:c2:cb:60:dc:ff:fd:a0:d0:01:fd:1c:e4:96:
f6:b8:ea:62:b7:37:77:dc:c0:10:66:13:ea:b2:66:
64:9d:0a:90:bd:b2:00:bb:dd:6f:70:3d:d6:71:e4:
45:80:9a:e0:98:48:19:82:31:41:8d:94:b1:a6:d8:
2b:be:06:1a:18:fe:91:35:45:c4:0d:71:df:4a:55:
88:87:9e:23:5b:04:5b:72:23:f7:e0:b4:1e:a3:ca:
b7:28:57:68:d7:d8:cb:e3:7d:7c:9a:80:d2:0c:51:
5e:98:ec:7a:f6:f4:b4:2e:9f:d3:0a:2d:ec:da:9d:
cc:ae:05:52:c2:92:2c:c5:6e:8f:84:74:14:cc:24:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0D:B2:6E:EE:F6:78:DC:C5:51:18:63:44:66:49:75:74:69:47:6A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RA2ybu72eNzFURhjRGZJdXRpR2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.154.0/24
213.210.53.0/24
213.218.225.0-213.218.226.255
213.218.232.0/24
Signature Algorithm: sha256WithRSAEncryption
40:06:29:30:85:36:ff:a1:d0:18:fa:c7:4e:bc:86:b6:9a:cc:
5b:3d:78:37:b0:b5:21:7d:e5:2a:05:04:27:34:ee:36:5e:56:
a3:1e:44:34:69:37:c9:66:df:44:2b:f4:52:fe:02:57:19:02:
6f:8c:e2:02:dc:aa:9a:e6:5b:53:73:a5:7c:c2:85:2b:39:79:
76:9a:52:e2:aa:23:ce:f4:7b:21:88:8b:56:c1:7a:55:39:48:
f2:69:d0:12:d3:14:37:f9:ec:32:f0:6d:dc:2f:33:0f:a2:c0:
17:0b:be:a7:db:0a:85:b0:62:0e:45:d1:77:d0:b7:b6:81:9c:
56:b6:54:b1:bd:32:1f:46:a4:58:d8:7e:a6:cc:89:24:20:78:
6e:58:3a:c3:c1:b6:18:5d:44:dd:4b:e5:76:d1:01:98:02:f5:
fe:1e:93:58:31:85:6d:8e:5a:0d:05:76:ed:b6:49:9a:8f:77:
e3:5e:bb:3f:b0:b2:8e:7a:b2:b0:4d:3f:51:1e:ee:c1:3c:6b:
a9:68:fa:b6:21:cc:48:11:ab:4c:5d:82:41:59:42:0c:78:bf:
e8:0d:4f:05:28:b9:3f:93:42:da:80:30:5b:a5:75:92:e5:dc:
a3:58:0b:37:ee:5a:03:f9:59:d7:00:bf:06:b7:28:7c:a7:98:
7c:44:9d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:09 2026 by rpki-client