Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UvwziJgRQLPZfLTjYFtQxqf1Hz0.roa
File: UvwziJgRQLPZfLTjYFtQxqf1Hz0.roa (raw, json)
Hash identifier: saXL5I0tOPsiuYXKI9tjfVkbIHUKqo/HMXIaw4jLsFs=
Subject key identifier: 52:FC:33:88:98:11:40:B3:D9:7C:B4:E3:60:5B:50:C6:A7:F5:1F:3D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D0A932B5F53CB1DC3C20974E658BD16D3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UvwziJgRQLPZfLTjYFtQxqf1Hz0.roa
Signing time: Fri 20 Mar 2026 09:28:30 +0000
ROA not before: Fri 20 Mar 2026 09:28:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 80.240.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:93:2b:5f:53:cb:1d:c3:c2:09:74:e6:58:bd:16:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 20 09:28:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52fc3388981140b3d97cb4e3605b50c6a7f51f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:5b:d4:bc:f9:75:48:51:e8:4c:d8:07:c9:
67:92:53:29:b4:37:3e:94:7b:38:09:a2:3a:c1:e8:
7a:80:eb:85:4f:6c:ae:b5:55:36:54:41:af:fd:cb:
74:ed:1b:f7:76:08:c4:25:2a:c5:6e:fc:66:08:49:
ec:64:92:e1:8b:fe:f7:27:6a:6b:1d:5a:c7:be:39:
07:75:3d:f0:14:28:3d:c0:4a:b1:73:13:f0:d6:68:
ae:2a:8f:02:8e:13:05:5a:42:32:0d:b0:73:0d:d2:
fa:2f:c5:9e:9c:72:90:a6:10:2a:19:3a:f2:0e:c3:
d0:4b:7e:d1:b7:f0:9d:e9:a6:27:0b:2e:6f:1b:06:
32:a7:11:85:73:5d:3b:b4:3b:52:2d:1f:26:38:4a:
26:75:07:11:fb:b3:b3:e5:72:ad:4e:78:5f:41:92:
0f:51:31:43:fa:42:30:2b:42:3e:59:a8:89:c0:a5:
5e:01:cb:d8:7f:b3:40:a5:f2:4e:1d:9a:b9:a2:ff:
d3:eb:0a:9e:0d:8c:c7:f3:6f:91:58:5e:c9:da:c0:
9b:16:08:49:7c:bf:2a:42:2e:cf:5e:de:34:3c:0e:
86:c8:fa:3c:a3:90:a6:80:4c:0e:26:26:05:19:b6:
3d:36:85:e9:89:78:81:d4:d7:75:1e:12:55:e2:e3:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FC:33:88:98:11:40:B3:D9:7C:B4:E3:60:5B:50:C6:A7:F5:1F:3D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UvwziJgRQLPZfLTjYFtQxqf1Hz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:86:45:47:a1:ab:27:5a:b1:16:ee:d0:27:6b:41:f8:20:10:
30:5e:46:33:d4:ea:dc:8a:20:c9:31:aa:6e:6d:42:1d:4d:73:
a4:76:90:b7:6c:4e:23:af:9f:28:f6:76:7a:19:1f:95:99:ce:
c9:13:60:67:a0:ce:fb:ac:62:3a:31:c2:4f:4a:4d:c8:ab:55:
b0:ff:c2:c3:f7:ad:46:dd:4f:a4:81:74:5b:a8:4c:19:60:55:
35:11:fe:76:24:20:52:dd:b6:53:fa:3d:c2:76:25:e6:75:43:
5d:6f:5c:ed:29:16:ed:57:4b:df:44:3b:cb:49:d0:06:61:be:
48:d1:40:39:13:2b:37:ab:6e:3c:a6:34:60:01:0d:6f:77:64:
25:de:89:45:ca:2e:5e:1e:0d:48:31:22:f5:6d:14:c5:7e:fd:
47:e0:57:22:dc:a6:7e:06:4e:be:ec:00:4f:1c:9d:a5:77:1d:
58:f1:40:ad:5f:a0:2d:a5:cd:be:2b:bc:40:6b:86:0b:05:23:
6d:ac:d2:84:4d:ad:79:5e:5c:84:24:8f:53:03:5d:b4:15:2c:
76:bd:03:6e:80:93:c1:f6:97:b4:67:ae:93:35:74:75:ec:40:
a7:ad:02:09:b8:47:8a:0c:7e:ec:68:c8:e8:69:31:e7:2c:a3:
f4:4b:53:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:18 2026 by rpki-client