Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/auOBDEs3giHjVqgl-H-woaasv9M.roa
File: auOBDEs3giHjVqgl-H-woaasv9M.roa (raw, json)
Hash identifier: tyGIgByVkpDxPZdjlk+QYWCLO8QLr1TtfmDPMfQiF+c=
Subject key identifier: 6A:E3:81:0C:4B:37:82:21:E3:56:A8:25:F8:7F:B0:A1:A6:AC:BF:D3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CDDEAB1514B8F02C2971C28E0AA106AE1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/auOBDEs3giHjVqgl-H-woaasv9M.roa
Signing time: Wed 11 Mar 2026 17:21:11 +0000
ROA not before: Wed 11 Mar 2026 17:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62390
IP address blocks: 89.213.119.0/24 maxlen: 24
109.176.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:ea:b1:51:4b:8f:02:c2:97:1c:28:e0:aa:10:6a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 11 17:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ae3810c4b378221e356a825f87fb0a1a6acbfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:9a:58:a4:16:ed:cc:99:2a:86:64:46:2d:
c9:a3:60:f8:3d:aa:0f:ec:c5:23:9b:93:d7:5e:f6:
e7:b0:1f:24:58:dc:0f:91:00:5c:e3:4a:05:05:3e:
2d:08:5e:d1:0c:66:ed:76:18:00:4d:a7:c5:49:66:
28:c2:54:b9:82:a3:ba:c6:9d:f9:a5:f0:42:00:50:
5d:5e:56:41:e5:a3:64:61:a2:1d:37:ed:f8:8b:f2:
76:6a:4c:7c:cd:c6:a5:67:f0:3a:f0:2b:8b:dd:4f:
12:be:87:28:82:74:bf:5e:b0:55:5e:4c:57:42:fe:
1c:47:74:f2:4b:1b:ec:ae:59:a4:36:63:23:ab:96:
db:d4:7c:38:b8:d0:cd:82:4e:3f:3f:82:b5:52:93:
9d:7d:78:4d:33:d8:9c:bd:1e:6f:d7:5c:2e:1a:bf:
37:49:91:bc:30:77:1e:e4:96:68:c8:46:ff:8e:a7:
b4:c1:e4:d4:12:16:b3:c2:ad:aa:2b:f8:c1:8b:4b:
00:94:ce:fe:64:e0:b3:01:9b:b6:65:78:1b:5a:2b:
fb:45:05:c6:68:ec:ff:bb:9c:42:b3:f3:81:76:3b:
77:20:61:6c:5d:21:6b:91:43:ae:9f:3a:29:4b:3d:
fb:01:6b:de:f9:49:f9:52:84:75:97:b6:cc:bc:c7:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E3:81:0C:4B:37:82:21:E3:56:A8:25:F8:7F:B0:A1:A6:AC:BF:D3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/auOBDEs3giHjVqgl-H-woaasv9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.119.0/24
109.176.246.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8a:43:8d:5e:2e:69:9f:29:a5:08:02:9a:70:d5:06:75:02:
06:91:8b:3a:c5:c4:d0:89:ef:3e:f1:41:28:3c:b9:ef:4d:85:
d7:8b:04:1e:f6:55:1b:6d:52:c0:fa:13:33:0e:01:ce:6a:04:
c4:b2:69:3f:89:82:44:2c:99:da:f1:78:c5:47:41:d7:b4:e8:
b2:f3:78:b8:7a:f1:6d:11:9f:46:ca:f1:94:21:87:a8:39:77:
fb:8b:cc:6e:be:3a:2d:c8:fa:72:3a:da:8d:fb:f5:1d:8d:26:
3d:84:49:d9:33:a9:a7:11:b9:0a:e0:83:95:8c:1c:c3:46:6e:
f3:c0:77:bd:a5:bb:db:b9:3f:5a:51:27:e2:b1:73:56:59:13:
dd:4a:71:7f:cc:7f:32:8b:a3:b4:1b:e8:b2:26:0a:69:95:1b:
ad:90:64:c8:61:8c:96:74:9f:6c:79:c9:0c:1b:00:72:01:48:
01:53:6a:92:62:51:dd:be:c5:36:1d:f9:96:44:82:aa:18:e6:
df:a9:ce:60:65:ff:70:83:f4:94:20:98:30:67:b8:8c:e7:c6:
80:e8:d0:65:8b:30:8d:c9:ba:f9:19:d9:c7:44:e9:cf:27:6b:
c0:c2:0c:78:da:a0:0a:43:04:30:f5:5b:62:c0:82:58:e0:74:
58:1f:bf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:55 2026 by rpki-client