Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eHr5Z6L8v9KP-rkPPsDnYrFL0P4.roa
File: eHr5Z6L8v9KP-rkPPsDnYrFL0P4.roa (raw, json)
Hash identifier: brnyhLbyoc+CKvRAUhJHtaEX2hQ+wsQwXcamZsz2bLs=
Subject key identifier: 78:7A:F9:67:A2:FC:BF:D2:8F:FA:B9:0F:3E:C0:E7:62:B1:4B:D0:FE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CE750FC436609D507AFF290EBE4ADA5C7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eHr5Z6L8v9KP-rkPPsDnYrFL0P4.roa
Signing time: Fri 13 Mar 2026 13:09:30 +0000
ROA not before: Fri 13 Mar 2026 13:09:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26769
IP address blocks: 185.49.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:50:fc:43:66:09:d5:07:af:f2:90:eb:e4:ad:a5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 13 13:09:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=787af967a2fcbfd28ffab90f3ec0e762b14bd0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:25:14:82:75:a1:3e:f8:46:3c:02:4b:7a:
10:2a:e7:1d:22:44:58:e7:e1:0f:61:de:f0:9c:eb:
52:6a:b1:f9:23:ba:30:ee:5f:8a:5b:13:df:8d:71:
1d:34:9c:95:7f:55:db:46:de:04:7a:58:1b:2e:60:
08:97:ec:74:04:3f:82:d4:c1:9d:58:11:90:af:e4:
9c:99:bc:5e:d1:c2:52:a1:4a:7b:cf:c5:46:05:e0:
b0:4a:83:dc:68:ae:92:b6:c5:bb:98:92:70:e8:4f:
1f:92:82:d4:38:bd:b5:5b:ac:da:e5:98:1a:7a:9a:
fb:b6:98:3b:ac:55:25:5d:34:7b:20:a4:4e:82:dd:
3d:5e:b5:ce:36:a1:b7:b3:31:56:67:80:48:5d:66:
a2:b1:56:d4:47:e1:ba:cc:f8:da:96:19:df:c6:2a:
d5:1c:42:36:55:88:38:9a:1a:7f:87:ca:91:af:cd:
a7:8e:8e:89:58:1a:2e:aa:c4:2a:65:d2:8f:e8:b9:
65:6e:34:59:70:97:48:4d:ac:23:20:16:a5:df:6d:
c2:da:6d:4c:99:04:2f:9e:60:71:82:0b:c6:cc:f6:
0a:3f:f0:ee:c9:92:70:44:17:4a:44:53:5f:4a:3d:
5b:29:b2:2c:59:17:17:62:85:2d:aa:c8:56:cd:11:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7A:F9:67:A2:FC:BF:D2:8F:FA:B9:0F:3E:C0:E7:62:B1:4B:D0:FE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eHr5Z6L8v9KP-rkPPsDnYrFL0P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.127.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b6:e5:c6:88:79:3e:31:e0:15:23:47:9d:7f:95:16:e2:20:
c7:93:1e:49:e3:06:52:74:a6:27:66:35:0a:f8:60:4a:f7:e5:
5d:05:d9:49:d6:a6:f0:ed:96:0a:0f:c2:94:bc:a0:f1:a2:6b:
57:c2:da:cb:00:df:16:4d:ef:19:05:4c:d3:5f:05:a7:3e:1d:
77:dc:43:f5:52:6a:8c:27:13:8d:3f:bf:93:fe:df:61:6f:29:
d4:62:9d:63:3e:f4:96:1f:f0:09:5f:1c:0a:03:79:67:f8:cb:
6e:bb:6c:f7:c4:1a:8d:d4:36:3e:10:04:30:4d:d1:78:1c:ab:
18:9c:99:af:78:c5:24:0d:4e:fc:9a:4d:6a:dd:92:97:fa:81:
9d:31:f4:10:64:64:a3:6a:30:9c:56:e3:9b:23:44:88:1c:a0:
cb:1d:1e:87:bd:11:bf:38:cd:0f:17:b2:23:83:5d:40:d5:3d:
dc:c8:b5:fe:b9:c6:b8:77:96:97:2a:47:b2:80:f2:99:b6:66:
8b:6d:fb:87:d0:31:0b:37:59:d1:4d:c0:23:b3:24:59:44:8b:
bb:72:fe:b0:03:9e:1c:fd:c2:59:6c:3a:a8:71:11:50:10:20:
c8:6b:04:b8:21:15:03:86:29:6b:25:75:82:a2:a4:8f:91:90:
f4:55:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:36:55 2026 by rpki-client