Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/f1z4bL7gS6rRTOfZcsUjvpY93TI.roa
File: f1z4bL7gS6rRTOfZcsUjvpY93TI.roa (raw, json)
Hash identifier: jToa+GvKAzWdqsibaScrMU2m4vy3tMv0MmfVIDi8vsE=
Subject key identifier: 7F:5C:F8:6C:BE:E0:4B:AA:D1:4C:E7:D9:72:C5:23:BE:96:3D:DD:32
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D0C0C5E28BF99C26C510BECBDB9882291
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/f1z4bL7gS6rRTOfZcsUjvpY93TI.roa
Signing time: Fri 20 Mar 2026 16:20:30 +0000
ROA not before: Fri 20 Mar 2026 16:20:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 80.240.95.0/24 maxlen: 24
82.152.218.0/24 maxlen: 24
82.152.234.0/24 maxlen: 24
82.152.235.0/24 maxlen: 24
82.152.239.0/24 maxlen: 24
82.152.241.0/24 maxlen: 24
109.176.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:0c:5e:28:bf:99:c2:6c:51:0b:ec:bd:b9:88:22:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 20 16:20:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f5cf86cbee04baad14ce7d972c523be963ddd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:71:d1:37:35:c2:9d:14:e4:70:49:92:a7:
26:ea:9a:e7:ff:47:ec:f9:13:e0:6d:a8:c1:d2:6b:
75:22:d4:5a:97:f7:53:f7:01:25:e7:69:0d:6c:04:
35:dc:bb:f9:20:c0:4f:98:b1:92:cb:3f:a5:8b:0a:
95:51:e4:3f:d9:99:ab:95:83:56:22:e5:2b:b5:7f:
7a:7a:3d:d6:a0:11:8d:ff:41:6f:d9:e8:a0:9d:16:
3a:3a:ec:d3:c0:be:28:e2:dc:66:62:6b:fa:c2:20:
d8:aa:ac:b3:52:fe:a0:b5:b3:a6:ae:c3:d7:91:93:
07:17:6b:ef:0f:d2:73:fd:13:27:ab:0c:f7:10:c4:
b3:e7:db:3e:76:02:c3:7b:00:67:cf:0b:52:73:be:
fe:27:57:09:95:1c:5d:4f:ad:0d:c7:53:06:90:18:
9b:ca:a7:f5:b6:55:d2:a4:4a:2d:81:bd:75:9e:c4:
9c:1a:09:c3:fa:85:be:a6:79:ac:6f:05:ca:cb:0c:
56:e9:de:7f:02:c4:6d:0d:bf:3a:8e:1d:78:85:52:
be:3a:51:eb:69:a2:94:0e:91:c7:b9:5c:02:b9:0a:
7d:33:4a:b4:db:5e:88:2e:ed:e2:41:37:25:82:7a:
01:82:44:2b:a8:a7:fe:34:1d:b8:e7:c2:24:05:8a:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5C:F8:6C:BE:E0:4B:AA:D1:4C:E7:D9:72:C5:23:BE:96:3D:DD:32
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/f1z4bL7gS6rRTOfZcsUjvpY93TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.95.0/24
82.152.218.0/24
82.152.234.0/23
82.152.239.0/24
82.152.241.0/24
109.176.20.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:78:5c:18:19:f8:e5:87:6f:86:35:c0:3b:66:0c:3c:2d:94:
6b:20:f7:f7:8e:ab:06:87:b8:03:c7:e5:e9:73:16:e7:44:cc:
91:86:c3:6a:8e:2e:05:59:51:24:c9:4c:10:6f:68:83:f3:2d:
3f:ac:cc:35:ca:f8:bc:cc:d7:c8:e7:cb:80:81:53:83:45:ce:
42:9a:b3:30:b9:e5:d6:53:96:90:4f:95:88:3a:c7:71:c2:25:
f0:26:7f:ed:a8:17:4b:09:7c:eb:2a:22:6c:a0:6f:c7:8f:08:
b8:5b:72:c8:42:b9:f0:75:13:da:fd:6b:f9:28:af:16:a1:b2:
3f:f9:2f:7f:4e:7c:15:b0:c9:1b:c9:40:a9:e1:25:13:d9:19:
77:06:f7:26:77:15:0b:59:f4:75:1c:19:93:5c:75:47:8f:65:
fd:e2:46:3e:07:f4:54:07:ee:dd:51:fb:ce:fe:73:07:dd:ae:
7a:0e:e0:c4:80:15:8d:c8:29:34:57:57:49:74:25:4a:b2:2f:
d5:d1:2c:c9:25:66:ee:94:09:3c:83:5d:1e:2e:7f:ed:55:cf:
8d:fe:23:b5:c3:ea:b6:62:17:b5:59:8e:a5:52:61:78:8d:2f:
c8:a6:e6:8f:7d:e2:42:bc:83:65:bd:42:74:51:bf:e3:08:c3:
2a:80:3e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:49 2026 by rpki-client