Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ieh4U1jody1qSci6qHBELyAwl1E.roa
File: ieh4U1jody1qSci6qHBELyAwl1E.roa (raw, json)
Hash identifier: FmGm8oD2Spn8/wCDo5LiqBVTsLfPql5nbOWR4wuMwKQ=
Subject key identifier: 89:E8:78:53:58:E8:77:2D:6A:49:C8:BA:A8:70:44:2F:20:30:97:51
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DAFB01C16D8213FC6639303CEB0392A79
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ieh4U1jody1qSci6qHBELyAwl1E.roa
Signing time: Tue 21 Apr 2026 10:57:27 +0000
ROA not before: Tue 21 Apr 2026 10:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395470
IP address blocks: 80.240.91.0/24 maxlen: 24
81.5.183.0/24 maxlen: 24
81.168.68.0/24 maxlen: 24
82.152.68.0/24 maxlen: 24
89.213.42.0/24 maxlen: 24
109.176.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:b0:1c:16:d8:21:3f:c6:63:93:03:ce:b0:39:2a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 21 10:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89e8785358e8772d6a49c8baa870442f20309751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ba:8c:c5:86:7e:0b:23:2a:5d:2a:ad:71:dd:
c2:c9:65:21:db:a5:fa:ac:0c:e5:fe:80:4a:79:53:
13:07:09:89:cb:fb:88:88:04:e4:2a:7a:a7:e2:90:
db:35:55:fe:7c:6b:36:2a:20:17:f9:bd:ad:8c:7a:
f4:92:13:b4:89:1f:98:d9:40:82:41:b8:cc:27:40:
f2:f4:3d:2c:0b:b2:e9:0a:60:85:1e:33:85:f0:c5:
86:67:10:5a:62:a5:f7:d4:6d:e7:8c:46:d8:31:37:
3f:ec:16:ed:c4:32:4e:12:b3:2e:e0:af:04:a1:27:
96:53:6b:57:82:7c:3d:05:03:46:16:1b:a1:ca:08:
e9:47:cf:39:60:32:4b:f4:89:4c:59:4c:c9:2e:ab:
6f:df:fb:5f:5d:b5:f5:b0:97:a0:a4:58:eb:8a:14:
ed:f8:34:dd:d8:b1:5f:28:20:d7:1f:03:e9:bb:53:
0d:4f:2d:06:08:de:80:9a:a2:96:07:9c:b8:d2:f6:
a1:86:41:7b:ba:ba:55:19:a3:73:09:40:a1:c6:07:
a6:75:0f:a8:6f:e9:41:7f:56:9f:c2:11:78:f1:ad:
a9:d1:cb:9c:da:95:ae:db:39:04:af:2e:ef:cf:a8:
75:1f:9c:e8:90:b7:4f:a4:71:9b:f1:f8:26:b0:b5:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E8:78:53:58:E8:77:2D:6A:49:C8:BA:A8:70:44:2F:20:30:97:51
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ieh4U1jody1qSci6qHBELyAwl1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.91.0/24
81.5.183.0/24
81.168.68.0/24
82.152.68.0/24
89.213.42.0/24
109.176.254.0/24
Signature Algorithm: sha256WithRSAEncryption
70:bc:3f:4b:43:8e:a8:84:a2:2a:23:13:40:67:40:ff:70:d3:
bc:99:62:4f:80:05:4a:15:64:44:b0:6c:23:7f:be:79:10:56:
2c:14:d7:7e:10:dc:a8:6b:e5:67:15:aa:68:d1:d2:4a:06:d5:
b5:31:13:50:71:09:e3:d1:0e:8d:a0:4b:27:e0:64:f2:c1:cb:
21:fd:cd:37:3b:95:c7:0f:33:28:00:ee:77:67:42:8d:ca:90:
3c:79:c8:74:8f:ef:a2:07:7d:dd:02:16:65:2e:b4:3c:6f:7c:
3f:85:6c:a5:91:0a:b2:f2:f8:e4:d5:3d:96:28:6e:13:d9:25:
64:bd:6b:ef:56:84:17:13:6b:31:dc:3f:15:0d:3a:d8:e3:bc:
88:05:b2:3a:8d:5d:d5:bd:97:67:35:5b:14:8e:79:ea:ce:72:
ca:93:7a:85:18:32:ce:3a:71:69:05:6d:3c:36:79:e0:53:47:
21:3a:bc:4b:27:d7:45:47:37:f3:4f:eb:31:f2:92:53:5f:a3:
1b:17:53:57:61:b4:1f:1d:d1:6b:3b:a0:aa:97:0f:a3:6c:4a:
e2:f0:04:1e:5d:b3:a9:30:3e:eb:ab:08:c3:4a:1d:30:2e:b3:
87:84:2f:e6:d6:c6:1e:82:e8:09:39:a2:7b:7b:e9:21:09:c1:
f2:b2:62:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:06 2026 by rpki-client