Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jPoPkJIpdqPXUxLAjW4Ehs9UDdM.roa
File: jPoPkJIpdqPXUxLAjW4Ehs9UDdM.roa (raw, json)
Hash identifier: wZ61cpuAUFpDSxsvKPFTR6GELosUVgltFMCULwdPoBY=
Subject key identifier: 8C:FA:0F:90:92:29:76:A3:D7:53:12:C0:8D:6E:04:86:CF:54:0D:D3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DFC69E9F350E10DD7D2E93D6AAD349752
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jPoPkJIpdqPXUxLAjW4Ehs9UDdM.roa
Signing time: Wed 06 May 2026 08:31:32 +0000
ROA not before: Wed 06 May 2026 08:31:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55177
IP address blocks: 82.152.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:69:e9:f3:50:e1:0d:d7:d2:e9:3d:6a:ad:34:97:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 6 08:31:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cfa0f90922976a3d75312c08d6e0486cf540dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:8e:f1:a7:6a:6d:28:e0:f9:0b:3c:c3:79:
95:ca:a7:77:55:32:8b:4b:95:05:d6:c9:8b:dd:04:
33:c6:3a:72:13:ca:2a:76:7b:07:93:88:c2:09:c9:
7e:47:40:38:b2:c8:5f:36:6e:fe:cc:17:85:83:af:
e7:f5:59:33:23:f9:5b:82:61:6a:59:e6:a2:17:30:
ca:7c:6d:2c:09:f8:b3:31:fa:c2:13:72:89:bb:70:
5d:7e:28:c6:88:2e:f7:6d:da:13:4d:76:dd:ea:27:
bb:b5:ae:f0:61:4e:95:93:bb:f3:0d:90:f4:da:61:
83:26:6d:a3:9c:19:0a:35:ff:d6:72:2f:7f:e0:45:
68:b7:90:bd:24:82:16:0a:21:52:80:53:80:23:2d:
df:d3:ef:d6:15:bd:26:83:22:4e:81:cf:bc:12:14:
34:77:51:82:ea:67:54:ef:a8:d0:eb:19:f8:93:87:
88:60:03:56:2e:59:91:16:63:3f:ef:1c:16:4f:c2:
52:9b:fa:7c:a0:11:e6:49:ac:4b:d1:99:ed:eb:61:
d0:01:e8:b3:07:07:8f:d6:af:58:23:b3:2e:22:d6:
0a:38:4f:0f:ae:96:36:b2:9d:45:c1:01:72:8b:d5:
f4:f3:41:8a:90:f8:c0:2b:b8:e2:f9:83:18:1a:22:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FA:0F:90:92:29:76:A3:D7:53:12:C0:8D:6E:04:86:CF:54:0D:D3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jPoPkJIpdqPXUxLAjW4Ehs9UDdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:0e:d9:da:37:ca:ed:db:26:a4:46:52:b5:c0:0f:0e:3d:09:
48:8f:fc:19:96:64:f4:14:ad:24:cf:25:cb:bb:c5:82:fe:02:
5b:77:87:33:6e:4c:98:14:d4:fa:ab:17:72:6d:8d:d9:a9:d0:
37:38:97:4a:48:7c:89:c9:2a:4c:3f:09:dd:32:e4:b4:6a:bb:
6f:45:e8:98:73:14:ff:d1:d9:9e:72:40:eb:12:67:73:45:db:
79:74:b9:4e:23:fe:d6:de:1d:9a:5c:cc:a2:a6:9b:2e:64:04:
0b:8f:f9:86:93:8c:8c:93:27:64:7b:0e:41:07:36:21:16:02:
9c:24:3d:e2:03:7d:8a:2e:d5:aa:52:11:db:35:1d:75:89:58:
90:7c:2e:2c:c7:87:b3:00:db:fc:bb:d1:a6:9d:cc:92:fb:97:
41:a5:80:d4:8e:27:b6:f2:5f:41:ee:c2:c9:05:35:73:58:8d:
41:d1:4c:6d:f3:d9:43:fd:24:1e:c6:30:19:f1:c8:f2:8a:9d:
da:bd:0e:59:7b:a5:c6:aa:7c:44:91:f3:db:9d:b7:73:56:9d:
05:f9:d8:1d:7e:d6:5d:0d:05:7e:5a:36:61:21:dc:59:c4:69:
b4:07:35:91:61:91:9c:07:86:47:b7:e8:aa:b0:f3:42:14:f3:
bd:50:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:06 2026 by rpki-client