Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ppo76FvHYIJqBntQxGyhk6ioozc.roa
File: ppo76FvHYIJqBntQxGyhk6ioozc.roa (raw, json)
Hash identifier: 0Wea4rsTuWjoDlrf2IwtUxpAIcyigwUSZu9HIEHR+Vk=
Subject key identifier: A6:9A:3B:E8:5B:C7:60:82:6A:06:7B:50:C4:6C:A1:93:A8:A8:A3:37
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DF81C13D6EAD1985CA4A49DE7A7C1C8CC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ppo76FvHYIJqBntQxGyhk6ioozc.roa
Signing time: Tue 05 May 2026 12:28:02 +0000
ROA not before: Tue 05 May 2026 12:28:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27010
IP address blocks: 82.153.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:1c:13:d6:ea:d1:98:5c:a4:a4:9d:e7:a7:c1:c8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 5 12:28:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a69a3be85bc760826a067b50c46ca193a8a8a337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:41:eb:bd:5d:17:c8:41:1c:95:23:70:85:
82:13:91:27:17:51:33:2c:3f:9f:fe:06:93:49:4d:
e4:ff:bc:9b:32:c1:37:5e:25:28:6e:01:f6:dc:af:
49:9a:dc:88:fc:68:b8:8b:90:87:36:af:b2:17:dd:
7a:f8:87:c3:3e:cb:22:00:09:b5:78:91:e9:35:3c:
5b:2a:79:05:b4:d6:01:04:15:1b:65:65:5e:0d:6e:
72:50:3f:43:52:83:17:38:2f:9d:18:a6:69:8e:00:
2f:0d:da:c1:8f:9d:1d:b0:a7:3c:71:61:27:40:35:
ed:f1:d6:32:5d:72:ae:bd:8c:ff:f0:e1:ec:20:52:
30:5f:95:46:40:2f:8d:9d:39:04:e9:ed:18:15:a1:
61:cf:05:94:5f:04:48:c1:32:66:31:5c:fc:09:af:
0b:d2:95:e6:e4:18:29:f1:6a:af:ab:12:1b:f3:06:
00:16:82:e3:21:dd:ea:18:4c:8d:bc:95:96:b1:89:
38:8c:2f:8d:2d:8a:de:13:ee:bf:4f:1c:4f:f6:d3:
8e:8a:51:20:37:a3:34:bc:f5:99:69:4c:ac:8c:8c:
40:c0:74:6a:c7:c0:a5:71:bd:9e:17:ed:a5:86:76:
fb:b3:dd:00:8c:a1:44:c4:e8:e0:9f:8d:b3:89:39:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9A:3B:E8:5B:C7:60:82:6A:06:7B:50:C4:6C:A1:93:A8:A8:A3:37
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ppo76FvHYIJqBntQxGyhk6ioozc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.157.0/24
Signature Algorithm: sha256WithRSAEncryption
80:90:79:db:22:d0:3b:17:df:3e:0f:a3:fe:41:e1:95:0b:37:
d3:fe:7c:fc:97:1e:79:bd:78:28:68:24:c5:ac:d5:f2:a1:df:
01:92:fe:3b:07:54:6e:91:cf:8e:30:14:a0:12:d5:c8:04:10:
2d:21:57:ab:07:bc:ce:9e:d0:40:c9:45:86:e8:28:1a:3c:e5:
64:e3:89:c0:5a:11:e2:dc:2c:ea:0d:38:7f:a5:c7:ed:70:2c:
c2:81:df:48:ff:2f:a9:6e:4f:35:82:6f:dd:41:07:df:ef:4d:
9e:74:f3:69:c4:7a:d2:05:f5:4d:94:b2:30:26:0a:2a:1f:0e:
9c:74:ab:d7:59:71:0e:ac:c4:02:66:ee:73:e4:27:c9:b3:c5:
fe:47:10:5f:ba:26:1e:2c:6f:33:56:2f:86:bc:63:7d:e1:67:
d8:a4:be:2e:e0:b6:f4:f1:a1:3b:fd:00:8d:1f:44:38:1e:00:
05:8e:a4:43:b8:94:0e:fb:c7:ea:11:f4:7b:d2:a2:95:40:cb:
14:74:e4:67:4c:30:e1:0b:b6:98:c6:70:51:45:10:69:24:5a:
b4:15:81:6a:6e:00:ad:3d:0f:3f:c6:b9:0a:fa:43:ff:57:b3:
1d:d6:bd:68:72:91:f8:d2:12:b8:86:7f:33:72:bc:b2:60:9b:
6b:42:e3:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ34HBPW6tGYXKSkneenwcjMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNTA1MTIyODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjlhM2JlODViYzc2MDgyNmEwNjdiNTBjNDZjYTE5M2E4YThhMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBNB671dF8hBHJUjcIWCE5EnF1Ez
LD+f/gaTSU3k/7ybMsE3XiUobgH23K9JmtyI/Gi4i5CHNq+yF916+IfDPssiAAm1
eJHpNTxbKnkFtNYBBBUbZWVeDW5yUD9DUoMXOC+dGKZpjgAvDdrBj50dsKc8cWEn
QDXt8dYyXXKuvYz/8OHsIFIwX5VGQC+NnTkE6e0YFaFhzwWUXwRIwTJmMVz8Ca8L
0pXm5Bgp8WqvqxIb8wYAFoLjId3qGEyNvJWWsYk4jC+NLYreE+6/TxxP9tOOilEg
N6M0vPWZaUysjIxAwHRqx8Clcb2eF+2lhnb7s90AjKFExOjgn42ziTnOyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKaaO+hbx2CCagZ7UMRsoZOoqKM3MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvcHBvNzZGdkhZSUpxQm50UXhHeWhrNmlvb3pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpmdMA0G
CSqGSIb3DQEBCwUAA4IBAQCAkHnbItA7F98+D6P+QeGVCzfT/nz8lx55vXgoaCTF
rNXyod8Bkv47B1Rukc+OMBSgEtXIBBAtIVerB7zOntBAyUWG6CgaPOVk44nAWhHi
3CzqDTh/pcftcCzCgd9I/y+pbk81gm/dQQff702edPNpxHrSBfVNlLIwJgoqHw6c
dKvXWXEOrMQCZu5z5CfJs8X+RxBfuiYeLG8zVi+GvGN94WfYpL4u4Lb08aE7/QCN
H0Q4HgAFjqRDuJQO+8fqEfR70qKVQMsUdORnTDDhC7aYxnBRRRBpJFq0FYFqbgCt
PQ8/xrkK+kP/V7Md1r1ocpH40hK4hn8zcryyYJtrQuMN
-----END CERTIFICATE-----
Generated at Wed May 13 04:04:01 2026 by rpki-client