Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tAUOIsjhCrUU1lgEyfLn_PwTZr0.roa
File: tAUOIsjhCrUU1lgEyfLn_PwTZr0.roa (raw, json)
Hash identifier: iflnzTOo4lA9FGesIYQZUj6048prdTRa7jc7ki2QGhQ=
Subject key identifier: B4:05:0E:22:C8:E1:0A:B5:14:D6:58:04:C9:F2:E7:FC:FC:13:66:BD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D05925B817080CAB66B6C07F1E01936F8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tAUOIsjhCrUU1lgEyfLn_PwTZr0.roa
Signing time: Thu 19 Mar 2026 10:09:30 +0000
ROA not before: Thu 19 Mar 2026 10:09:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137517
IP address blocks: 82.152.12.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
213.130.156.0/24 maxlen: 24
213.130.158.0/24 maxlen: 24
213.130.159.0/24 maxlen: 24
213.218.237.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:92:5b:81:70:80:ca:b6:6b:6c:07:f1:e0:19:36:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 19 10:09:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4050e22c8e10ab514d65804c9f2e7fcfc1366bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d9:fb:35:18:04:f6:6d:da:6a:ad:f5:ff:1b:
3f:7e:cb:82:19:b5:49:48:ab:03:82:67:3f:5c:2e:
1d:26:ef:0d:14:bd:64:4d:69:53:03:9d:1e:4a:15:
95:6c:da:db:ea:f8:c7:03:23:ae:c6:0f:82:43:f9:
6f:26:c8:1d:5c:4d:94:04:f8:04:5a:aa:39:52:da:
d8:9b:1f:2a:a5:74:5e:59:99:8c:f0:6a:70:98:60:
53:b9:8b:f3:e9:fa:a9:10:c1:bb:31:d8:fb:d8:8f:
36:71:61:eb:27:af:e2:4a:d3:ce:12:8f:e7:9e:1a:
1d:74:92:5f:db:81:b2:20:e4:38:47:41:cf:0b:f9:
88:e3:ff:32:d2:01:42:02:ad:1a:f1:ec:7e:73:11:
62:7d:ee:7a:ac:75:83:52:25:b2:aa:b2:e3:28:d9:
bb:cd:f9:db:64:9c:0c:17:2c:56:8a:62:b5:69:01:
29:f0:52:ac:49:1c:6e:94:25:4f:87:ca:e6:04:cf:
27:3e:c0:63:02:1b:ac:b2:ca:25:3d:c0:c7:c8:a8:
55:3b:33:17:11:77:81:52:3a:69:04:7c:11:5a:2e:
51:bc:2d:48:08:16:97:02:87:7f:29:d7:32:4f:a5:
2e:29:b8:b9:76:fd:db:7b:a4:80:36:42:52:c7:cb:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:05:0E:22:C8:E1:0A:B5:14:D6:58:04:C9:F2:E7:FC:FC:13:66:BD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tAUOIsjhCrUU1lgEyfLn_PwTZr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.12.0/24
109.176.248.0/24
213.130.156.0/24
213.130.158.0/23
213.218.237.0/24
213.218.239.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8b:c9:8e:7d:67:c7:97:0b:73:64:b7:02:2e:85:5c:84:7b:
38:4a:18:0e:95:31:e1:96:27:11:c6:fc:b8:22:e4:3c:07:a5:
84:16:5d:ed:6a:08:5d:d6:e2:98:40:56:87:e0:13:53:ee:15:
8a:08:f8:55:fa:b3:7d:47:d8:70:a0:12:56:11:e7:88:1b:06:
72:67:ae:f3:85:9c:1a:f2:64:1a:88:24:0e:4e:b3:85:49:40:
b4:f1:04:9a:df:be:32:ce:d6:18:bc:7e:24:81:bc:a2:12:c1:
7e:0f:2f:96:0c:f8:35:53:39:6f:1c:4a:1b:d0:6b:d9:d4:fb:
00:fa:71:cd:81:24:0e:ed:98:a6:3c:b5:d8:b3:cc:8c:94:c4:
e3:5e:41:e3:1d:eb:aa:d7:8f:f6:0e:7e:dc:6d:41:49:89:a8:
cc:98:e8:cb:77:9e:5b:3d:ce:4f:71:75:77:56:97:2a:f2:2e:
d4:07:c6:3e:4b:8a:6b:a0:b7:9c:1c:9e:6b:a8:30:a3:48:d6:
74:80:ff:73:c7:32:22:32:21:4c:1c:4e:d8:da:18:83:58:2c:
f8:cf:74:98:9f:43:fc:03:72:43:58:15:58:12:1c:68:9e:40:
81:33:36:a3:92:8b:90:d9:76:2a:6e:e7:18:e8:cf:97:df:17:
03:70:8f:9a
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ0FkluBcIDKtmtsB/HgGTb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwMzE5MTAwOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDA1MGUyMmM4ZTEwYWI1MTRkNjU4MDRjOWYyZTdmY2ZjMTM2NmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Nn7NRgE9m3aaq31/xs/fsuCGbVJ
SKsDgmc/XC4dJu8NFL1kTWlTA50eShWVbNrb6vjHAyOuxg+CQ/lvJsgdXE2UBPgE
Wqo5UtrYmx8qpXReWZmM8GpwmGBTuYvz6fqpEMG7Mdj72I82cWHrJ6/iStPOEo/n
nhoddJJf24GyIOQ4R0HPC/mI4/8y0gFCAq0a8ex+cxFife56rHWDUiWyqrLjKNm7
zfnbZJwMFyxWimK1aQEp8FKsSRxulCVPh8rmBM8nPsBjAhusssolPcDHyKhVOzMX
EXeBUjppBHwRWi5RvC1ICBaXAod/KdcyT6UuKbi5dv3be6SANkJSx8uYxQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLQFDiLI4Qq1FNZYBMny5/z8E2a9MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvdEFVT0lzamhDclVVMWxnRXlmTG5fUHdUWnIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAUpgMAwQA
bbD4AwQA1YKcAwQB1YKeAwQA1drtAwQA1drvMA0GCSqGSIb3DQEBCwUAA4IBAQBS
i8mOfWfHlwtzZLcCLoVchHs4ShgOlTHhlicRxvy4IuQ8B6WEFl3taghd1uKYQFaH
4BNT7hWKCPhV+rN9R9hwoBJWEeeIGwZyZ67zhZwa8mQaiCQOTrOFSUC08QSa374y
ztYYvH4kgbyiEsF+Dy+WDPg1UzlvHEob0GvZ1PsA+nHNgSQO7ZimPLXYs8yMlMTj
XkHjHeuq14/2Dn7cbUFJiajMmOjLd55bPc5PcXV3Vpcq8i7UB8Y+S4proLecHJ5r
qDCjSNZ0gP9zxzIiMiFMHE7Y2hiDWCz4z3SYn0P8A3JDWBVYEhxonkCBMzajkouQ
2XYqbucY6M+X3xcDcI+a
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:56 2026 by rpki-client