Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z23VHcVILWlm9m43Zz_KHnVTv3o.roa
File: z23VHcVILWlm9m43Zz_KHnVTv3o.roa (raw, json)
Hash identifier: T3+jBGnXTXr5HyYCCBfi5Gy9rIZkGAmnBFpwJwoOz58=
Subject key identifier: CF:6D:D5:1D:C5:48:2D:69:66:F6:6E:37:67:3F:CA:1E:75:53:BF:7A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D25286E82CA6488C853CD89F182468C2C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z23VHcVILWlm9m43Zz_KHnVTv3o.roa
Signing time: Wed 25 Mar 2026 13:21:39 +0000
ROA not before: Wed 25 Mar 2026 13:21:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402203
IP address blocks: 89.31.239.0/24 maxlen: 24
213.218.238.0/24 maxlen: 24
217.145.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:28:6e:82:ca:64:88:c8:53:cd:89:f1:82:46:8c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 25 13:21:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf6dd51dc5482d6966f66e37673fca1e7553bf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:88:ad:56:cc:76:35:69:78:3c:f6:09:45:
d8:3d:3f:30:90:a1:ec:db:d4:9d:4d:c5:31:01:d1:
1b:71:28:b1:f9:cd:a1:26:54:9f:1c:e3:e5:a2:4e:
7e:d4:c8:ff:27:83:56:f3:07:5e:3b:39:b7:7f:ff:
be:8f:88:80:76:5d:d5:77:ba:e8:1a:e4:93:91:f4:
d7:8e:96:b3:03:3d:3e:ca:7a:d4:7b:e8:59:bb:2f:
8a:b0:7b:c2:5e:8c:20:09:72:8a:76:a5:41:42:c5:
af:49:e6:40:e4:7c:8e:f8:3e:4f:89:82:f7:a9:50:
2e:92:fa:13:85:e5:5e:46:3a:ec:b9:54:d3:12:45:
9b:0d:93:61:1a:57:bc:1c:f0:88:4e:1d:9c:05:b5:
be:00:67:8b:08:d1:9a:5f:21:68:f1:88:91:a2:26:
38:3f:1f:ed:48:70:14:e3:b6:01:7a:aa:03:ae:60:
55:b8:01:fc:4c:32:0d:5a:79:9f:90:d5:b8:ab:35:
7e:6a:e2:05:7b:19:d9:21:86:52:9f:d7:8e:08:35:
5c:31:95:f7:79:3f:67:53:18:c1:3a:74:01:56:6e:
fa:fb:70:be:70:98:f4:4a:16:28:66:e5:b2:f2:6d:
fc:a4:1c:a2:df:e5:e9:85:3d:78:d5:3d:95:48:e5:
2c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6D:D5:1D:C5:48:2D:69:66:F6:6E:37:67:3F:CA:1E:75:53:BF:7A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z23VHcVILWlm9m43Zz_KHnVTv3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.239.0/24
213.218.238.0/24
217.145.75.0/24
Signature Algorithm: sha256WithRSAEncryption
74:35:9c:50:1b:49:26:fb:2c:08:99:f3:b3:da:98:7b:1c:29:
c4:c3:55:03:91:84:8d:13:d7:ca:90:aa:09:ee:3b:37:fa:30:
c1:56:c0:d7:60:5c:58:50:4d:ca:50:8f:0a:f2:88:07:56:ff:
71:24:52:c5:07:d6:b4:f6:d9:85:7c:6f:11:37:ae:99:e4:67:
22:fe:02:40:26:bd:73:ce:f7:bf:2e:11:a8:bf:40:7b:68:34:
4c:7b:3e:b8:90:c5:87:45:54:70:11:5b:89:eb:14:3c:2a:6f:
a4:20:f2:75:e1:30:df:26:d1:4b:15:05:40:36:f6:51:08:96:
3e:66:2d:0a:e0:3b:f5:5a:ea:eb:bf:0b:21:34:79:6a:24:32:
1a:59:36:8d:ca:01:63:2f:b6:68:52:46:52:5e:d9:fc:7b:48:
05:39:81:31:2a:26:02:b5:4e:f6:f3:50:7b:10:61:db:4b:83:
7d:4c:aa:ec:68:bf:52:fb:58:93:34:9c:30:9e:00:63:ad:2d:
63:ab:42:06:0e:2a:ec:4b:eb:40:bf:f7:18:f3:6a:44:6e:d5:
e2:4d:9e:20:ee:d2:85:0a:60:7d:1d:8e:6a:6c:14:13:3e:3e:
ee:9a:b8:69:d9:0d:1e:88:a2:c2:0d:d2:20:88:a8:97:a6:73:
9b:e6:4e:fd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ0lKG6CymSIyFPNifGCRowsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwMzI1MTMyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjZkZDUxZGM1NDgyZDY5NjZmNjZlMzc2NzNmY2ExZTc1NTNiZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWaIrVbMdjVpeDz2CUXYPT8wkKHs
29SdTcUxAdEbcSix+c2hJlSfHOPlok5+1Mj/J4NW8wdeOzm3f/++j4iAdl3Vd7ro
GuSTkfTXjpazAz0+ynrUe+hZuy+KsHvCXowgCXKKdqVBQsWvSeZA5HyO+D5PiYL3
qVAukvoTheVeRjrsuVTTEkWbDZNhGle8HPCITh2cBbW+AGeLCNGaXyFo8YiRoiY4
Px/tSHAU47YBeqoDrmBVuAH8TDINWnmfkNW4qzV+auIFexnZIYZSn9eOCDVcMZX3
eT9nUxjBOnQBVm76+3C+cJj0ShYoZuWy8m38pByi3+XphT141T2VSOUsAwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFM9t1R3FSC1pZvZuN2c/yh51U796MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvejIzVkhjVklMV2xtOW00M1p6X0tIblZUdjNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWR/vAwQA
1druAwQA2ZFLMA0GCSqGSIb3DQEBCwUAA4IBAQB0NZxQG0km+ywImfOz2ph7HCnE
w1UDkYSNE9fKkKoJ7js3+jDBVsDXYFxYUE3KUI8K8ogHVv9xJFLFB9a09tmFfG8R
N66Z5Gci/gJAJr1zzve/LhGov0B7aDRMez64kMWHRVRwEVuJ6xQ8Km+kIPJ14TDf
JtFLFQVANvZRCJY+Zi0K4Dv1WurrvwshNHlqJDIaWTaNygFjL7ZoUkZSXtn8e0gF
OYExKiYCtU7281B7EGHbS4N9TKrsaL9S+1iTNJwwngBjrS1jq0IGDirsS+tAv/cY
82pEbtXiTZ4g7tKFCmB9HY5qbBQTPj7umrhp2Q0eiKLCDdIgiKiXpnOb5k79
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:19:13 2026 by rpki-client