Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zpK3aedbAM3Ry-FFbk9VnRvLcbM.roa
File: zpK3aedbAM3Ry-FFbk9VnRvLcbM.roa (raw, json)
Hash identifier: DXnSyKOm0hfJTsXRLHMzqUS7okuf+bDYNPIrBgPQLso=
Subject key identifier: CE:92:B7:69:E7:5B:00:CD:D1:CB:E1:45:6E:4F:55:9D:1B:CB:71:B3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CFC8F38073D18465A7AC0BEDEEB2FF4CF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zpK3aedbAM3Ry-FFbk9VnRvLcbM.roa
Signing time: Tue 17 Mar 2026 16:09:30 +0000
ROA not before: Tue 17 Mar 2026 16:09:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 82.153.148.0/24 maxlen: 24
89.213.63.0/24 maxlen: 24
89.213.227.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
213.130.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:8f:38:07:3d:18:46:5a:7a:c0:be:de:eb:2f:f4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 17 16:09:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce92b769e75b00cdd1cbe1456e4f559d1bcb71b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:be:ef:be:63:f8:34:71:83:51:c1:95:1c:
8a:53:67:5e:85:3e:05:3d:91:45:df:23:d9:91:d1:
4f:cb:04:cb:6f:8a:13:22:c9:dc:b9:f7:e0:fd:8b:
cc:b3:f9:81:eb:ef:69:b0:08:77:60:d6:77:79:9e:
f3:65:5c:2c:a7:c0:1d:97:f3:f5:46:a9:5f:b7:17:
bd:b1:42:15:d8:07:a4:c6:4f:cf:df:c4:bb:30:86:
cc:9d:80:da:99:67:52:b1:5c:1b:1a:f0:00:2b:0f:
82:76:f6:87:83:f5:9d:7f:c5:9a:6e:07:58:ab:b1:
4e:d5:d2:44:5e:af:73:ab:5a:98:da:bb:f8:14:0f:
20:e1:aa:62:b4:cf:55:fe:15:47:56:08:cf:48:9a:
fa:d6:12:7f:a7:b2:68:82:36:fb:ae:9f:28:b7:99:
b7:08:16:3c:59:7c:fd:06:ac:94:55:8e:06:3c:63:
97:a3:57:1d:04:75:c7:4f:65:a7:5c:87:e8:40:6f:
de:d0:fa:54:d6:ee:e2:10:66:61:13:8a:7d:c4:35:
4d:28:dd:26:58:fc:6f:ab:ad:17:8e:51:47:b0:cc:
24:26:50:e2:88:c0:59:0e:46:17:2b:23:0d:43:45:
39:ed:21:c3:fa:1a:8f:93:f9:95:21:2f:ab:aa:9e:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:92:B7:69:E7:5B:00:CD:D1:CB:E1:45:6E:4F:55:9D:1B:CB:71:B3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zpK3aedbAM3Ry-FFbk9VnRvLcbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.148.0/24
89.213.63.0/24
89.213.227.0/24
109.176.242.0/24
213.130.137.0/24
213.130.152.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:39:1d:92:b7:2b:3b:c6:97:92:23:30:b4:24:e9:bb:21:e8:
a1:89:99:13:96:f4:a4:4d:e3:f6:56:1e:74:c5:49:a3:b3:d5:
5d:7b:7f:5b:aa:08:51:1b:38:50:5d:d4:43:07:53:e3:82:91:
d3:6d:50:f4:06:c1:27:1e:1e:9d:bb:a8:04:38:2c:04:b2:27:
12:2c:74:38:e8:7a:92:06:82:04:5a:cd:df:17:68:b0:0b:07:
4b:02:ef:5c:b2:c7:a9:95:d2:f8:bb:72:28:1e:7b:fb:05:ad:
2c:4f:3c:40:03:6f:02:c2:21:30:f7:dc:96:dd:b5:56:dd:cd:
90:62:af:70:54:ee:96:50:ef:42:b2:cc:75:79:b2:1c:d8:3b:
f6:b3:20:7f:f1:2f:1b:bb:ce:2c:22:a8:8b:76:86:77:83:49:
3b:8d:23:f0:68:5d:8c:b4:fe:ac:53:7d:7a:11:b3:53:0a:77:
0c:fa:59:91:83:29:00:99:de:0c:45:3f:5d:bc:ea:16:53:4f:
79:f5:90:5a:d1:3b:47:56:ea:81:33:f2:81:10:f8:ba:21:c5:
cc:a2:0b:93:d3:62:30:45:8f:78:57:a2:0e:40:d9:a3:c1:bb:
19:19:2f:e9:9a:31:7d:83:2c:83:92:d8:5e:5a:df:58:dd:1c:
60:7e:04:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:13:25 2026 by rpki-client