Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/73MzmbVmhGQAysMbtKjjKHVjwh8.roa
File: 73MzmbVmhGQAysMbtKjjKHVjwh8.roa (raw, json)
Hash identifier: e96q2EaJmJvsJMi8WFLXVFQUAT+oZbjkHlDHqITIOkg=
Subject key identifier: EF:73:33:99:B5:66:84:64:00:CA:C3:1B:B4:A8:E3:28:75:63:C2:1F
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F8DD32E7B3B0274F3750DEA8CD8EC5DB2
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/73MzmbVmhGQAysMbtKjjKHVjwh8.roa
Signing time: Thu 23 Jul 2026 07:14:15 +0000
ROA not before: Thu 23 Jul 2026 07:14:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147208
IP address blocks: 109.176.134.0/24 maxlen: 24
213.218.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:d3:2e:7b:3b:02:74:f3:75:0d:ea:8c:d8:ec:5d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 23 07:14:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef733399b566846400cac31bb4a8e3287563c21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:97:1b:c1:58:14:b5:62:0b:bd:d7:9b:2c:
98:2e:41:d5:de:52:b4:a4:74:15:96:ab:85:0b:6d:
f5:b2:dc:98:f1:e1:f6:0c:6f:f1:75:f6:65:3e:51:
f8:08:c6:8d:f0:ed:b9:c8:a8:98:d6:d1:d8:12:6d:
7a:30:7d:e0:a7:06:80:cc:4a:20:ed:ed:d2:ac:0a:
0a:b5:ef:56:08:f4:93:1d:ea:3b:1a:ef:ac:18:35:
7e:36:71:b6:f4:f1:e4:59:c0:2d:2b:7c:30:66:46:
ca:a5:8f:30:83:e9:12:9f:70:0a:9b:fa:de:93:74:
d9:e3:cd:aa:71:9d:6b:04:38:f3:d6:4c:70:17:08:
a0:e6:51:06:3e:3a:64:26:3f:b6:9d:dc:7d:dd:36:
15:24:d1:e3:9e:ea:61:5f:1b:67:22:29:a6:2c:a8:
b2:d9:e6:01:99:53:2b:a3:3d:6f:a4:2b:3f:65:5c:
f7:9a:94:11:98:ad:57:e4:68:f3:85:66:d3:80:89:
24:5e:e6:2c:00:d9:9b:d4:0e:de:45:2e:cb:82:0d:
e8:64:70:10:e1:29:d4:3f:71:58:2a:b4:b4:17:e8:
17:ca:06:dc:af:b7:82:08:d8:d3:7a:42:f6:f5:29:
7f:59:48:c4:dd:57:7d:c6:78:d3:c0:db:a5:67:3f:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:73:33:99:B5:66:84:64:00:CA:C3:1B:B4:A8:E3:28:75:63:C2:1F
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/73MzmbVmhGQAysMbtKjjKHVjwh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.134.0/24
213.218.216.0/24
Signature Algorithm: sha256WithRSAEncryption
08:8f:64:c2:0a:a2:ad:da:4f:96:c4:d1:43:73:ba:7e:d6:51:
38:27:76:b8:e9:82:e8:a3:25:d1:16:f2:d3:96:e8:e1:e5:60:
1f:f6:dc:f1:a7:d7:b3:ef:3a:ac:34:4c:2d:08:d4:29:ec:ba:
f8:80:a8:48:3b:53:57:64:3d:04:b4:09:9a:a5:78:cd:85:7e:
68:ac:16:26:4b:22:8d:84:be:ac:06:5d:c1:04:79:8e:ae:39:
c8:f8:07:60:23:d9:6b:f8:ee:5d:16:c2:65:e4:88:ff:5c:45:
96:32:01:61:ad:ce:d8:57:de:80:78:04:56:a7:c1:45:a6:55:
ee:77:24:75:3a:78:27:4c:74:e2:2b:96:3f:03:3d:b5:4f:93:
17:b6:4e:c0:ac:b7:16:ce:c9:fd:27:00:c1:c4:df:16:9a:65:
82:f9:34:53:b9:8a:9e:1e:8d:23:23:5c:43:6c:22:2e:2d:a5:
92:f9:8d:09:04:04:25:da:ce:3f:a9:cf:18:5a:c6:41:65:39:
ad:4b:23:e3:0e:d0:09:6e:b4:ab:fc:31:cd:14:4a:e5:03:d6:
7d:f2:98:5e:17:f2:90:33:14:3c:4f:ad:8b:40:bc:81:1e:94:
56:43:87:98:e5:fd:84:03:56:39:85:a1:ef:28:e5:51:31:e9:
c9:24:1b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:13 2026 by rpki-client