Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9eqe7_-1Ssd2lWwSC0yfOx2r51s.roa
File: 9eqe7_-1Ssd2lWwSC0yfOx2r51s.roa (raw, json)
Hash identifier: 52muJCHrqn/+AQGoBMxFY1DQddTO94boxeG2028fvkU=
Subject key identifier: F5:EA:9E:EF:FF:B5:4A:C7:76:95:6C:12:0B:4C:9F:3B:1D:AB:E7:5B
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F40D195215734B8019F3E68218947A00B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9eqe7_-1Ssd2lWwSC0yfOx2r51s.roa
Signing time: Wed 08 Jul 2026 08:21:44 +0000
ROA not before: Wed 08 Jul 2026 08:21:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33355
IP address blocks: 213.130.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:d1:95:21:57:34:b8:01:9f:3e:68:21:89:47:a0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 8 08:21:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5ea9eefffb54ac776956c120b4c9f3b1dabe75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:77:f4:6a:2d:61:6c:18:2f:74:8c:7d:1d:
92:b4:6e:93:0e:db:4a:5f:f0:a6:29:31:36:de:46:
bf:b8:2a:0b:14:a6:c9:30:bc:61:c9:49:c2:0b:6f:
23:87:f7:8f:9c:89:9f:99:2a:46:b6:35:9d:2b:81:
55:3c:7d:55:2f:d0:82:58:a4:b5:77:b6:e7:9c:a2:
de:b8:7a:ba:52:17:cb:09:6c:6a:b5:8f:38:02:34:
13:78:a9:2c:db:b6:b6:75:0d:00:1d:f1:ba:33:0f:
76:fb:a5:a0:9e:7c:35:d0:d6:3d:52:08:a4:62:24:
c6:8c:d5:0d:61:e7:d5:3c:f6:8c:62:96:53:d5:51:
f8:b8:e4:81:7d:38:97:52:31:5d:a6:7a:32:9e:8d:
f6:e9:db:09:cc:ab:3e:12:2e:05:41:a8:b7:37:15:
9b:ea:99:0f:f9:c8:4e:db:07:82:c2:0b:55:8b:4f:
92:29:b1:5c:37:5a:3a:2e:30:73:a6:e0:b0:a6:31:
c9:86:8f:45:fd:b9:cb:ec:c5:9e:fe:78:76:d2:76:
8c:e9:25:86:ac:5f:82:0b:53:fc:95:6d:b8:b7:38:
ee:03:36:b4:ed:c1:2a:b5:89:6c:f5:b2:af:5e:3e:
2c:1e:08:c7:46:3d:5e:2f:23:52:94:09:15:b1:65:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EA:9E:EF:FF:B5:4A:C7:76:95:6C:12:0B:4C:9F:3B:1D:AB:E7:5B
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9eqe7_-1Ssd2lWwSC0yfOx2r51s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.132.0/24
Signature Algorithm: sha256WithRSAEncryption
80:7d:85:93:57:a0:00:1d:72:cb:e9:3a:1f:43:63:41:6e:33:
b8:d0:1a:20:9d:b8:a9:cd:be:d8:2e:2f:3a:3a:ee:2c:05:71:
af:58:fe:4c:fd:1e:d9:09:ff:2e:c2:05:15:f2:e3:7a:49:1d:
94:0f:1c:95:60:02:69:79:97:45:02:35:b9:db:8c:de:51:40:
b6:c7:64:98:53:0d:c3:7d:ea:93:a6:6f:5e:4a:53:cf:0e:e9:
e2:13:05:fa:b6:a2:e2:40:9a:d7:14:e5:bc:e4:54:e5:c4:c8:
f7:87:ac:41:fa:84:9a:0e:63:50:d6:ff:95:2d:a7:c6:0b:49:
40:a6:5c:a7:b2:5f:68:70:1d:55:a4:f7:f2:ed:46:c2:fa:62:
fe:55:49:54:c2:3a:fe:8d:09:fa:bc:67:ee:cc:37:db:87:6c:
03:d7:bd:3a:e4:8c:ff:23:67:33:fa:f9:ba:f2:aa:d8:10:14:
bd:e2:bc:4c:e1:05:73:cd:66:2c:6b:aa:74:ee:21:59:77:96:
bb:2d:a7:11:56:cd:0b:d9:26:3a:f5:79:96:be:42:a3:68:29:
5d:4a:46:ed:66:d3:1e:a2:31:b2:6c:bf:bb:df:a0:88:5b:df:
2a:ae:59:2d:9e:1d:0f:e1:db:9e:b6:fc:de:0a:8f:ad:56:3b:
57:c1:6e:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9A0ZUhVzS4AZ8+aCGJR6ALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzA4MDgyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWVhOWVlZmZmYjU0YWM3NzY5NTZjMTIwYjRjOWYzYjFkYWJlNzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7F39GotYWwYL3SMfR2StG6TDttK
X/CmKTE23ka/uCoLFKbJMLxhyUnCC28jh/ePnImfmSpGtjWdK4FVPH1VL9CCWKS1
d7bnnKLeuHq6UhfLCWxqtY84AjQTeKks27a2dQ0AHfG6Mw92+6Wgnnw10NY9Ugik
YiTGjNUNYefVPPaMYpZT1VH4uOSBfTiXUjFdpnoyno326dsJzKs+Ei4FQai3NxWb
6pkP+chO2weCwgtVi0+SKbFcN1o6LjBzpuCwpjHJho9F/bnL7MWe/nh20naM6SWG
rF+CC1P8lW24tzjuAza07cEqtYls9bKvXj4sHgjHRj1eLyNSlAkVsWXX0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPXqnu//tUrHdpVsEgtMnzsdq+dbMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvOWVxZTdfLTFTc2QybFd3U0MweWZPeDJyNTFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YKEMA0G
CSqGSIb3DQEBCwUAA4IBAQCAfYWTV6AAHXLL6TofQ2NBbjO40Bognbipzb7YLi86
Ou4sBXGvWP5M/R7ZCf8uwgUV8uN6SR2UDxyVYAJpeZdFAjW524zeUUC2x2SYUw3D
feqTpm9eSlPPDuniEwX6tqLiQJrXFOW85FTlxMj3h6xB+oSaDmNQ1v+VLafGC0lA
plynsl9ocB1VpPfy7UbC+mL+VUlUwjr+jQn6vGfuzDfbh2wD17065Iz/I2cz+vm6
8qrYEBS94rxM4QVzzWYsa6p07iFZd5a7LacRVs0L2SY69XmWvkKjaCldSkbtZtMe
ojGybL+736CIW98qrlktnh0P4duetvzeCo+tVjtXwW4z
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:12 2026 by rpki-client