Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9ncUlJJmkUkniaLBeYMIp3URvmc.roa
File: 9ncUlJJmkUkniaLBeYMIp3URvmc.roa (raw, json)
Hash identifier: v8H+MtNgOlXB6OlJxguALjzSeoQsl4O7SQ8Hl876O2w=
Subject key identifier: F6:77:14:94:92:66:91:49:27:89:A2:C1:79:83:08:A7:75:11:BE:67
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F8E8AD3FBD2BDF439220343ADA67E400A
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9ncUlJJmkUkniaLBeYMIp3URvmc.roa
Signing time: Thu 23 Jul 2026 10:34:50 +0000
ROA not before: Thu 23 Jul 2026 10:34:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 81.168.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:8a:d3:fb:d2:bd:f4:39:22:03:43:ad:a6:7e:40:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 23 10:34:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6771494926691492789a2c1798308a77511be67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:80:12:77:cb:e7:a1:97:99:92:7a:73:4c:
2c:b3:d6:c5:30:b3:65:c2:2b:61:0d:02:d3:c4:67:
e9:c1:3c:29:03:62:04:99:84:0f:6d:fa:ef:b8:33:
e6:00:94:1b:0b:79:d4:86:be:ba:71:1c:3d:b2:eb:
d2:e3:a6:6f:4b:15:af:64:a6:96:c8:63:1a:ed:4d:
04:88:0c:91:d6:db:c9:12:ba:80:0c:0e:20:96:c2:
cf:13:f4:e3:c9:e5:16:9d:ba:4f:2f:57:e6:02:ae:
ff:bb:bd:6d:8e:9b:3f:3d:42:12:70:c0:2f:8b:8e:
68:8b:17:ec:69:6b:b4:56:d0:47:71:12:0b:79:71:
1f:df:e3:5b:6b:c4:87:22:2b:4f:18:f7:40:c5:cf:
37:75:5e:67:63:65:c6:74:37:af:e3:d6:f8:85:5a:
2f:d1:4c:c0:dd:02:02:48:34:28:3d:43:2a:b2:57:
70:61:eb:cf:b6:a6:c3:d5:0f:ac:90:cf:1d:63:38:
2d:4c:a9:d0:13:70:1a:d6:d8:48:43:be:c0:45:7c:
fc:f4:96:4c:b1:45:12:46:c0:8f:d9:9e:73:1a:a5:
93:09:b3:0d:3a:58:b9:40:07:cf:22:99:05:7d:61:
68:6f:61:9e:4d:28:82:58:2c:48:43:d2:9a:12:74:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:77:14:94:92:66:91:49:27:89:A2:C1:79:83:08:A7:75:11:BE:67
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9ncUlJJmkUkniaLBeYMIp3URvmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.62.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f3:b8:3d:a2:7f:fa:a3:88:8f:72:ff:53:80:cc:9c:33:83:
25:1f:c0:7b:f5:8a:b4:7c:d5:09:1c:aa:3d:bd:b9:09:b7:48:
6c:04:e2:cf:8e:d7:09:ff:70:ab:88:24:cc:80:56:06:4c:62:
35:6f:30:e7:49:39:c2:43:d1:8a:56:10:6a:00:a6:1a:be:b9:
c5:ef:f8:5a:ec:21:1c:e3:aa:aa:0d:85:38:f8:c7:ea:36:ab:
04:d4:6f:01:48:1b:22:8a:c7:cb:9c:61:c4:6a:f4:ed:72:1b:
20:b6:d6:d4:53:62:ee:c5:15:14:22:96:bb:cc:a0:65:cc:33:
fb:ff:a7:66:a4:7a:8f:37:44:3f:ae:df:1a:03:21:69:d6:37:
10:2e:85:59:11:d5:df:13:ef:27:96:dd:50:ac:9a:df:72:02:
9d:22:06:62:1e:15:79:02:21:a3:08:06:8b:b0:31:14:c2:0e:
26:34:1a:17:fa:e7:06:1b:60:76:61:a9:8a:d4:74:ee:fe:bf:
7d:0d:14:67:d8:59:41:05:78:94:ff:98:d2:00:fa:fc:6b:92:
02:fa:88:e7:a6:4a:25:20:ea:01:06:7b:2e:e5:ed:4e:5c:69:
8d:d4:44:04:49:14:f4:2c:15:5d:87:a1:df:6c:4c:9a:4e:a8:
8f:a2:75:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:49 2026 by rpki-client