Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HD5_wx2Vhd3wIKMyChmKFpQ0NTo.roa
File: HD5_wx2Vhd3wIKMyChmKFpQ0NTo.roa (raw, json)
Hash identifier: gLYPFB/mgdIANeoX3jFL3Yghl+/wwHx8rBnuR46w4j4=
Subject key identifier: 1C:3E:7F:C3:1D:95:85:DD:F0:20:A3:32:0A:19:8A:16:94:34:35:3A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F7E84B97FFAA6C1CB76979A866D6AB538
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HD5_wx2Vhd3wIKMyChmKFpQ0NTo.roa
Signing time: Mon 20 Jul 2026 07:54:15 +0000
ROA not before: Mon 20 Jul 2026 07:54:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 82.163.16.0/24 maxlen: 24
213.210.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:84:b9:7f:fa:a6:c1:cb:76:97:9a:86:6d:6a:b5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 20 07:54:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c3e7fc31d9585ddf020a3320a198a169434353a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b6:56:ad:09:e9:90:b3:f9:18:b4:7a:d5:2e:
0a:9a:d8:a9:aa:ef:bd:e4:10:8b:24:36:66:2e:e8:
03:20:da:f1:c3:eb:ca:71:c0:80:14:5c:fc:16:47:
9b:a5:49:52:47:31:2b:2c:4e:1e:b4:e6:1f:5a:10:
e7:f4:65:11:7b:66:54:10:af:56:e8:b0:ca:e6:57:
16:82:c1:1f:cc:3d:bd:f0:2a:23:86:d6:70:74:68:
50:b4:63:61:09:eb:5d:20:9a:c5:28:39:31:59:85:
8c:14:d7:18:7f:94:39:96:f8:95:03:2f:db:51:62:
b7:0e:56:95:5b:5c:f2:c1:71:d7:00:42:42:94:8b:
00:3f:6f:2e:2d:19:df:60:fe:30:c5:ce:bc:47:d3:
24:d7:46:9a:66:97:5b:94:e2:b8:a5:3c:77:6e:15:
e8:15:67:f3:f2:0b:d4:da:d1:b3:15:1e:57:ac:2f:
59:f2:ca:99:a1:a0:17:b1:c3:ba:c4:92:5d:cc:13:
0e:2f:60:e5:4c:82:1a:4b:ba:41:22:7e:d7:b0:94:
6c:8e:66:1f:74:6f:14:04:95:78:ff:4f:34:b6:a7:
06:4f:61:76:59:89:dd:bb:64:df:d7:fd:ac:5f:d9:
48:e1:ea:2c:32:b7:d5:4a:24:b9:39:f7:35:8f:1a:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3E:7F:C3:1D:95:85:DD:F0:20:A3:32:0A:19:8A:16:94:34:35:3A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HD5_wx2Vhd3wIKMyChmKFpQ0NTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.16.0/24
213.210.24.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f6:8e:fe:e3:43:98:ea:81:41:1e:86:bc:a9:c5:02:b9:f1:
23:39:3f:4c:07:35:50:e7:08:ca:d9:c9:60:40:8b:ec:f4:91:
90:91:0f:26:26:91:79:f4:29:7b:54:91:7f:a8:0a:9e:6c:29:
02:63:a9:66:b0:a0:f8:33:83:64:c5:af:96:f8:1a:de:43:12:
07:e3:3d:56:1f:13:0b:14:56:8e:57:93:75:b9:45:6d:c5:ee:
dc:0c:8c:91:44:47:b2:bb:94:3b:21:d6:00:0a:ce:7b:53:76:
15:51:bb:4f:af:f8:80:5b:f4:c7:2e:98:0d:6c:c4:c9:b8:dc:
b7:f9:0a:23:8f:3a:e4:a0:83:f4:81:eb:35:13:ed:e1:1a:b2:
8c:a2:50:55:16:26:74:94:f6:f0:70:eb:1c:14:3b:9c:b6:b5:
b5:10:7c:6c:1b:20:66:02:58:8e:85:e1:16:08:62:91:4e:5f:
a8:c3:ca:54:95:32:ba:82:28:99:0d:29:4a:60:a0:89:fb:98:
3a:09:0e:6d:61:0d:8e:4b:b8:79:ab:4e:65:df:16:95:1e:07:
6a:4c:b4:21:f4:65:88:58:23:52:14:46:dd:b3:35:3d:60:11:
74:0a:90:bd:57:6c:19:14:8c:2b:51:fb:ba:d9:dd:c6:d7:13:
29:fb:9b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:27 2026 by rpki-client