Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cNVcSfEWdhck4U-90GWMTE-aWLw.roa
File: cNVcSfEWdhck4U-90GWMTE-aWLw.roa (raw, json)
Hash identifier: 5IHmh4SenD+OUIEsRh8N0vufpU/lkSmbwg+bMICDKZQ=
Subject key identifier: 70:D5:5C:49:F1:16:76:17:24:E1:4F:BD:D0:65:8C:4C:4F:9A:58:BC
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A1CF44A99ADE455E5EE0D2654C6B39DBA6
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cNVcSfEWdhck4U-90GWMTE-aWLw.roa
Signing time: Thu 12 Nov 2026 10:19:05 +0000
ROA not before: Thu 12 Nov 2026 10:19:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 213.210.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:44:a9:9a:de:45:5e:5e:e0:d2:65:4c:6b:39:db:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Nov 12 10:19:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70d55c49f116761724e14fbdd0658c4c4f9a58bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:4b:f7:91:8e:8a:6a:46:5a:bd:8e:d4:db:
7f:e1:72:b6:f9:27:ed:0f:27:fb:44:16:f9:a0:76:
bb:2f:9b:45:ea:4f:70:ed:14:73:2c:d5:37:29:e0:
bb:77:6f:24:d9:0b:39:ea:ad:4f:34:51:ff:f1:3c:
0d:ca:de:f9:db:ef:28:1f:e1:69:a7:d7:f9:65:b4:
92:aa:6c:92:70:89:65:80:16:4e:c7:d0:56:5b:ca:
d1:7b:81:ba:67:23:7f:de:ba:50:5f:6b:94:06:27:
03:9f:48:2d:c6:2e:4a:38:2f:ff:c4:3c:a9:b3:dd:
be:66:7e:bc:09:dd:90:45:09:e8:83:14:ea:13:6a:
83:9d:c7:03:b3:50:5e:d0:2c:a5:85:9b:19:f2:3e:
ea:f5:1a:3a:5a:ae:84:16:df:a3:24:06:73:88:1d:
b4:23:1e:ce:68:76:82:de:bf:e6:a2:c9:9c:5f:39:
b2:7c:e2:c6:7d:2d:42:7e:1e:a4:3e:1d:e5:14:64:
68:a9:ad:77:43:48:6e:c9:c9:a9:b3:73:7b:41:a9:
68:8b:f5:8d:d8:40:6f:dd:7f:38:8e:8d:30:fa:cc:
51:52:c8:f0:2f:67:ea:9a:2f:ce:b7:b6:70:a2:1b:
4e:35:02:60:8d:32:eb:ea:5b:86:b3:d8:9e:ee:c9:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D5:5C:49:F1:16:76:17:24:E1:4F:BD:D0:65:8C:4C:4F:9A:58:BC
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cNVcSfEWdhck4U-90GWMTE-aWLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.53.0/24
Signature Algorithm: sha256WithRSAEncryption
85:4f:2c:5a:76:8a:9d:3c:fb:76:ff:9b:09:d9:51:71:15:59:
99:fb:56:95:89:bf:43:5d:7e:7f:65:6b:d4:de:33:f9:32:bf:
7c:60:c2:e3:ff:a6:d5:a2:d4:a4:aa:26:73:2d:87:32:fc:c1:
2a:d6:ac:95:91:ba:bf:10:19:d1:40:a2:e3:bc:99:87:dd:0e:
c2:ac:ed:57:4e:8f:01:8d:06:89:ea:35:ae:29:fb:ca:92:9d:
98:d9:ea:98:c5:c5:b8:f7:67:af:32:e6:90:ad:1b:6e:3c:37:
b7:66:59:49:ee:75:e5:20:9e:4e:68:3f:24:ce:f0:d3:ab:5f:
dd:2c:a1:ad:2a:0c:c9:df:f0:24:51:b9:fb:0a:05:77:00:26:
77:3f:01:7a:01:48:39:dd:3c:73:d8:af:db:9a:bf:14:63:ba:
26:9d:5c:f3:9d:de:cb:ba:5d:db:c3:ec:b0:c9:1a:c8:c5:14:
17:87:da:12:f5:37:8a:e7:80:1f:7b:58:5b:1a:79:cd:d7:99:
b9:15:37:3a:57:dc:40:8e:a8:69:d5:3b:8e:ae:4c:d7:1d:50:
d7:31:19:73:87:ca:fb:17:93:9b:95:29:a6:d5:97:0e:9d:90:
83:44:18:9f:2b:42:a5:f5:72:d6:30:08:08:59:e6:1c:57:b9:
15:0c:99:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:50 2026 by rpki-client