Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lCyG24-a2HP7gF0m15yWrJRf490.roa
File: lCyG24-a2HP7gF0m15yWrJRf490.roa (raw, json)
Hash identifier: +5gu8UPc6OKTWJfGKyRk6MhpWx+BhJ6y3v0NnUdLOfY=
Subject key identifier: 94:2C:86:DB:8F:9A:D8:73:FB:80:5D:26:D7:9C:96:AC:94:5F:E3:DD
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F7E84BB2888DFDF1ECE348674D1F10F35
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lCyG24-a2HP7gF0m15yWrJRf490.roa
Signing time: Mon 20 Jul 2026 07:54:15 +0000
ROA not before: Mon 20 Jul 2026 07:54:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213711
IP address blocks: 213.210.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:84:bb:28:88:df:df:1e:ce:34:86:74:d1:f1:0f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 20 07:54:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=942c86db8f9ad873fb805d26d79c96ac945fe3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:84:a3:b5:6c:f6:04:3f:ae:08:a3:d3:1a:
5f:4b:b6:96:72:30:ce:9a:c1:d5:74:f9:8e:cb:61:
6a:fd:1b:08:a4:53:24:70:ec:88:0a:53:26:e0:c3:
be:bf:5a:f5:70:63:14:e0:5b:24:e8:9a:33:e2:62:
90:e9:a4:30:5e:7e:da:23:11:dc:c8:cb:91:5e:c6:
96:3a:07:ba:88:c6:95:f9:81:0b:07:e9:71:3c:ad:
f0:d3:cb:14:d9:03:32:3f:c8:a1:13:21:dc:2d:54:
9c:db:7a:b6:e9:79:9a:d6:e2:8b:87:70:05:53:8c:
2c:af:e3:7d:7b:b9:5f:6a:b7:ef:ab:8f:04:29:ec:
1e:a9:94:04:74:c4:d9:2e:b0:9c:85:ca:a2:3b:47:
0c:5d:ee:ed:a8:1a:fa:82:78:f0:5e:0f:ab:79:eb:
5a:9f:f1:63:5a:1d:3c:d8:1c:a2:0d:cf:de:6b:88:
0e:cc:f5:51:8e:2a:9e:71:bc:08:a4:fb:a5:ac:6c:
b2:d0:53:d5:93:7c:0e:4f:29:dd:55:79:d1:cd:53:
11:ca:9d:dd:1b:fe:12:0a:15:81:d4:c6:fe:df:37:
b6:d5:a6:7f:a4:de:b3:fe:91:47:52:91:ad:a9:2d:
27:d5:25:2c:3d:bc:0f:e6:81:43:3b:91:30:65:80:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2C:86:DB:8F:9A:D8:73:FB:80:5D:26:D7:9C:96:AC:94:5F:E3:DD
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lCyG24-a2HP7gF0m15yWrJRf490.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.11.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e7:00:fc:54:47:4e:1a:83:f4:25:31:56:9c:33:a3:b2:47:
56:53:df:c4:55:83:d4:f9:16:47:40:dc:c4:93:1a:b5:ca:48:
da:00:9c:51:d3:e0:6a:ed:0b:a5:8c:08:1a:1e:02:a2:ae:3a:
db:a1:97:d3:a4:5c:64:36:08:80:3d:c3:94:43:18:df:80:5c:
0a:54:6c:e0:c0:a2:ed:b3:d7:ce:90:f3:64:cf:96:82:0e:20:
32:9d:80:d7:16:83:a1:53:b6:d4:70:ff:cb:e2:cc:7e:ef:bb:
57:db:3a:6f:50:36:c5:4f:59:ea:11:da:88:9c:ae:82:37:b5:
b6:32:1e:e0:32:e8:ad:4d:fb:6f:39:33:fb:d2:e6:58:a1:b1:
ea:18:a0:0e:77:fe:dd:c2:5c:d7:c1:96:7f:7c:56:37:2e:72:
98:01:96:b9:6c:2c:06:70:23:73:df:67:35:df:98:0c:2a:4e:
17:4a:d6:79:1c:5a:1f:16:06:18:21:6b:a0:2f:94:6a:c0:00:
26:bf:31:b8:0b:9d:b0:50:07:55:d4:90:11:08:0a:70:a5:da:
04:c4:e8:20:64:9f:ac:e2:f5:a1:5b:50:83:b7:12:1f:c2:ce:
fa:23:4d:98:83:14:29:41:f4:2b:46:9f:fe:12:79:7b:0c:89:
cd:91:58:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9+hLsoiN/fHs40hnTR8Q81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzIwMDc1NDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDJjODZkYjhmOWFkODczZmI4MDVkMjZkNzljOTZhYzk0NWZlM2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6aEo7Vs9gQ/rgij0xpfS7aWcjDO
msHVdPmOy2Fq/RsIpFMkcOyIClMm4MO+v1r1cGMU4Fsk6Joz4mKQ6aQwXn7aIxHc
yMuRXsaWOge6iMaV+YELB+lxPK3w08sU2QMyP8ihEyHcLVSc23q26Xma1uKLh3AF
U4wsr+N9e7lfarfvq48EKeweqZQEdMTZLrCchcqiO0cMXe7tqBr6gnjwXg+reeta
n/FjWh082ByiDc/ea4gOzPVRjiqecbwIpPulrGyy0FPVk3wOTyndVXnRzVMRyp3d
G/4SChWB1Mb+3ze21aZ/pN6z/pFHUpGtqS0n1SUsPbwP5oFDO5EwZYDcfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJQshtuPmthz+4BdJteclqyUX+PdMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvbEN5RzI0LWEySFA3Z0YwbTE1eVdySlJmNDkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dILMA0G
CSqGSIb3DQEBCwUAA4IBAQA55wD8VEdOGoP0JTFWnDOjskdWU9/EVYPU+RZHQNzE
kxq1ykjaAJxR0+Bq7QuljAgaHgKirjrboZfTpFxkNgiAPcOUQxjfgFwKVGzgwKLt
s9fOkPNkz5aCDiAynYDXFoOhU7bUcP/L4sx+77tX2zpvUDbFT1nqEdqInK6CN7W2
Mh7gMuitTftvOTP70uZYobHqGKAOd/7dwlzXwZZ/fFY3LnKYAZa5bCwGcCNz32c1
35gMKk4XStZ5HFofFgYYIWugL5RqwAAmvzG4C52wUAdV1JARCApwpdoExOggZJ+s
4vWhW1CDtxIfws76I02YgxQpQfQrRp/+Enl7DInNkVh0
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:39 2026 by rpki-client