Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pR-HpLIOQfErpV-gpMJjKfgMVgI.roa
File: pR-HpLIOQfErpV-gpMJjKfgMVgI.roa (raw, json)
Hash identifier: zkEQmy7AjcTy220FZD+2VH/1EVFv2ZW0wiJ7pPMbh+k=
Subject key identifier: A5:1F:87:A4:B2:0E:41:F1:2B:A5:5F:A0:A4:C2:63:29:F8:0C:56:02
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A1BFA91D3DAA96237B40D3123C426A20C3
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pR-HpLIOQfErpV-gpMJjKfgMVgI.roa
Signing time: Mon 09 Nov 2026 09:34:53 +0000
ROA not before: Mon 09 Nov 2026 09:34:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215727
IP address blocks: 109.176.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:a9:1d:3d:aa:96:23:7b:40:d3:12:3c:42:6a:20:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Nov 9 09:34:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a51f87a4b20e41f12ba55fa0a4c26329f80c5602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:92:4a:60:80:3c:76:72:cf:0c:22:85:7d:
e1:78:3d:48:4b:af:55:b3:bc:72:62:d4:77:77:ee:
d3:2e:db:aa:b7:14:67:a5:eb:92:ec:86:84:24:47:
a9:57:2b:37:69:c8:35:cc:4d:5a:2a:2a:34:d1:c6:
b5:fa:d5:4f:5a:16:20:21:a2:db:fc:a9:ab:ae:45:
42:00:8a:d7:e7:4e:09:db:f8:6d:e3:02:9d:b2:64:
fc:24:6e:d1:60:ef:ba:a2:07:0f:db:5f:1e:5a:2c:
2b:63:b9:e0:9c:c4:da:c0:65:95:b6:c5:ed:ad:45:
0e:d6:db:80:c7:3c:38:6c:5b:e9:42:20:a8:0f:d7:
02:77:7f:58:2b:16:f1:aa:05:b2:9a:3b:47:0e:dc:
c3:f3:bd:17:de:96:fc:65:4d:4f:79:eb:38:63:ee:
d4:54:c5:f4:70:81:bd:83:46:51:25:02:e6:d6:5a:
c9:93:d8:08:a5:b9:6b:8d:a7:75:05:61:24:93:3b:
1e:4a:10:5f:dc:b7:44:52:34:5a:76:c8:38:95:fd:
65:99:5f:b3:7d:b3:4c:2d:39:b8:1a:9b:5e:a0:66:
8c:0b:5c:8c:42:b4:4d:ba:e6:f5:8b:83:25:d1:97:
ee:88:0a:f9:43:94:d1:f1:f8:8e:28:6e:78:4d:53:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1F:87:A4:B2:0E:41:F1:2B:A5:5F:A0:A4:C2:63:29:F8:0C:56:02
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pR-HpLIOQfErpV-gpMJjKfgMVgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c6:8f:30:8c:a3:4c:ea:4f:52:91:8a:e4:4f:22:0b:86:4a:
6f:f2:2a:ac:b7:e3:85:eb:75:6a:fc:ac:8e:0b:e6:b8:96:2c:
5d:58:83:00:9f:c0:81:37:7e:1e:02:11:06:b6:27:18:fa:7d:
7f:d2:1e:e9:d9:b1:90:88:c4:8f:29:aa:98:0e:c0:bd:c1:66:
48:ee:49:38:af:72:f2:21:85:54:d1:dd:74:68:f2:80:95:4e:
a0:55:e5:50:76:e7:ab:a9:db:1a:ab:5d:50:c3:34:41:e3:50:
3e:ce:f8:2c:5d:84:34:5d:89:db:ea:7d:7f:3f:53:1d:d6:67:
fc:4e:16:34:b5:f6:5b:b5:fb:56:71:97:5f:5d:2e:f7:da:bf:
c1:33:d2:e2:b3:f5:f5:27:1a:1d:80:20:3c:26:44:8d:e4:3a:
d3:89:7c:12:23:f0:81:c9:aa:e5:bb:d6:02:b9:c1:e0:58:94:
5c:f6:ae:a1:bc:1a:d5:9a:03:5e:85:dc:f5:43:2b:a4:71:53:
18:d2:bf:66:5b:a3:2d:38:1c:cb:15:43:74:7c:24:f5:df:34:
83:54:09:7d:8e:7c:fe:10:a9:fa:03:0c:65:8b:02:66:bd:c5:
4c:9f:d8:23:c4:b2:d5:c1:d7:8c:23:f6:b2:0e:5f:5c:4e:a5:
43:28:ac:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:51 2026 by rpki-client