Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rGRqmH1z3_L4XZdIYMAU2npJ-o8.roa
File: rGRqmH1z3_L4XZdIYMAU2npJ-o8.roa (raw, json)
Hash identifier: BcG00iPew7CtzYMq4jtq2rN+pJp+/WXWwg72thzGzt8=
Subject key identifier: AC:64:6A:98:7D:73:DF:F2:F8:5D:97:48:60:C0:14:DA:7A:49:FA:8F
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0C2D18DC6617B3B24B21FFDA6D33C2F54
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rGRqmH1z3_L4XZdIYMAU2npJ-o8.roa
Signing time: Mon 21 Sep 2026 07:15:08 +0000
ROA not before: Mon 21 Sep 2026 07:15:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 81.168.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:d1:8d:c6:61:7b:3b:24:b2:1f:fd:a6:d3:3c:2f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 21 07:15:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac646a987d73dff2f85d974860c014da7a49fa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:a7:6e:ed:02:6a:34:fb:40:3b:9f:04:cb:
0a:07:8f:f0:08:1f:07:85:51:33:10:01:9e:b1:4f:
98:aa:c9:f8:e0:e8:d3:be:5d:1b:b7:5d:6f:16:6d:
12:6c:9f:2f:cd:0a:4b:da:01:31:82:ed:68:96:49:
6d:8d:09:4d:63:ae:8f:db:ef:ed:34:ff:bc:b6:be:
9a:13:f0:b1:63:35:8d:6e:67:1b:ac:4c:5b:1e:3d:
ed:83:5b:12:8c:f5:de:e9:ce:c7:88:2c:13:ab:39:
1e:11:2e:41:37:24:3b:fe:18:98:cc:05:69:b9:63:
4a:df:e7:e3:04:69:d9:88:90:96:c5:53:b9:0c:04:
d5:13:a8:e8:20:fb:3b:d9:2c:ae:5d:4b:14:23:23:
ae:02:35:b1:ff:7b:99:d6:b1:f3:f1:03:db:b3:0b:
6a:a9:f2:29:e7:28:1b:a4:bf:01:f0:12:c9:37:56:
0d:66:b5:56:0b:8b:5e:8d:9e:c0:65:2e:f5:74:5f:
ea:13:8f:2d:0c:d8:99:62:b2:19:c0:9e:07:f1:99:
b6:75:f7:49:86:4a:21:6f:af:b5:be:e8:09:a8:ed:
a0:4b:cf:de:58:d6:95:6c:6c:63:ef:2d:9d:1f:2c:
2e:d5:4e:41:01:ca:e4:f3:27:ee:d4:d3:3c:df:24:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:64:6A:98:7D:73:DF:F2:F8:5D:97:48:60:C0:14:DA:7A:49:FA:8F
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rGRqmH1z3_L4XZdIYMAU2npJ-o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.109.0/24
Signature Algorithm: sha256WithRSAEncryption
28:eb:cc:6e:58:41:68:a1:63:1f:a1:6d:3a:ff:cb:89:66:7e:
ba:b3:83:6d:2f:c4:28:01:e3:3e:28:d2:0d:2c:76:73:6d:44:
17:e0:a6:d2:bb:1c:22:4d:5c:a9:16:5a:8b:79:c3:69:84:de:
1f:cc:2b:9a:cb:36:db:6f:f3:3f:58:c6:57:55:0e:8e:ad:85:
08:39:6e:3a:7f:85:68:59:b9:5a:54:86:c0:a5:58:31:f8:5d:
9f:f2:56:ef:b1:7d:e8:c1:5e:27:ff:9e:c0:4c:f5:8b:16:1f:
90:bf:c2:7c:80:62:ad:98:44:56:0e:49:4a:bf:5b:2c:2d:3a:
cb:47:15:60:7a:90:f9:47:3e:80:63:cb:47:91:65:0c:bd:f3:
e0:0a:ae:76:4a:40:a7:e0:75:5c:03:4d:69:0c:ad:02:ff:1b:
19:51:0f:d7:e5:25:57:af:29:6c:0f:17:13:fc:a7:b2:82:e4:
13:06:47:fd:d4:3b:16:1f:2a:3d:a3:bc:ff:d2:12:fe:53:1a:
7e:94:a3:b2:8d:3d:da:8c:c8:d0:93:73:d5:26:92:81:36:1a:
b3:9c:6b:bb:8c:47:1d:2f:13:09:85:05:08:a3:88:55:c6:68:
be:c2:1d:55:22:d7:e4:bd:d4:2f:65:36:b8:24:b8:7e:89:86:
37:df:73:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:04:16 2026 by rpki-client