Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/u1MXuoDQxLs343HvzvLwnlngwP0.roa
File: u1MXuoDQxLs343HvzvLwnlngwP0.roa (raw, json)
Hash identifier: a5zLvF6jX+5E0G11HSokpp6tzfg8Nm7/sOtIMLICxEQ=
Subject key identifier: BB:53:17:BA:80:D0:C4:BB:37:E3:71:EF:CE:F2:F0:9E:59:E0:C0:FD
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F7E84B9BB6B59996F786D567C1E1C2213
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/u1MXuoDQxLs343HvzvLwnlngwP0.roa
Signing time: Mon 20 Jul 2026 07:54:15 +0000
ROA not before: Mon 20 Jul 2026 07:54:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154408
IP address blocks: 213.210.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:84:b9:bb:6b:59:99:6f:78:6d:56:7c:1e:1c:22:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 20 07:54:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb5317ba80d0c4bb37e371efcef2f09e59e0c0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:84:b9:68:bc:1c:96:39:1e:1d:7d:b2:c6:
09:0a:b5:e6:51:c6:44:43:b4:fb:a9:92:55:a4:8a:
d6:75:52:32:71:f2:33:07:d7:7c:90:0b:79:6a:13:
f4:27:74:6e:bd:f7:b5:61:ed:fb:a6:fd:fa:ad:e1:
d0:e8:ba:18:ab:5b:c3:c7:fd:b1:0c:75:91:6a:6d:
65:f6:25:7f:25:c9:db:6d:08:36:6b:e6:44:c3:45:
23:0e:e6:f9:ce:1e:b7:aa:fe:d8:83:ce:26:79:09:
df:5d:2a:a5:5a:5e:3a:9c:b9:73:d0:c1:81:a9:23:
b9:7a:45:17:f7:52:0c:33:22:dc:98:99:8a:c1:60:
fd:c3:27:28:53:36:d5:cd:80:10:c4:38:39:87:86:
e5:87:2b:7b:6b:a9:5d:0b:eb:bc:eb:c8:1e:e4:06:
b0:a8:8c:33:a5:88:38:7e:e0:a8:c6:7a:17:09:bf:
c4:93:28:07:c0:5d:00:cf:c9:dd:1b:53:d7:f2:19:
3e:e5:d4:bd:f3:4b:db:91:6e:97:aa:d5:2e:4c:cf:
eb:3b:85:34:ae:ca:43:eb:d9:3a:f2:f1:ed:c7:fb:
07:8f:7b:33:c6:ad:11:22:99:85:9c:ca:be:de:77:
ee:50:7c:49:ac:92:b6:0a:33:96:31:df:68:e2:90:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:53:17:BA:80:D0:C4:BB:37:E3:71:EF:CE:F2:F0:9E:59:E0:C0:FD
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/u1MXuoDQxLs343HvzvLwnlngwP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.11.0/24
Signature Algorithm: sha256WithRSAEncryption
02:fe:9f:75:c3:75:b4:ec:09:5b:16:0a:ab:a3:9e:be:44:62:
22:e6:c4:1f:da:82:21:d8:a5:7d:01:f6:4b:60:7f:f8:da:1e:
f0:f9:a3:a3:d2:ff:0b:29:78:9c:04:e7:a2:6d:aa:3e:cd:0d:
bb:e8:1f:a9:e6:a1:cc:1e:6c:9d:42:9e:cc:1b:00:64:ea:02:
12:3d:e9:88:2c:83:cf:02:38:01:cd:45:be:28:4c:58:51:0b:
f4:c4:83:f8:2f:f5:a1:2d:78:0d:e4:c4:13:5e:d2:14:9a:e9:
55:4c:64:4b:60:60:9b:e1:07:cc:14:13:17:04:85:62:b4:82:
28:ff:d3:4c:41:c1:82:b9:1e:86:42:d6:11:79:6b:04:2a:0e:
59:1e:8b:71:d1:bb:0c:d1:d5:21:a2:d7:56:c1:90:ac:cd:4c:
10:95:ae:a5:f7:ea:2b:b6:3c:64:c2:3a:4a:9a:80:7a:49:ae:
76:ba:26:c4:e8:4e:ab:50:7d:03:15:38:1d:b3:d3:b9:28:5d:
a8:aa:41:f6:6b:d5:39:56:4f:8a:56:23:35:75:5d:b9:c5:37:
53:1c:6c:d9:1a:16:9f:99:b8:3e:6b:fe:c2:65:a9:9e:0c:94:
74:8c:8e:5a:72:88:a3:ff:59:24:96:9b:8e:f5:fe:84:f2:17:
96:2a:76:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:42 2026 by rpki-client