Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4Fe-OFKjDUm2q3uFAWrFkanNS08.roa
File: 4Fe-OFKjDUm2q3uFAWrFkanNS08.roa (raw, json)
Hash identifier: DEx5fUquFS4D3sP+9Eyp/HxSC6Mhfs619cuBYYxMOhk=
Subject key identifier: E0:57:BE:38:52:A3:0D:49:B6:AB:7B:85:01:6A:C5:91:A9:CD:4B:4F
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A06E5C0C1CBC2ED96A99CD62B0C9192435
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4Fe-OFKjDUm2q3uFAWrFkanNS08.roa
Signing time: Fri 04 Sep 2026 21:38:41 +0000
ROA not before: Fri 04 Sep 2026 21:38:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9294
IP address blocks: 81.168.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:5c:0c:1c:bc:2e:d9:6a:99:cd:62:b0:c9:19:24:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 4 21:38:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e057be3852a30d49b6ab7b85016ac591a9cd4b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:8f:db:38:d9:c5:9b:0f:6f:13:7c:4e:2c:
a0:a0:24:f0:c1:7e:4c:6f:8e:96:0a:77:ac:bd:2c:
d8:1f:3e:86:ea:3c:11:bc:53:73:9b:3d:8c:55:00:
cb:37:3a:a2:09:2f:cb:16:08:cc:fe:18:9d:0c:07:
9b:5b:5c:13:25:47:27:45:dc:55:1e:b7:c3:b7:9f:
e3:7d:23:33:61:76:de:18:c0:09:63:c2:39:d8:ff:
6d:17:24:17:b8:1b:8b:35:da:92:1f:76:f8:3c:67:
9d:6a:7a:ec:ed:bc:3c:1c:10:29:5e:05:f8:95:61:
46:6d:dc:49:26:b1:a6:80:7c:82:61:0d:c9:c1:3d:
5d:ca:a6:2e:33:53:ba:d1:f2:4f:d1:99:fd:75:49:
fe:45:c0:94:b3:f6:9c:76:3e:1d:6d:4a:ed:4e:ad:
16:be:ea:d5:0f:08:24:93:e8:76:44:c9:9c:ee:1c:
7f:0d:ed:12:bd:15:cf:2b:dc:a2:39:c0:59:80:89:
f6:3b:94:e9:83:83:f2:f8:6f:89:6d:b9:1a:7f:27:
67:4c:02:8b:39:fa:bc:15:07:e0:b1:86:83:44:4f:
8e:37:c1:bd:0b:b7:0f:e9:77:ea:11:64:46:43:f3:
ad:19:f4:6d:7d:ad:db:41:cc:04:50:2c:9b:20:cf:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:57:BE:38:52:A3:0D:49:B6:AB:7B:85:01:6A:C5:91:A9:CD:4B:4F
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4Fe-OFKjDUm2q3uFAWrFkanNS08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.116.0/24
Signature Algorithm: sha256WithRSAEncryption
77:03:45:3e:f2:71:07:c8:db:7f:e9:d9:5d:bb:ee:5b:7f:61:
54:58:02:1b:5c:77:a0:b7:3a:59:cc:b3:5d:ec:87:2b:42:c5:
89:63:cb:4b:a0:19:94:35:3d:cf:08:95:de:ae:4a:95:87:41:
25:b0:02:2b:b6:0c:d3:79:d0:71:cf:d4:ff:c9:1c:c2:2a:a6:
c9:73:43:c3:1e:ae:77:26:b1:44:f0:60:a7:6c:6f:86:4d:ba:
db:86:84:97:a6:7e:32:36:cb:fe:1e:12:2c:a1:82:f9:4a:28:
32:27:52:68:5f:9b:43:06:ce:99:dc:73:eb:19:ae:ad:46:02:
97:ab:69:b2:78:06:8c:90:81:1a:6d:74:42:d1:b8:0f:5c:fd:
b5:dc:83:fe:80:86:ff:41:47:d7:7e:1e:e2:fc:c1:6b:ec:63:
56:6f:6a:d3:f2:db:de:ce:29:46:bb:5e:a2:dd:26:4e:ad:81:
bb:e1:84:98:26:41:06:ec:3e:6d:09:44:cc:fb:48:8e:8e:c4:
a3:a0:c0:96:67:a6:9c:ef:dc:18:a5:54:a6:53:f0:a2:f9:14:
db:aa:cc:00:10:ae:b5:7f:d3:42:36:bd:32:79:11:bb:6b:bb:
ee:62:45:54:37:e7:5b:f0:cc:29:9c:eb:38:9d:fc:fd:5a:05:
d5:26:83:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:36:53 2026 by rpki-client