Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4egxH-eUrjloucp5Jq3dlil2AmQ.roa
File: 4egxH-eUrjloucp5Jq3dlil2AmQ.roa (raw, json)
Hash identifier: PqFkUoPJDH0kD6lGmKwa8aYXmVT6HZftmdWR6OPRCRg=
Subject key identifier: E1:E8:31:1F:E7:94:AE:39:68:B9:CA:79:26:AD:DD:96:29:76:02:64
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC7AF384FEAA60AFCCF600ED26A260912
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4egxH-eUrjloucp5Jq3dlil2AmQ.roa
Signing time: Mon 03 Aug 2026 12:52:56 +0000
ROA not before: Mon 03 Aug 2026 12:52:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214915
IP address blocks: 89.213.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:af:38:4f:ea:a6:0a:fc:cf:60:0e:d2:6a:26:09:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 12:52:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1e8311fe794ae3968b9ca7926addd9629760264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:bd:92:fb:4b:b5:92:9c:16:4b:ab:3e:b5:
78:19:c4:c4:3b:a7:95:09:04:ae:aa:53:46:60:df:
08:a6:11:a4:12:63:d5:cf:76:fd:08:83:e7:05:78:
f4:1e:58:c3:5b:13:15:ec:38:3b:c1:42:b3:72:c4:
53:3c:52:da:03:90:f6:10:18:8d:8c:f5:69:17:18:
22:85:2b:c8:89:57:56:50:62:76:aa:7a:ba:ca:90:
eb:fb:d1:1b:32:a3:a5:85:89:8c:20:68:b2:72:1f:
1b:39:d0:61:de:3d:6f:5d:8f:e4:74:89:c0:d6:b3:
c6:df:ba:2f:0d:c6:cc:3f:18:cf:3c:3c:10:a5:12:
37:e2:77:80:98:2e:4d:32:26:11:0c:88:12:b9:9d:
e1:3a:42:1e:b8:5b:88:80:21:95:ca:29:f4:78:42:
78:99:5b:da:9a:4b:11:38:5d:5d:bc:d5:3c:4e:06:
66:16:f9:a1:70:df:02:03:4f:ab:d0:bd:c0:32:f2:
2c:0d:f3:2f:bc:20:23:70:a3:47:b2:6f:f5:88:02:
ef:7c:bf:70:1b:7e:68:82:bc:c5:17:5d:0e:20:a1:
24:aa:83:5d:78:8a:4e:eb:86:6a:b0:10:23:d5:ef:
c0:8e:c0:95:80:f7:1c:36:a9:99:d7:7f:bd:6e:0c:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E8:31:1F:E7:94:AE:39:68:B9:CA:79:26:AD:DD:96:29:76:02:64
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4egxH-eUrjloucp5Jq3dlil2AmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.208.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9f:15:fc:c4:4f:a9:63:83:7b:12:93:6e:4a:a5:48:67:28:
b2:29:2d:8d:83:0b:e5:3b:f7:ed:cc:a4:80:e5:18:b3:0c:98:
aa:ce:9a:26:99:ab:e8:71:23:56:4a:a0:a8:bd:2d:75:aa:e3:
79:cd:a2:ad:1c:45:d9:85:40:54:3e:2b:a5:22:24:73:0b:18:
2b:40:e2:49:3b:38:34:c9:a2:57:a8:78:90:34:1d:d0:2b:e5:
5b:ac:48:29:95:42:e0:44:3f:d6:87:73:3b:10:cc:d8:7d:04:
9d:17:63:56:3d:73:08:a6:eb:8c:d6:64:39:41:13:95:fc:b0:
a4:82:00:a5:ee:bc:36:95:8c:ee:e6:dd:e5:86:50:f0:13:24:
e6:ed:9d:4c:27:e7:6c:7d:e3:1d:0f:a0:06:f2:5a:d1:05:e1:
90:8f:0d:05:2b:60:27:72:00:aa:91:54:b1:81:8b:9b:bd:e7:
b8:01:44:c4:41:55:0e:c3:8a:21:05:46:93:e6:17:60:f8:ab:
ec:42:57:9c:26:06:90:1f:47:f7:4c:b0:b5:e7:17:e8:5f:8a:
bb:88:2f:f0:a3:0a:da:fa:85:2c:c4:3f:b8:f3:1c:8a:f2:39:
7b:ae:38:24:26:a4:d2:29:09:5d:d6:0b:33:34:2d:f1:f9:0b:
4a:3d:75:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:18 2026 by rpki-client