Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5I6Wjcc_c8iy_t0qPEa6lF1yFn0.roa
File: 5I6Wjcc_c8iy_t0qPEa6lF1yFn0.roa (raw, json)
Hash identifier: CD3Q7/hvxRqWO0W9eGBcZtvIUDjbhIsm9xSFGL+wABw=
Subject key identifier: E4:8E:96:8D:C7:3F:73:C8:B2:FE:DD:2A:3C:46:BA:94:5D:72:16:7D
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368F489C502A272975A8E83E73EA991
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5I6Wjcc_c8iy_t0qPEa6lF1yFn0.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211826
IP address blocks: 81.168.67.0/24 maxlen: 24
217.145.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f4:89:c5:02:a2:72:97:5a:8e:83:e7:3e:a9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e48e968dc73f73c8b2fedd2a3c46ba945d72167d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:0a:0b:71:9c:bb:37:90:c6:98:30:46:0b:
29:6d:f0:ec:27:82:f5:8b:45:eb:ca:47:db:86:f7:
b1:66:e6:f8:5f:1e:06:f3:f0:24:ef:96:d7:15:97:
30:27:85:83:bc:7b:d6:5e:be:98:c4:2c:0d:51:1e:
cd:98:a0:dc:5f:8d:c2:65:86:47:26:36:f1:c3:34:
63:f5:8f:7b:8e:5c:cf:30:41:f9:aa:70:de:df:d2:
41:0f:d5:ac:53:9e:56:87:ec:37:96:2e:b7:20:99:
9d:a9:3b:c5:be:8c:a6:f9:76:21:f6:e5:75:de:3c:
59:93:83:1f:35:89:11:9a:40:16:00:68:5d:2f:e6:
38:80:1d:98:ec:4f:8b:4f:b1:54:13:c3:30:83:c4:
77:72:a7:3b:f1:52:1f:43:65:3a:5a:e2:fc:09:9d:
66:57:3f:7a:da:ad:cf:d5:51:d7:67:ae:62:dc:91:
be:cc:fe:fb:da:d9:1e:af:b4:52:2e:35:6b:57:a3:
41:8f:04:5c:af:a9:a0:67:99:5a:e6:9f:7b:b9:1e:
f5:06:22:af:be:ef:c0:86:53:60:f4:80:e5:78:de:
c2:28:ae:a5:5b:62:1d:2b:6c:f8:02:6e:c2:a7:39:
85:30:4e:f5:5f:1d:95:cf:5d:49:8d:9b:f3:22:a1:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8E:96:8D:C7:3F:73:C8:B2:FE:DD:2A:3C:46:BA:94:5D:72:16:7D
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5I6Wjcc_c8iy_t0qPEa6lF1yFn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.67.0/24
217.145.77.0/24
Signature Algorithm: sha256WithRSAEncryption
01:39:ff:2e:6c:a0:c3:5b:13:26:c5:9d:eb:e7:7c:5f:a7:63:
6c:70:ba:3e:db:b8:b0:57:cf:81:52:d5:63:c2:ef:bc:91:2f:
fb:31:2e:03:7f:10:8e:08:fa:44:73:32:ea:42:b6:9a:42:30:
de:69:f4:78:a4:19:4f:46:27:91:1c:17:c5:e3:fe:b0:80:56:
a7:1c:56:72:a4:2b:86:44:bf:a7:13:55:63:ac:6a:90:b6:0f:
f6:c2:d7:0f:1a:71:1a:a9:1a:f5:21:89:0b:84:db:de:9f:63:
65:b8:89:ca:a8:65:08:dc:9a:f9:a4:b0:9f:67:e1:ee:13:04:
37:c4:3f:ca:fe:2a:9e:db:8a:ba:f6:1c:69:21:9b:55:28:d3:
a4:c8:91:92:ed:a9:48:23:42:ae:da:a3:b2:ac:7c:cb:22:a6:
a4:ff:29:9d:6b:56:92:8e:70:63:9d:ba:81:79:bb:e5:20:be:
10:5d:00:c1:4f:06:5f:63:00:ea:ab:b8:25:3b:af:a2:df:93:
0e:8d:7d:70:d6:15:97:94:71:c1:51:35:2e:66:67:d0:70:af:
08:5e:6e:ec:c8:cf:de:80:b8:bc:1e:28:0d:07:ed:c1:b4:cd:
67:6c:be:8b:21:a5:6a:a0:e8:65:2c:e3:b9:62:e6:50:b9:0c:
c8:47:7f:e1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaPSJxQKicpdajoPnPqmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDhlOTY4ZGM3M2Y3M2M4YjJmZWRkMmEzYzQ2YmE5NDVkNzIxNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13UKC3GcuzeQxpgwRgspbfDsJ4L1
i0XrykfbhvexZub4Xx4G8/Ak75bXFZcwJ4WDvHvWXr6YxCwNUR7NmKDcX43CZYZH
JjbxwzRj9Y97jlzPMEH5qnDe39JBD9WsU55Wh+w3li63IJmdqTvFvoym+XYh9uV1
3jxZk4MfNYkRmkAWAGhdL+Y4gB2Y7E+LT7FUE8Mwg8R3cqc78VIfQ2U6WuL8CZ1m
Vz962q3P1VHXZ65i3JG+zP772tker7RSLjVrV6NBjwRcr6mgZ5la5p97uR71BiKv
vu/AhlNg9IDleN7CKK6lW2IdK2z4Am7CpzmFME71Xx2Vz11JjZvzIqE0ewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOSOlo3HP3PIsv7dKjxGupRdchZ9MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvNUk2V2pjY19jOGl5X3QwcVBFYTZsRjF5Rm4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUahDAwQA
2ZFNMA0GCSqGSIb3DQEBCwUAA4IBAQABOf8ubKDDWxMmxZ3r53xfp2NscLo+27iw
V8+BUtVjwu+8kS/7MS4DfxCOCPpEczLqQraaQjDeafR4pBlPRieRHBfF4/6wgFan
HFZypCuGRL+nE1VjrGqQtg/2wtcPGnEaqRr1IYkLhNven2NluInKqGUI3Jr5pLCf
Z+HuEwQ3xD/K/iqe24q69hxpIZtVKNOkyJGS7alII0Ku2qOyrHzLIqak/ymda1aS
jnBjnbqBebvlIL4QXQDBTwZfYwDqq7glO6+i35MOjX1w1hWXlHHBUTUuZmfQcK8I
Xm7syM/egLi8HigNB+3BtM1nbL6LIaVqoOhlLOO5YuZQuQzIR3/h
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:02 2026 by rpki-client