Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6WR5sOEFm7fsSMmX2b7b06yrh3I.roa
File: 6WR5sOEFm7fsSMmX2b7b06yrh3I.roa (raw, json)
Hash identifier: dRxU9vageZ/1SmYv2Pohobak+Fsun0PmOS3Z2qr7XQc=
Subject key identifier: E9:64:79:B0:E1:05:9B:B7:EC:48:C9:97:D9:BE:DB:D3:AC:AB:87:72
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A03DCDBFBFD9CE4947ABA8A1487234A0FC
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6WR5sOEFm7fsSMmX2b7b06yrh3I.roa
Signing time: Wed 26 Aug 2026 11:21:29 +0000
ROA not before: Wed 26 Aug 2026 11:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45090
IP address blocks: 81.168.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:cd:bf:bf:d9:ce:49:47:ab:a8:a1:48:72:34:a0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 26 11:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e96479b0e1059bb7ec48c997d9bedbd3acab8772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:ab:e3:b1:11:76:6a:4d:92:2b:82:0f:02:
54:9a:f3:72:73:74:e0:40:53:ca:63:99:84:73:c7:
c5:b4:fd:02:2c:97:e4:de:45:53:c0:07:58:54:1e:
9e:f1:39:c8:3d:c2:7f:d6:b7:d6:8a:4f:c8:df:98:
c7:a2:69:95:36:17:66:98:2b:e4:27:80:04:7c:ed:
0d:a3:f1:9f:65:f2:50:ae:9d:00:36:8f:18:60:c0:
4f:33:1a:0b:f3:ba:66:22:a5:88:c0:8d:cb:c8:1a:
8f:a4:4a:a4:e6:79:ee:fc:41:ab:26:00:3c:95:d1:
ef:88:00:89:e0:83:48:e1:ab:77:3b:cb:d7:1e:b4:
70:9b:02:fd:0d:59:f7:33:dd:90:29:1c:07:e1:e5:
70:47:3e:e9:44:5f:29:1c:a6:b2:49:48:38:45:64:
de:12:20:42:f8:1a:60:66:c0:49:11:45:31:15:f4:
06:ec:9a:a1:1e:bd:e4:25:03:6c:d6:03:4e:6a:b6:
f6:25:21:ad:78:9a:99:04:5b:ba:e1:88:1b:83:28:
64:c6:d2:7c:64:02:67:89:ca:d4:9c:03:ad:d0:03:
1d:49:cc:3f:32:5a:46:76:3d:dc:0a:5e:ef:61:45:
be:83:d1:b9:90:72:09:5a:5f:9f:c2:fc:93:05:be:
95:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:79:B0:E1:05:9B:B7:EC:48:C9:97:D9:BE:DB:D3:AC:AB:87:72
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6WR5sOEFm7fsSMmX2b7b06yrh3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.109.0/24
Signature Algorithm: sha256WithRSAEncryption
75:92:21:16:f1:ec:10:07:5c:8e:a1:0b:07:b6:09:d0:5d:cc:
02:d0:38:c5:5e:77:db:08:5c:68:34:cf:da:e0:9d:0c:27:cc:
7d:85:f2:04:8e:f1:86:61:e2:c1:cf:87:f4:52:5d:48:4c:09:
11:ff:41:a7:77:5b:7e:c1:44:a3:cc:c8:61:a5:67:5e:ad:94:
38:d2:b4:6e:8d:33:22:b4:ec:dd:43:6e:bf:82:e2:09:b6:c2:
af:52:08:b7:41:b8:55:90:34:29:e4:5a:8a:56:20:2a:82:a6:
38:ce:dc:e3:2c:2f:e9:e5:8a:20:26:6b:12:cf:fe:e9:f8:84:
18:31:a9:46:c5:82:44:eb:2f:15:d4:dc:91:55:76:8b:df:c7:
c5:f0:66:e6:30:54:67:57:ac:60:7b:a6:82:dc:0e:06:5e:b1:
90:04:74:b6:23:60:74:43:d3:37:55:9a:a8:42:38:45:2f:51:
5c:83:1d:51:fd:b9:53:83:97:e6:38:f6:8f:db:9d:d0:6a:ca:
b2:12:f0:f6:3c:b0:26:73:3b:50:af:28:ef:a1:14:9c:d5:90:
b1:0f:d2:3a:2e:57:53:aa:5b:27:4e:cb:37:f0:d5:ac:97:d1:
ef:39:ef:0b:d3:c0:06:10:8c:ab:17:52:94:e3:c6:57:b2:54:
d2:d4:f1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:06 2026 by rpki-client