Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8FCcWjbZl413zKBrqi_zcJ6HuCI.roa
File: 8FCcWjbZl413zKBrqi_zcJ6HuCI.roa (raw, json)
Hash identifier: A/4jHS9uxM14Ny6inyzeZqJBiTntTELYm0xJjyF7f2w=
Subject key identifier: F0:50:9C:5A:36:D9:97:8D:77:CC:A0:6B:AA:2F:F3:70:9E:87:B8:22
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A05BF45472F89C07E25CF9BEF0D03A8449
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8FCcWjbZl413zKBrqi_zcJ6HuCI.roa
Signing time: Tue 01 Sep 2026 07:52:14 +0000
ROA not before: Tue 01 Sep 2026 07:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 81.5.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:f4:54:72:f8:9c:07:e2:5c:f9:be:f0:d0:3a:84:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 1 07:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0509c5a36d9978d77cca06baa2ff3709e87b822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:23:d1:60:15:b0:5d:e9:56:5d:3e:fd:8c:
21:e0:7f:b2:55:7f:e3:46:75:e0:99:99:95:ee:d8:
9b:cb:13:b8:9e:61:e7:af:8b:32:30:4d:b8:92:64:
10:be:b2:a5:11:fa:a8:83:c3:a3:0c:dc:4f:f9:98:
6e:f1:9a:f8:dc:cb:e0:63:ba:a9:cd:b4:5b:2a:4f:
fd:d6:91:de:c0:25:ca:27:40:dc:d7:a5:99:cd:04:
f5:1d:64:35:4b:0a:fa:3b:ef:c1:83:7f:20:14:ea:
f2:b3:a3:d3:f5:4f:b4:ac:d8:8e:be:0e:59:17:51:
2c:ec:1b:9c:3e:fc:55:01:7b:0e:88:d6:51:3a:49:
be:24:7d:4e:8e:46:e8:4e:95:04:9d:0d:58:98:ff:
0e:b6:d6:89:1d:65:cc:d2:07:26:19:65:08:8b:e7:
ae:72:3f:de:e7:f2:ca:b1:68:84:ae:5a:6e:a6:ca:
8e:13:4d:8a:ad:af:26:6a:f0:15:1b:18:ab:be:cd:
d7:7e:89:b1:fb:c7:08:0e:9e:6e:7c:ae:ab:3c:cd:
08:27:b4:56:24:6c:1a:98:23:1c:4b:53:63:61:1a:
b1:55:0c:62:21:98:2f:bb:2f:2d:dc:4f:b7:29:31:
0f:87:87:3a:25:3e:8f:d4:4a:24:d1:07:a6:f6:09:
e2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:50:9C:5A:36:D9:97:8D:77:CC:A0:6B:AA:2F:F3:70:9E:87:B8:22
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8FCcWjbZl413zKBrqi_zcJ6HuCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
Signature Algorithm: sha256WithRSAEncryption
55:aa:42:6f:a5:67:e7:e5:4c:48:a3:bf:e7:38:6a:bf:ec:d9:
61:2a:d2:fd:bc:e0:d1:8c:d9:ad:8d:7f:b1:a3:3c:b0:c1:92:
7a:a9:b3:55:21:bc:f5:12:a4:b3:08:14:12:cd:c5:34:b5:e7:
e4:38:4f:ee:9b:2a:ef:da:c9:ae:b3:56:ba:00:44:59:07:2e:
11:6c:17:b6:84:c9:94:42:c7:5a:63:fd:57:cb:bb:50:a2:b4:
b9:45:51:17:c8:52:18:56:f8:9a:f8:00:27:23:2d:ee:ce:85:
ad:da:b7:3c:1e:e7:4a:f2:0f:18:f0:e3:08:df:8c:53:cb:4f:
03:02:64:20:f1:37:a2:4f:aa:76:9f:82:42:e0:9a:b4:11:88:
51:b2:96:89:9a:63:a6:b9:2b:d2:2a:8f:6b:29:4b:c9:d8:b1:
64:64:86:36:7f:92:4a:e4:90:df:4c:1a:88:b4:fb:b4:9e:de:
fb:e3:a7:34:be:d4:30:eb:b1:ad:e7:f6:ce:3b:74:be:96:da:
40:77:67:bb:14:1d:62:97:c4:f2:99:93:70:2b:43:15:ce:b5:
bd:75:cf:ed:d5:d6:4e:86:b2:2c:49:5f:f4:d3:72:2e:26:ff:
26:83:51:0c:80:b0:3e:3f:f9:9a:7c:9e:59:7e:ba:84:f9:2b:
8c:c5:f5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:22 2026 by rpki-client