Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ADH132BwgdrR_AFUCoXUQrTqzgM.roa
File: ADH132BwgdrR_AFUCoXUQrTqzgM.roa (raw, json)
Hash identifier: 14/E4AnX5b+6fIfwz+ItXPcb1GjkimFHwhjFHWwRr0Y=
Subject key identifier: 00:31:F5:DF:60:70:81:DA:D1:FC:01:54:0A:85:D4:42:B4:EA:CE:03
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368B4D3E7CD1CE317540FB4C14C1E4E
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ADH132BwgdrR_AFUCoXUQrTqzgM.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 81.168.20.0/24 maxlen: 24
81.168.120.0/24 maxlen: 24
82.152.3.0/24 maxlen: 24
82.152.233.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
109.176.200.0/24 maxlen: 24
213.130.155.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b4:d3:e7:cd:1c:e3:17:54:0f:b4:c1:4c:1e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0031f5df607081dad1fc01540a85d442b4eace03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:06:b6:71:28:25:fe:d4:99:1b:fe:21:cd:11:
51:76:b2:81:f6:8e:13:f7:ba:24:9b:0e:32:33:76:
7d:f8:d5:96:a1:1d:c3:9d:58:9b:e7:73:93:d2:83:
90:7b:79:b9:d7:67:02:89:21:c9:e6:a2:21:c7:73:
f2:c8:cd:4d:e4:cf:bb:fd:4f:70:1a:f3:37:f4:72:
5d:87:d8:75:0c:ca:98:47:ac:8a:9e:c8:7a:27:d3:
7e:75:13:fc:d4:cb:de:0f:07:2b:9d:34:33:2d:5b:
e5:64:17:fe:96:1c:12:54:ca:71:d4:4e:e1:bd:18:
d0:08:46:d8:f9:d6:6a:78:fa:f3:3e:c9:55:ab:2c:
b2:bd:9e:9c:30:8c:7a:e6:14:f4:16:4c:a4:6f:cc:
63:97:78:89:40:c8:ea:19:cc:47:67:35:cb:86:8f:
f5:1d:e5:f0:00:16:ef:94:6f:57:c2:80:b8:95:1b:
7e:f6:59:3e:9b:41:6b:3b:f3:db:42:b2:71:b2:fb:
02:63:c3:e3:95:8b:01:a5:9f:34:51:f5:2b:0f:e7:
99:2d:ed:93:d9:39:71:38:44:5a:39:fb:c5:5d:c5:
86:e2:46:07:bc:e6:fd:d8:d2:9f:2f:60:6d:78:6f:
b7:14:24:06:cf:5c:ad:b5:07:8f:28:5d:0c:8a:4a:
6c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:31:F5:DF:60:70:81:DA:D1:FC:01:54:0A:85:D4:42:B4:EA:CE:03
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ADH132BwgdrR_AFUCoXUQrTqzgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.20.0/24
81.168.120.0/24
82.152.3.0/24
82.152.233.0/24
82.153.72.0/24
109.176.200.0/24
213.130.155.0/24
213.218.213.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:bb:5c:2a:78:09:a5:7a:da:c1:d1:5f:9a:2b:46:e2:cf:e2:
27:a8:88:e2:87:f7:50:21:51:98:f7:a4:2a:d7:86:cb:f2:38:
30:22:a5:34:44:42:e2:71:fe:ff:aa:96:25:99:d8:5e:57:32:
48:09:fe:42:c7:eb:dc:d8:75:0a:e9:17:d0:6f:71:c1:bc:01:
ff:88:d9:a3:cb:d7:14:38:c7:cd:74:54:22:b4:7d:bd:0c:0f:
d6:b4:9f:2b:d7:8d:01:81:75:73:91:94:1a:f6:d2:62:29:ea:
41:f4:32:ab:04:29:c9:41:21:f7:f1:96:85:ac:10:bf:9b:c2:
f2:5f:e3:a5:1b:73:6d:f9:4e:5b:93:e4:3c:92:5b:c5:b1:7a:
b4:5c:16:ea:d7:f7:c5:d6:47:63:24:6e:4c:2b:2b:3b:82:6c:
0c:c7:15:cf:68:98:a6:df:51:ca:12:90:87:37:bd:85:1c:b3:
af:0b:fa:36:57:73:52:c2:c5:00:3d:dc:4f:4d:4d:9f:8b:43:
49:e5:fc:90:c5:bd:06:65:9c:70:06:0a:1a:87:31:52:58:9e:
24:16:55:9a:1d:d5:b2:bb:94:63:02:17:69:5e:6e:5e:72:da:
a9:e7:55:6b:62:73:28:a9:2a:59:d9:21:1e:cd:3c:6d:d2:bf:
c5:39:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:22:43 2026 by rpki-client