Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AumTcDIxNeexWnJE8fDY20eUj9U.roa
File: AumTcDIxNeexWnJE8fDY20eUj9U.roa (raw, json)
Hash identifier: QNUMFF25RiHP/+//9q+kXE85WtJ658I+GcxE1g9Aqt0=
Subject key identifier: 02:E9:93:70:32:31:35:E7:B1:5A:72:44:F1:F0:D8:DB:47:94:8F:D5
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A00EB2BA1316D79F8E01A378FC4E2E1454
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AumTcDIxNeexWnJE8fDY20eUj9U.roa
Signing time: Mon 17 Aug 2026 07:49:49 +0000
ROA not before: Mon 17 Aug 2026 07:49:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 81.168.64.0/24 maxlen: 24
82.153.101.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:b2:ba:13:16:d7:9f:8e:01:a3:78:fc:4e:2e:14:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 17 07:49:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02e99370323135e7b15a7244f1f0d8db47948fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:df:d6:d3:c6:40:cf:60:0c:db:67:64:e0:8b:
6c:16:71:cd:06:27:c8:b1:41:22:56:12:5e:7a:d7:
3b:c1:62:9f:c5:dc:6c:c8:c4:ec:fb:70:07:1e:07:
44:3c:42:b8:5a:8b:e7:60:1c:a9:62:96:a8:ff:63:
b1:be:f4:dc:9b:77:e2:20:53:5f:d8:1b:0e:8b:47:
57:bc:a7:db:e1:56:10:f3:12:2e:29:c9:0f:3d:60:
71:f1:9e:47:dd:77:50:e0:d7:82:71:f6:dc:c0:7c:
66:d1:99:f5:31:0a:56:d9:1b:03:4d:8e:c2:96:38:
98:60:7d:56:1a:b4:75:d3:57:1f:98:19:18:78:5f:
88:c8:7b:09:f6:8d:d9:c8:c4:c8:f0:40:72:9e:1d:
35:21:02:46:18:1c:32:46:63:9c:0b:ff:24:6f:90:
8b:dc:43:3d:e1:03:5d:c8:15:de:7e:52:13:5d:1e:
84:b0:50:6e:fc:7b:16:62:91:b1:6e:15:5c:d8:56:
2a:38:00:74:c7:13:c0:55:43:4f:91:e2:4e:d8:64:
9c:82:ac:49:09:2e:21:a6:5e:51:40:9b:68:95:fa:
b5:6b:45:c0:ee:cc:60:e2:ca:13:8c:cd:9c:20:3b:
46:b6:56:b5:ad:ef:36:94:b4:a5:ec:58:eb:3c:94:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E9:93:70:32:31:35:E7:B1:5A:72:44:F1:F0:D8:DB:47:94:8F:D5
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AumTcDIxNeexWnJE8fDY20eUj9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.64.0/24
82.153.101.0/24
213.130.137.0/24
Signature Algorithm: sha256WithRSAEncryption
73:fb:6b:26:c2:77:ad:81:04:51:c5:a0:d6:5a:ea:5c:1b:b2:
6c:70:61:03:a9:04:30:a1:8b:a0:6d:75:09:ae:ef:1e:4e:b6:
b1:d3:9c:e6:ae:7c:17:97:6f:83:e3:a0:93:9d:fb:b5:25:f1:
b0:74:20:06:29:5a:f5:09:21:fd:56:43:7a:71:c6:d1:17:ec:
f0:cc:21:19:6d:06:78:bf:b5:87:19:54:64:fd:52:e7:cb:a5:
17:43:1e:a6:4b:a8:13:be:37:ff:c4:6b:0f:b6:cb:7a:e4:f5:
f6:dc:02:b7:c6:52:8c:3c:b0:45:28:fc:b0:94:5f:31:1d:9f:
dd:c2:10:f6:d8:34:46:6e:31:d8:aa:4c:79:48:52:b2:69:0f:
4a:50:7d:69:34:ce:94:43:46:6d:fa:19:5e:da:97:b6:e8:45:
c6:6d:34:03:66:ed:20:49:8f:40:80:65:9c:8c:bc:42:8c:6b:
e3:ac:43:e6:80:52:62:c6:3c:39:af:2c:d2:93:d9:41:bf:d9:
ca:73:3d:85:a9:94:22:9d:85:8e:3d:05:e9:79:82:92:e6:28:
2b:42:db:f7:6a:12:94:e7:54:ef:95:c7:0e:40:0b:45:10:a2:
5c:33:c6:43:ef:a7:1f:f2:04:91:d5:f9:17:ae:5e:64:1a:56:
b6:7a:06:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:01 2026 by rpki-client