Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C2yPQX-ZRfIU5NRCwFwh_vXpkkM.roa
File: C2yPQX-ZRfIU5NRCwFwh_vXpkkM.roa (raw, json)
Hash identifier: 1t8LBjdPve+fr5FfMczaHaBSoJhgD1mzWq+/2ZwLSCs=
Subject key identifier: 0B:6C:8F:41:7F:99:45:F2:14:E4:D4:42:C0:5C:21:FE:F5:E9:92:43
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368E6ED249FB6286C62CEFDB5FD495F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C2yPQX-ZRfIU5NRCwFwh_vXpkkM.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206509
IP address blocks: 81.5.128.0/18 maxlen: 18
81.168.0.0/17 maxlen: 17
82.152.0.0/15 maxlen: 15
109.176.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e6:ed:24:9f:b6:28:6c:62:ce:fd:b5:fd:49:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b6c8f417f9945f214e4d442c05c21fef5e99243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:d0:80:e5:38:91:f7:58:82:6d:4a:b4:0f:
71:35:43:55:d2:81:44:8a:46:2c:28:5e:05:0a:f5:
a7:da:60:ae:5d:1f:7a:e7:bd:d4:bc:ad:12:b9:9d:
40:3e:d1:21:6f:ad:55:aa:4d:d6:11:c6:67:2e:51:
81:a9:07:f5:49:d7:98:fd:85:aa:87:5e:07:3e:dd:
86:5a:54:8d:40:89:b5:44:b4:2c:cc:f6:21:2f:42:
b2:f2:d5:c1:86:f9:bb:7e:25:1f:1f:39:1f:1e:7e:
b4:72:1d:f4:e5:07:54:b3:de:36:76:e5:92:f0:81:
4b:b0:a9:ae:c5:e9:e2:68:cd:b3:a0:8e:4b:48:0c:
22:9b:b9:8b:cf:77:29:9e:45:04:df:19:f5:ee:c1:
d2:d7:5d:a0:ff:c6:46:55:d0:8a:a8:c8:2e:26:67:
c0:63:d0:65:07:46:1d:4e:fc:5b:5e:04:4b:12:73:
19:eb:8b:d5:88:45:f0:fe:7f:18:07:a7:14:c5:ee:
c2:e9:71:6d:a5:82:44:ff:47:f7:12:6e:b7:14:92:
5e:83:e6:a6:ed:b3:e6:dd:18:a3:5d:ec:7b:53:af:
61:45:83:7c:d8:93:32:8c:2c:68:eb:42:6a:f5:c5:
9e:53:2d:0e:38:53:2a:e5:e1:3f:d2:e5:bf:57:4c:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6C:8F:41:7F:99:45:F2:14:E4:D4:42:C0:5C:21:FE:F5:E9:92:43
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C2yPQX-ZRfIU5NRCwFwh_vXpkkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
109.176.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:a6:14:73:4d:fb:5d:14:8c:13:78:7d:f2:ee:4a:9e:6a:31:
5c:82:cf:3b:0e:74:7e:86:95:72:e2:5f:d9:6c:8b:8b:17:7f:
11:3e:fc:04:12:fd:71:9d:64:94:03:96:cb:f8:f0:54:a8:fa:
61:0c:f3:63:c1:9f:a7:5d:e4:ed:e1:52:e1:ee:5f:57:b2:ae:
37:ef:36:aa:dd:a0:97:52:ac:a5:28:41:74:2d:ee:ad:e3:2a:
15:2b:0c:e2:c0:bb:13:98:d3:2e:5e:fb:cb:4f:e6:7d:ee:cc:
22:9d:a0:a5:ea:ca:d5:db:b7:eb:1e:10:cd:6f:c7:4e:12:d4:
00:62:4e:02:8a:a0:36:37:e0:f4:4a:d8:f8:2e:8b:fb:bb:b0:
8f:0a:c6:5d:18:82:2e:78:5c:86:f5:7a:61:af:82:de:ef:b4:
5b:ba:31:c2:76:15:78:42:c8:0b:e1:c2:bd:2f:ba:56:45:e8:
d2:65:c2:19:75:16:a1:e9:2c:da:ac:5a:7f:ac:a9:51:84:06:
3d:bd:5a:aa:76:dc:06:46:2f:d1:9b:8c:7b:d9:bc:2c:53:c8:
0e:31:81:52:df:54:51:77:87:b7:47:60:7b:f6:19:bc:f6:f5:
3b:71:ab:47:fa:2f:42:14:d4:42:65:fb:82:85:87:53:66:27:
e0:3c:e9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:28 2026 by rpki-client