Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C6qpvOaE7S7qmfDJ2_T8-dMoh-A.roa
File: C6qpvOaE7S7qmfDJ2_T8-dMoh-A.roa (raw, json)
Hash identifier: jWN+1Gl6k+uyyjEFlwqZQWll6MQsmf1kvcD/PK3XWyg=
Subject key identifier: 0B:AA:A9:BC:E6:84:ED:2E:EA:99:F0:C9:DB:F4:FC:F9:D3:28:87:E0
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FD0CA26C63860ED47A82466BD5DAC26F5
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C6qpvOaE7S7qmfDJ2_T8-dMoh-A.roa
Signing time: Wed 05 Aug 2026 07:18:56 +0000
ROA not before: Wed 05 Aug 2026 07:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8796
IP address blocks: 81.168.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:ca:26:c6:38:60:ed:47:a8:24:66:bd:5d:ac:26:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 5 07:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0baaa9bce684ed2eea99f0c9dbf4fcf9d32887e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:cd:3d:2c:78:f5:9e:eb:19:b2:df:ca:2f:
ff:8e:6d:37:67:38:84:07:46:f1:d8:b9:2f:7d:b8:
f1:fc:f8:38:97:50:0c:62:55:7c:47:d6:0e:51:2d:
91:c0:e9:21:25:22:af:1a:c8:02:e5:11:57:98:2b:
1f:dc:a3:34:48:82:86:e3:cf:0b:bb:a8:b5:3a:1c:
1b:41:a3:0a:98:a6:44:c7:c1:b6:c9:5c:a7:16:7f:
49:ac:ac:5d:0e:07:80:fe:2c:20:31:ee:80:02:98:
0e:2e:d2:91:95:b3:96:d3:f4:af:bf:c2:72:10:df:
4b:09:56:de:c6:4d:11:2e:15:a3:c6:92:39:cc:53:
5e:71:4a:4c:cc:10:6a:d9:2c:86:3e:1e:ee:7a:27:
65:a7:5b:cd:32:44:c7:9b:d1:b4:6f:bb:ad:8a:dd:
9d:8b:eb:9d:f1:10:26:3b:47:5f:d1:36:48:42:ed:
e5:31:3d:6b:b7:a2:94:fc:84:3b:5e:6f:93:50:07:
48:a6:9e:b7:08:4d:30:f4:b2:52:c7:b9:6b:20:36:
a3:9d:82:73:1b:3a:2f:b1:20:e8:6f:89:02:1e:d8:
c0:2d:fb:b2:ab:d6:95:45:fa:1f:94:ba:0b:68:90:
02:cc:c6:b8:76:40:b4:61:ff:ae:d7:d5:15:5c:4c:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AA:A9:BC:E6:84:ED:2E:EA:99:F0:C9:DB:F4:FC:F9:D3:28:87:E0
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C6qpvOaE7S7qmfDJ2_T8-dMoh-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.122.0/24
Signature Algorithm: sha256WithRSAEncryption
12:4b:67:7f:1b:69:0c:93:bb:b8:c6:87:4d:b2:55:46:29:c8:
cb:3e:da:14:d8:7d:99:d7:57:f8:f9:c8:18:a7:44:a5:10:dd:
66:77:48:c0:95:5c:14:db:4b:3b:d0:44:6e:9a:05:3b:fd:64:
b1:d5:18:f7:30:78:c8:bd:af:e4:c8:8e:d4:80:8c:fc:dc:28:
32:9e:38:98:45:4f:d4:f9:45:40:9b:2e:4f:5a:16:65:b9:97:
59:09:bd:40:9a:3b:73:d4:11:b8:2c:7c:ce:68:c6:f8:3b:92:
4b:6e:13:ad:c5:6c:fe:48:ef:2b:e5:dd:20:2a:59:d7:73:5f:
7a:41:e6:c6:9c:e7:2b:ac:8b:98:5c:74:a6:43:75:b7:4a:82:
db:5e:64:2c:da:33:bc:8c:19:c2:67:ed:b3:29:f3:04:77:f0:
43:e6:53:26:41:34:4f:13:24:c7:6e:f0:9b:f3:65:f0:83:78:
a1:d2:bf:09:bc:28:92:08:89:23:91:90:86:0d:13:bd:35:13:
e3:27:f3:a9:d0:6c:c2:ae:04:34:4f:a3:06:36:45:3f:ee:84:
04:46:8e:6f:91:13:ea:25:ad:a1:84:01:ef:b1:9b:71:ef:95:
e8:a1:70:9b:99:d7:3f:be:95:a2:cf:16:e1:b8:a5:46:61:5c:
f0:80:24:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:01 2026 by rpki-client