Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DBRXGkQNLMkJYvI8iBZ5p_Sf3-U.roa
File: DBRXGkQNLMkJYvI8iBZ5p_Sf3-U.roa (raw, json)
Hash identifier: sV1sN1WiBQnfjm/cr1wEazWTCHj+ApZ86Eh5H79zsCw=
Subject key identifier: 0C:14:57:1A:44:0D:2C:C9:09:62:F2:3C:88:16:79:A7:F4:9F:DF:E5
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC6EB494CEA1CFC6085F171930C548C11
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DBRXGkQNLMkJYvI8iBZ5p_Sf3-U.roa
Signing time: Mon 03 Aug 2026 09:18:56 +0000
ROA not before: Mon 03 Aug 2026 09:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150670
IP address blocks: 81.168.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:eb:49:4c:ea:1c:fc:60:85:f1:71:93:0c:54:8c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 09:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c14571a440d2cc90962f23c881679a7f49fdfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:b9:b8:10:16:3a:a8:a3:1c:5e:b4:40:ad:
d2:47:80:a6:7c:09:e1:03:7d:f4:63:8c:48:f3:74:
33:3d:0e:d1:a3:e1:92:37:d6:2d:73:d2:d2:8f:01:
70:1d:f6:f0:1d:19:e4:fb:b5:41:49:17:cf:34:d3:
03:97:f9:fd:70:b6:11:56:94:57:79:f1:c3:a0:f4:
47:7e:0c:20:f6:8c:2e:3a:85:1a:12:34:50:f0:e4:
7b:46:36:48:63:d9:72:df:bc:24:12:a8:4a:2e:56:
ce:0b:c6:6e:38:91:31:a7:6d:0e:47:0c:3e:81:ab:
c4:3e:3b:19:cb:3a:7f:2b:66:b4:75:e5:57:8f:b6:
fe:04:ee:eb:06:10:82:4e:5b:c4:15:56:6b:63:99:
31:ab:4d:26:44:6e:b7:5c:7d:c7:0b:bd:ec:21:5d:
57:d0:13:18:49:ca:e0:90:e1:5e:ac:0a:ae:1f:69:
95:41:8f:c0:30:15:fb:fb:68:fd:42:65:2c:c1:9e:
76:12:72:be:78:e5:ff:fa:aa:79:88:db:68:27:22:
af:20:8d:ba:7d:a6:fd:16:68:a6:84:34:e3:6b:24:
1b:4f:91:69:c1:ad:ac:7b:40:f0:a7:df:81:83:ef:
80:aa:62:26:19:cb:bd:62:69:8a:56:11:38:c6:8f:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:14:57:1A:44:0D:2C:C9:09:62:F2:3C:88:16:79:A7:F4:9F:DF:E5
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DBRXGkQNLMkJYvI8iBZ5p_Sf3-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.68.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b2:ac:2d:09:b0:8a:c3:7c:22:31:3c:76:5e:9e:28:53:a2:
a9:d7:55:49:59:42:93:ce:09:ec:da:ea:50:52:ae:7f:88:d2:
6a:f6:1d:bf:50:ce:52:1c:ba:36:4a:19:b4:22:58:75:bf:1f:
a0:8e:85:09:81:e8:f7:7e:d4:96:fe:02:0c:df:44:76:be:25:
02:43:84:e7:b5:a1:ff:24:1a:e2:04:2d:97:2d:e5:0b:55:05:
d8:f3:8d:b9:22:f4:42:d7:96:bd:81:de:65:46:f8:a1:ee:39:
b6:1d:c4:91:cc:18:0a:1a:c1:7c:93:17:be:3a:25:a7:f2:23:
29:62:f6:e3:0b:95:a8:c5:0e:94:5a:a8:61:3e:89:70:c2:9e:
c2:89:93:6e:d4:5e:9a:5b:80:88:9d:30:80:0e:12:e1:93:35:
8b:3a:05:6c:bb:3d:07:40:c6:0a:d0:03:c8:e7:75:45:38:a7:
ef:21:0b:99:46:49:6c:90:b8:4f:d9:75:06:61:83:57:28:5a:
4e:a8:77:80:ce:e6:61:cf:2d:58:98:57:6f:ab:c7:81:ff:f8:
76:bc:8d:c4:f9:ee:f7:bc:dc:1b:a6:a2:e6:b1:2e:88:ff:e4:
d0:f8:20:a5:2d:a7:c2:0f:3b:96:32:1b:db:31:88:04:2b:b0:
cf:dc:ee:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:26 2026 by rpki-client