Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E4FBZJ-vDpz_lqfCZKBtJp3WvEs.roa
File: E4FBZJ-vDpz_lqfCZKBtJp3WvEs.roa (raw, json)
Hash identifier: QsY/JUTQ3SCSilAypqxr+qLyWfPYf2edoWccv/yYf8I=
Subject key identifier: 13:81:41:64:9F:AF:0E:9C:FF:96:A7:C2:64:A0:6D:26:9D:D6:BC:4B
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F5A7EA0CE0316AD1F4E0DFDF3C7C9A36C
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E4FBZJ-vDpz_lqfCZKBtJp3WvEs.roa
Signing time: Mon 13 Jul 2026 08:01:15 +0000
ROA not before: Mon 13 Jul 2026 08:01:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135402
IP address blocks: 213.210.42.0/24 maxlen: 24
217.144.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:7e:a0:ce:03:16:ad:1f:4e:0d:fd:f3:c7:c9:a3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 13 08:01:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=138141649faf0e9cff96a7c264a06d269dd6bc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0c:1c:f7:66:dc:5e:24:91:88:4b:76:d1:5c:
cb:1f:60:00:bc:2c:70:d9:d6:b6:54:87:17:43:f6:
17:68:c5:26:36:35:36:2e:06:75:9d:cf:4f:0c:44:
3e:e7:c2:7e:76:01:9d:91:cf:7e:a7:f3:5a:ed:fd:
81:16:27:9f:ec:fa:f0:a4:83:16:1a:28:df:a5:11:
43:23:9e:52:61:f3:3e:77:62:57:bc:dd:bd:78:0c:
e1:71:e8:6a:c4:c5:86:5e:53:f1:33:42:ec:4d:76:
f2:8a:07:59:c1:f0:5e:f1:7a:9f:39:92:bc:1c:af:
d2:6b:06:ec:3c:ab:2a:20:c9:35:aa:5e:d2:db:f5:
dc:70:a2:fa:af:b5:8c:ce:3e:2b:04:67:32:00:20:
09:9f:78:b5:3b:c7:38:1e:81:03:b7:f5:49:f8:5c:
c4:6f:94:c6:a2:9d:b3:46:2e:e7:8d:5c:9e:ff:53:
5d:bb:f5:49:71:45:ef:17:e7:e8:50:99:44:0b:bb:
68:df:98:a2:ef:c8:56:be:53:c3:7c:c0:d8:c2:d2:
b2:8c:85:13:00:3c:9d:ac:77:45:c3:bb:ff:76:92:
bd:1c:af:1f:de:86:a9:8f:0c:1f:96:ac:c1:6b:29:
4f:11:0a:04:6a:f8:07:de:27:33:40:91:40:a6:c7:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:81:41:64:9F:AF:0E:9C:FF:96:A7:C2:64:A0:6D:26:9D:D6:BC:4B
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E4FBZJ-vDpz_lqfCZKBtJp3WvEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.42.0/24
217.144.147.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:cd:b8:d6:1e:b3:53:80:c9:bc:e8:76:ed:e3:92:85:85:bc:
a0:bf:ca:5e:11:47:ee:99:3e:29:96:76:1e:d4:a2:59:5e:49:
a0:89:2d:62:ba:24:85:a6:06:1c:35:d1:62:2e:2c:62:4e:cc:
57:56:c8:51:59:eb:99:b6:40:86:f8:76:46:94:45:d2:91:8a:
dd:00:fd:c0:12:40:28:78:0c:cf:fb:86:51:58:02:61:1d:5f:
68:62:ad:5d:49:d3:95:0c:8e:bc:7b:4d:03:2b:9b:75:78:b1:
39:ed:a1:f4:03:b8:31:53:7d:e3:d5:74:ce:71:2f:ff:94:da:
2d:dd:33:92:44:a1:55:2c:cf:2a:89:2d:66:49:71:af:b3:f0:
ec:c3:47:34:f4:d8:32:b6:f3:91:63:62:63:35:ce:bd:d3:40:
a3:44:87:93:91:6e:c7:41:d9:12:69:f1:2a:75:5d:f8:9a:a4:
d5:50:47:2c:bd:e5:c6:8f:11:1c:37:28:f0:95:ca:e8:b7:e0:
6e:c5:5f:b0:b3:a8:e9:1d:4c:6b:dc:e0:c6:e1:e6:43:3e:62:
a6:44:59:4e:d4:d0:42:47:93:07:86:d8:5d:e7:a2:50:79:d3:
70:59:20:28:b4:10:49:6d:30:b5:d3:a4:b2:0c:78:4b:63:4d:
0c:d6:fe:dd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9afqDOAxatH04N/fPHyaNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzEzMDgwMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzgxNDE2NDlmYWYwZTljZmY5NmE3YzI2NGEwNmQyNjlkZDZiYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgwc92bcXiSRiEt20VzLH2AAvCxw
2da2VIcXQ/YXaMUmNjU2LgZ1nc9PDEQ+58J+dgGdkc9+p/Na7f2BFief7PrwpIMW
GijfpRFDI55SYfM+d2JXvN29eAzhcehqxMWGXlPxM0LsTXbyigdZwfBe8XqfOZK8
HK/SawbsPKsqIMk1ql7S2/XccKL6r7WMzj4rBGcyACAJn3i1O8c4HoEDt/VJ+FzE
b5TGop2zRi7njVye/1Ndu/VJcUXvF+foUJlEC7to35ii78hWvlPDfMDYwtKyjIUT
ADydrHdFw7v/dpK9HK8f3oapjwwflqzBaylPEQoEavgH3iczQJFApsdxwwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBOBQWSfrw6c/5anwmSgbSad1rxLMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRTRGQlpKLXZEcHpfbHFmQ1pLQnRKcDNXdkVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1dIqAwQA
2ZCTMA0GCSqGSIb3DQEBCwUAA4IBAQBOzbjWHrNTgMm86Hbt45KFhbygv8peEUfu
mT4plnYe1KJZXkmgiS1iuiSFpgYcNdFiLixiTsxXVshRWeuZtkCG+HZGlEXSkYrd
AP3AEkAoeAzP+4ZRWAJhHV9oYq1dSdOVDI68e00DK5t1eLE57aH0A7gxU33j1XTO
cS//lNot3TOSRKFVLM8qiS1mSXGvs/Dsw0c09NgytvORY2JjNc6900CjRIeTkW7H
QdkSafEqdV34mqTVUEcsveXGjxEcNyjwlcrot+BuxV+ws6jpHUxr3ODG4eZDPmKm
RFlO1NBCR5MHhthd56JQedNwWSAotBBJbTC106SyDHhLY00M1v7d
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:33 2026 by rpki-client