Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Gt4PKO9hpXtKDZNIwZCN1HX13uE.roa
File: Gt4PKO9hpXtKDZNIwZCN1HX13uE.roa (raw, json)
Hash identifier: CPS40M3/hIg3HSCvspwYDZatrz7oo5WwUvp4F6qEkVo=
Subject key identifier: 1A:DE:0F:28:EF:61:A5:7B:4A:0D:93:48:C1:90:8D:D4:75:F5:DE:E1
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FB75E9476E23477C757855B5AEB2E4925
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Gt4PKO9hpXtKDZNIwZCN1HX13uE.roa
Signing time: Fri 31 Jul 2026 08:50:56 +0000
ROA not before: Fri 31 Jul 2026 08:50:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215968
IP address blocks: 81.168.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:5e:94:76:e2:34:77:c7:57:85:5b:5a:eb:2e:49:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 31 08:50:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ade0f28ef61a57b4a0d9348c1908dd475f5dee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:66:4f:d0:f4:94:4d:c7:ab:80:69:d0:12:
b6:7d:b1:3a:e8:73:0d:41:56:47:a3:2e:4d:6e:a6:
80:72:01:24:3a:a9:a4:e5:a1:a0:af:c5:9a:ac:68:
d2:48:1c:5e:6e:90:ac:5d:65:08:8d:d8:52:33:b1:
e1:fc:cc:a3:2b:48:ad:33:1e:93:50:54:03:6a:0e:
59:3c:a3:57:7e:3c:c4:eb:d7:c8:1d:90:3b:95:83:
f2:ce:fb:26:d5:5b:2d:3d:10:14:90:7d:f3:03:55:
7f:c8:1f:ff:1f:6a:bb:d0:fa:9b:f9:9b:55:20:86:
e0:c3:03:ad:e4:f5:5c:f5:bf:dc:a4:00:5c:e4:1a:
6d:49:02:28:7c:33:f8:ea:dd:2a:78:44:0d:bd:61:
8d:a8:66:6f:bb:dc:3b:35:bb:20:ab:85:b8:31:f9:
9c:2d:75:08:45:e8:6b:1f:c6:fb:b5:f8:98:55:fd:
75:8d:9f:5f:44:c2:06:fe:13:8e:ce:d8:3d:77:64:
76:3f:1a:88:81:b1:3e:15:1c:f9:a2:a1:3e:fc:32:
c2:63:0a:cf:9b:cf:57:38:da:fb:9f:05:08:e8:58:
d7:b5:ce:c4:04:d1:03:24:23:8a:92:72:ef:b2:28:
83:8c:f9:f0:24:e2:56:af:73:84:8f:4d:8c:3a:3b:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DE:0F:28:EF:61:A5:7B:4A:0D:93:48:C1:90:8D:D4:75:F5:DE:E1
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Gt4PKO9hpXtKDZNIwZCN1HX13uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.100.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b6:7a:cd:37:1b:69:18:74:96:87:79:af:57:9f:6f:70:04:
65:09:58:93:46:82:2d:78:09:b1:2b:0b:c6:25:2f:fe:50:d9:
22:0e:bc:41:77:30:55:d3:e7:d2:f0:0d:69:57:3a:39:77:cc:
38:23:7c:14:d1:3f:e9:c0:e2:a9:91:35:f1:d4:a1:0e:71:2b:
d6:e7:6a:c2:18:9b:93:85:ae:a7:cb:01:bf:d0:ca:6c:99:5c:
7e:e5:17:c4:58:4a:08:f1:b5:9e:4b:36:df:87:e1:59:83:77:
d8:29:f3:69:9c:eb:88:aa:2d:fb:b3:a6:8c:d0:94:2c:c6:53:
23:8f:ae:c8:04:4d:f4:85:33:6b:40:15:27:c2:d1:b1:ec:25:
a6:b3:1e:36:8e:3e:ce:95:75:22:08:bd:6c:24:80:d2:2d:fc:
44:24:fa:0c:0a:ae:97:41:c5:46:8a:3d:ad:b9:a7:22:2d:44:
36:87:b4:4f:df:90:38:99:b4:54:72:31:8d:c2:ac:12:c8:74:
5f:ab:44:97:97:4b:f3:0c:6c:c6:5d:f3:03:48:de:f0:e5:8e:
77:74:a1:6a:34:3b:7d:15:4a:f7:d1:52:5d:34:0c:3f:0f:21:
ee:4e:16:31:c6:1d:cf:71:51:71:d5:19:ef:a0:4c:a7:38:df:
30:24:9e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:28 2026 by rpki-client