Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OBVkUERn5ia_0auXSpC6ULlk_Nw.roa
File: OBVkUERn5ia_0auXSpC6ULlk_Nw.roa (raw, json)
Hash identifier: luqcakRi+E6iSWcf79AgGg5UEXlPWlp8wu5HzG80Si8=
Subject key identifier: 38:15:64:50:44:67:E6:26:BF:D1:AB:97:4A:90:BA:50:B9:64:FC:DC
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F3649B177F16D4B6188D3053B3B0FC02F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OBVkUERn5ia_0auXSpC6ULlk_Nw.roa
Signing time: Mon 06 Jul 2026 07:17:06 +0000
ROA not before: Mon 06 Jul 2026 07:17:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 109.176.21.0/24 maxlen: 24
109.176.206.0/24 maxlen: 24
213.218.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:49:b1:77:f1:6d:4b:61:88:d3:05:3b:3b:0f:c0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 6 07:17:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=381564504467e626bfd1ab974a90ba50b964fcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:d4:8b:97:52:2c:1b:43:5a:cc:3c:16:ff:
c4:64:ad:8d:3d:5d:31:49:13:3e:70:e2:28:d1:f1:
13:0e:e0:7c:b0:2e:e2:cd:b1:19:91:e6:76:19:16:
84:38:5c:77:46:66:99:f6:79:c1:a7:4b:69:bb:ea:
3b:de:d3:de:97:68:db:e7:57:90:c2:06:27:b7:eb:
96:a5:6f:08:35:0a:23:2b:f6:81:92:14:db:18:77:
f4:00:9d:9f:ee:92:a7:92:cb:d2:24:f9:a5:f7:36:
9c:db:3e:a8:62:5f:1e:cb:be:a5:f5:0e:d5:58:79:
49:6b:23:11:57:48:30:bf:0c:14:55:fb:a9:e7:94:
21:85:a3:40:72:7e:e2:59:21:d7:e7:9f:e9:20:9f:
85:96:5e:d8:94:68:eb:59:c9:6d:b1:40:5f:91:6d:
09:a2:fd:58:b5:ef:60:78:7f:64:76:e3:40:1b:32:
19:0c:02:bf:08:e2:4b:69:fe:71:2b:86:78:54:23:
dc:8b:b8:0f:d9:8f:d3:30:2e:00:20:78:43:96:a2:
29:5c:2f:66:06:e7:44:96:19:67:ee:de:12:42:13:
0d:70:a9:65:e3:95:ab:ed:bc:06:4e:68:1f:2c:bf:
96:74:8a:28:3d:e0:49:40:72:50:31:3d:da:a9:1e:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:15:64:50:44:67:E6:26:BF:D1:AB:97:4A:90:BA:50:B9:64:FC:DC
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OBVkUERn5ia_0auXSpC6ULlk_Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.21.0/24
109.176.206.0/24
213.218.243.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ac:5b:09:30:55:d4:88:b3:a7:4c:76:75:ef:9a:2c:31:15:
5b:0c:0f:89:ec:6a:e6:8a:f4:21:40:23:6c:5c:f5:9f:15:a4:
65:02:bf:ed:9e:93:d3:3c:ef:bd:72:71:f5:b9:a1:4a:42:b9:
3b:27:94:21:db:8b:a3:78:5e:e0:fc:fd:f2:e5:d7:7f:32:97:
7c:21:66:5f:15:84:fc:c0:aa:0e:fb:94:f6:02:32:8b:29:1f:
78:e0:6c:d5:03:16:2a:b2:4e:ad:17:c9:28:e6:80:ec:62:14:
f6:f2:5b:88:ee:c2:69:91:7d:f8:99:8d:05:44:21:2c:46:4b:
2a:77:60:f5:4d:bd:77:7c:dd:20:a5:f3:49:bc:87:99:d4:b0:
1c:e1:3b:48:2a:04:a8:57:3b:a0:40:98:ff:dc:8d:f0:fc:ea:
fe:fa:10:45:06:c4:f5:35:c3:00:62:e8:26:46:2d:0c:42:72:
ab:68:0f:5d:4d:49:e0:38:32:2d:34:89:db:00:30:0d:ad:62:
88:3a:7e:72:f1:81:a8:ca:0e:04:63:5a:8b:32:20:09:ab:a3:
d2:af:19:ed:d5:5c:a3:c0:d7:20:97:8c:76:27:bf:28:22:0e:
02:f6:a2:e4:65:07:bc:8c:aa:68:f9:cd:57:f8:a5:c8:3a:1c:
1a:2f:e6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:54 2026 by rpki-client