Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R8I3BN8aJQUWwXevdwGBQh7MEXE.roa
File: R8I3BN8aJQUWwXevdwGBQh7MEXE.roa (raw, json)
Hash identifier: sfpNSfU8Yls82S8xgfyxXOeKMoZrCq8OkwrlQvqiZSI=
Subject key identifier: 47:C2:37:04:DF:1A:25:05:16:C1:77:AF:77:01:81:42:1E:CC:11:71
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FEAB182B47AF772C63A586CBFD1896AC4
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R8I3BN8aJQUWwXevdwGBQh7MEXE.roa
Signing time: Mon 10 Aug 2026 08:02:09 +0000
ROA not before: Mon 10 Aug 2026 08:02:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200074
IP address blocks: 81.168.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:b1:82:b4:7a:f7:72:c6:3a:58:6c:bf:d1:89:6a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 10 08:02:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47c23704df1a250516c177af770181421ecc1171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:1e:a4:50:8d:0c:b8:82:8f:b6:1f:cc:65:
26:43:03:1c:49:ba:64:9e:32:63:c6:23:9d:d8:02:
c5:fe:c7:44:31:0c:1c:c9:46:68:c2:c7:a5:af:7e:
d4:87:ac:fe:db:f4:55:2f:b9:bf:54:a1:17:ed:33:
e7:76:db:59:30:32:89:d4:de:81:7c:1f:5b:b9:9d:
dd:ca:74:28:cb:9c:3f:fc:7d:f1:b5:4f:5b:8c:d1:
82:6e:ae:f9:ff:b7:72:94:8a:32:c7:a9:85:68:d1:
e3:ab:33:30:95:29:c6:80:55:0b:f3:11:61:72:9e:
2d:6a:6d:30:7c:41:75:ba:72:7e:a7:91:19:b5:9d:
98:1a:84:1c:b6:91:51:54:36:0a:10:03:6a:43:5e:
42:29:18:8d:b4:80:05:2f:f2:b2:28:43:0a:16:5f:
31:12:56:db:dd:eb:44:db:43:04:71:35:bd:a3:4c:
cd:07:d3:0e:d8:42:ec:c1:c4:bc:4e:92:95:d9:37:
f0:6a:a6:a4:38:f6:e4:61:2a:4c:a5:1f:dd:d8:5f:
60:3b:10:b6:eb:ff:cb:1a:85:ce:ca:1c:10:ae:26:
5b:f8:b4:47:85:1b:4b:e8:2f:e3:c2:2e:60:3a:a4:
93:45:c4:c5:00:5e:0e:21:8a:61:b0:ff:2a:c0:de:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C2:37:04:DF:1A:25:05:16:C1:77:AF:77:01:81:42:1E:CC:11:71
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R8I3BN8aJQUWwXevdwGBQh7MEXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.105.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b6:70:8b:d2:bf:0e:95:68:46:82:a3:61:bd:f9:0c:43:ce:
c1:a1:c3:d3:0e:1e:55:e3:be:95:c3:d2:1a:44:c7:86:d3:5e:
c5:1a:5d:4c:ab:b4:57:0c:e8:3e:1b:be:01:74:39:c7:28:d6:
1a:a3:8a:59:c6:a7:31:50:11:b5:e0:eb:95:b1:bb:a2:ea:99:
51:f1:1e:54:77:1c:09:e2:9c:51:84:d9:7b:c5:72:f1:dd:ca:
ee:90:5c:1b:c3:47:e5:ac:73:b3:4f:9b:43:ba:51:43:26:55:
97:6c:cd:fd:fa:87:94:e6:bb:de:c6:04:2b:4e:1a:7c:92:d2:
43:a4:5c:ce:3b:bd:ca:8c:36:52:92:d1:e6:d4:2f:b7:0e:50:
92:5d:e4:4f:53:2a:bd:3f:a1:da:22:2b:8e:c3:b1:d0:fd:7f:
00:4a:e6:6f:dc:f5:e4:5b:4c:08:a4:f1:06:c0:4a:2f:bd:0c:
2e:90:93:57:d4:3d:45:a6:5b:7a:2b:f2:9e:80:0e:ac:06:f0:
90:0b:43:72:16:22:cf:6a:03:eb:f1:c6:d6:3c:dc:61:8e:7a:
90:9f:ae:44:de:d0:bf:29:29:4f:55:01:c0:fd:76:4a:83:78:
e4:93:49:83:3c:4b:56:54:9e:00:bd:54:13:ab:d8:34:59:ee:
57:aa:1e:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/qsYK0evdyxjpYbL/RiWrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODEwMDgwMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2MyMzcwNGRmMWEyNTA1MTZjMTc3YWY3NzAxODE0MjFlY2MxMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/cepFCNDLiCj7YfzGUmQwMcSbpk
njJjxiOd2ALF/sdEMQwcyUZowselr37Uh6z+2/RVL7m/VKEX7TPndttZMDKJ1N6B
fB9buZ3dynQoy5w//H3xtU9bjNGCbq75/7dylIoyx6mFaNHjqzMwlSnGgFUL8xFh
cp4tam0wfEF1unJ+p5EZtZ2YGoQctpFRVDYKEANqQ15CKRiNtIAFL/KyKEMKFl8x
Elbb3etE20MEcTW9o0zNB9MO2ELswcS8TpKV2TfwaqakOPbkYSpMpR/d2F9gOxC2
6//LGoXOyhwQriZb+LRHhRtL6C/jwi5gOqSTRcTFAF4OIYphsP8qwN57kwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEfCNwTfGiUFFsF3r3cBgUIezBFxMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUjhJM0JOOGFKUVVXd1hldmR3R0JRaDdNRVhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUahpMA0G
CSqGSIb3DQEBCwUAA4IBAQBctnCL0r8OlWhGgqNhvfkMQ87BocPTDh5V476Vw9Ia
RMeG017FGl1Mq7RXDOg+G74BdDnHKNYao4pZxqcxUBG14OuVsbui6plR8R5UdxwJ
4pxRhNl7xXLx3crukFwbw0flrHOzT5tDulFDJlWXbM39+oeU5rvexgQrThp8ktJD
pFzOO73KjDZSktHm1C+3DlCSXeRPUyq9P6HaIiuOw7HQ/X8ASuZv3PXkW0wIpPEG
wEovvQwukJNX1D1Fplt6K/KegA6sBvCQC0NyFiLPagPr8cbWPNxhjnqQn65E3tC/
KSlPVQHA/XZKg3jkk0mDPEtWVJ4AvVQTq9g0We5Xqh4D
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:13 2026 by rpki-client