Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/W8B-MMrM1oZsix-HNydXFHpqlIU.roa
File: W8B-MMrM1oZsix-HNydXFHpqlIU.roa (raw, json)
Hash identifier: Rd/WlV60egtKeh20jXZNz4/BDDfartqd5ZBseVLt1zQ=
Subject key identifier: 5B:C0:7E:30:CA:CC:D6:86:6C:8B:1F:87:37:27:57:14:7A:6A:94:85
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23690044EA987A0DB5BE1C76D786AAE4
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/W8B-MMrM1oZsix-HNydXFHpqlIU.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213515
IP address blocks: 213.210.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:00:44:ea:98:7a:0d:b5:be:1c:76:d7:86:aa:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bc07e30caccd6866c8b1f87372757147a6a9485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:56:32:be:36:68:5e:9a:e8:81:5a:6c:ca:
12:8f:06:0c:3a:b4:d1:a9:47:e8:3d:c4:c8:fb:8d:
b8:6d:65:23:db:7f:3e:db:85:00:e7:e8:3b:fa:e1:
4f:f4:36:f7:49:2b:2b:b5:37:f6:20:75:3b:a3:9e:
67:e6:31:8c:81:cb:53:87:ae:ad:c6:c3:96:85:89:
4c:51:77:31:8a:49:1d:f7:57:d5:96:59:42:5d:29:
33:86:d5:e7:81:cc:26:0f:8f:67:b1:06:28:2f:19:
04:7d:ef:9f:ce:dc:79:a3:6d:a7:96:c6:9c:1b:4b:
a3:60:8a:eb:e3:8f:d5:96:be:ec:82:e6:93:4e:fc:
00:46:5e:c4:2d:91:be:55:ab:e1:22:3d:09:57:4a:
e8:62:75:28:e4:d1:24:4d:0b:2a:23:fe:a7:6d:9e:
88:6e:c7:25:86:e9:28:67:44:1b:08:a1:eb:00:d1:
41:6d:17:c4:72:97:1f:1e:73:41:9e:3c:cb:52:93:
d7:0c:9b:ea:2f:77:5c:39:7a:c2:0a:59:6d:c5:11:
a3:d6:b5:49:7b:dd:6e:c5:6b:cf:14:e2:8b:49:34:
e3:2a:f0:0e:89:58:1a:9e:e5:54:fa:9e:ef:61:46:
39:32:2d:4e:66:48:e6:c3:5d:2e:f3:00:d2:82:e5:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C0:7E:30:CA:CC:D6:86:6C:8B:1F:87:37:27:57:14:7A:6A:94:85
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/W8B-MMrM1oZsix-HNydXFHpqlIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.34.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:18:86:e6:86:e0:bf:b6:01:1b:29:7c:fd:6b:80:c2:64:65:
c4:d8:b8:c4:e1:7c:10:37:e0:58:73:41:89:b8:19:f8:74:f9:
0f:51:4c:54:0d:1f:80:8d:1b:9a:7a:af:f2:9c:b9:f3:cf:11:
18:61:ea:9b:b2:d3:6c:0c:2b:e0:00:41:1e:b7:17:3f:de:8e:
5b:11:00:2e:b6:51:f3:64:15:93:0b:66:c1:c8:2c:01:cd:3e:
10:16:ed:2f:ff:98:04:3b:95:79:ea:ac:b2:dc:0a:7f:6f:eb:
00:4f:e0:9b:04:7c:41:77:dc:2e:5a:c2:a1:4a:9d:7b:8f:39:
6e:98:48:eb:29:f3:21:c9:ea:cb:6e:58:81:44:33:e0:f2:30:
b0:e0:99:1c:08:37:f5:14:f3:e3:49:b5:7b:98:65:e7:f7:b2:
fc:f2:14:47:f7:3f:26:14:97:c2:dc:b5:6c:b1:54:68:3b:d2:
94:db:70:c4:79:ce:53:e0:50:5f:99:ce:6a:1b:64:a3:3c:9b:
a3:ff:09:88:89:19:c2:5d:49:ca:74:4b:88:ca:e2:05:10:40:
ee:fc:fe:6f:7b:1f:26:6e:dd:03:59:b6:e6:d6:15:53:19:49:
fe:b7:5f:76:2a:1c:b2:2e:a3:6b:22:b8:0f:e8:eb:7f:e5:82:
a2:09:42:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:19 2026 by rpki-client