Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y4dFWqL9zM6CWF5viK_yxgqZkCc.roa
File: Y4dFWqL9zM6CWF5viK_yxgqZkCc.roa (raw, json)
Hash identifier: 6dcyTBX0y0oUStNFbFtGDqmRMKdWN9ZcO0Or2GjgoeE=
Subject key identifier: 63:87:45:5A:A2:FD:CC:CE:82:58:5E:6F:88:AF:F2:C6:0A:99:90:27
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A03DCDC037A0097265C89BF0DE316AA0FA
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y4dFWqL9zM6CWF5viK_yxgqZkCc.roa
Signing time: Wed 26 Aug 2026 11:21:29 +0000
ROA not before: Wed 26 Aug 2026 11:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45102
IP address blocks: 81.168.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:cd:c0:37:a0:09:72:65:c8:9b:f0:de:31:6a:a0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 26 11:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6387455aa2fdccce82585e6f88aff2c60a999027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:d1:46:fd:b9:f9:87:f2:c5:0d:5f:6a:05:
39:6e:40:db:fb:dd:8d:5a:4f:d0:5b:f6:85:d8:b2:
a2:17:ff:e2:90:3b:91:3c:40:72:e9:98:2c:f8:f2:
0d:39:75:7a:e0:e5:4d:a3:8f:41:85:90:6a:2c:06:
7f:80:59:4d:11:b9:ee:9a:e1:34:43:53:b1:e4:fc:
d7:bf:88:dd:48:39:7e:ee:90:59:84:9b:b6:1b:16:
62:42:4e:9c:40:9a:dc:e4:5c:35:72:e7:09:f1:f4:
7b:e8:e3:ce:a6:66:be:4a:bd:2f:9e:0a:b3:b0:61:
0f:fe:6e:d7:89:cf:c6:0c:ec:b9:2a:bb:77:be:e1:
74:f6:05:ed:c4:92:76:ec:c8:1a:ab:f8:11:48:4a:
3f:b5:4b:9e:a2:47:e6:49:83:af:8d:ab:0c:1c:77:
7d:1b:9f:56:2c:b8:fd:29:63:b3:22:d6:56:9f:17:
e4:76:bd:02:de:80:1b:9e:bf:b6:08:26:aa:8f:85:
30:43:64:a6:89:07:be:ae:cf:10:f5:34:3e:43:85:
d9:96:de:a7:20:2f:e9:c0:44:6a:4a:09:6e:90:69:
35:a2:e2:01:f9:98:b2:95:5e:34:1a:d8:4c:c9:d4:
1f:fe:3e:a4:15:51:7f:0b:68:14:4b:3a:01:26:8d:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:45:5A:A2:FD:CC:CE:82:58:5E:6F:88:AF:F2:C6:0A:99:90:27
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y4dFWqL9zM6CWF5viK_yxgqZkCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.109.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d1:8e:00:ca:ef:39:0c:98:37:67:47:39:67:2e:14:50:f4:
4a:5f:62:c4:3b:d9:f6:46:d0:c7:4b:4f:21:fc:0a:26:d3:2f:
79:fe:e2:05:a0:e0:16:d5:0d:e2:e4:5f:c5:af:61:69:71:52:
20:9d:83:65:79:1e:a9:90:45:da:f6:55:31:a0:22:81:91:59:
79:d9:6c:0e:24:78:7a:b4:bf:c9:b8:cb:ad:02:84:a6:9b:0a:
34:c7:dc:ee:b8:6d:db:08:37:37:af:fb:cd:60:91:63:72:6d:
3f:ad:91:29:a7:6d:f1:69:95:97:ee:79:a2:14:53:b7:6a:57:
68:bf:08:53:17:87:2d:1f:39:ef:de:03:cc:59:ea:65:b4:74:
df:00:1f:98:a9:2a:da:40:2a:89:08:ba:23:74:f5:6d:57:49:
d0:68:51:80:42:2c:bd:3f:1c:2f:0c:85:dd:50:af:8a:8b:e2:
de:f0:b8:59:5c:17:6a:a7:d1:6e:44:d6:65:14:fd:62:ca:7b:
09:ce:cd:eb:ff:9a:ba:ef:13:7c:d8:f1:ff:3c:f1:3c:65:53:
8a:f2:2a:c2:f9:83:e8:2d:9f:65:1b:75:21:2a:71:92:e7:98:
92:10:b5:4c:e3:9f:ef:b9:1a:59:f4:77:44:43:08:bf:30:92:
2d:7a:eb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:29:53 2026 by rpki-client