Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/a9Pahdqzo0R3Vz7qGIuyJBmIKv4.roa
File: a9Pahdqzo0R3Vz7qGIuyJBmIKv4.roa (raw, json)
Hash identifier: LEveH9sR5y/zqYHl7x8VvJtasMiSrY1kWWeOxrRXy2M=
Subject key identifier: 6B:D3:DA:85:DA:B3:A3:44:77:57:3E:EA:18:8B:B2:24:19:88:2A:FE
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC6869CAC14922AFBC4FDEE3F0F855E1B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/a9Pahdqzo0R3Vz7qGIuyJBmIKv4.roa
Signing time: Mon 03 Aug 2026 07:28:58 +0000
ROA not before: Mon 03 Aug 2026 07:28:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 81.5.161.0/24 maxlen: 24
81.5.177.0/24 maxlen: 24
81.5.186.0/24 maxlen: 24
81.168.107.0/24 maxlen: 24
82.152.60.0/24 maxlen: 24
82.152.63.0/24 maxlen: 24
82.152.69.0/24 maxlen: 24
82.153.141.0/24 maxlen: 24
82.153.183.0/24 maxlen: 24
82.153.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:86:9c:ac:14:92:2a:fb:c4:fd:ee:3f:0f:85:5e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 07:28:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bd3da85dab3a34477573eea188bb22419882afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:d6:cf:01:1d:f5:ca:b3:8a:51:c2:80:5a:
41:f4:5f:68:32:f7:42:81:85:41:c0:71:6e:6a:13:
0f:ec:03:3f:7e:2b:d1:93:22:99:57:a5:b9:40:23:
41:6f:3d:5c:6e:a2:b9:a9:4a:95:32:24:d7:5a:ba:
f9:06:4a:39:e2:b9:c2:6e:56:33:09:21:9e:98:cf:
13:02:bc:52:52:6f:11:ef:89:69:c5:85:7c:cf:35:
15:05:25:fe:02:1b:1a:6d:d0:76:0c:ab:c4:34:da:
a3:2a:56:2b:ee:98:8b:61:fb:c6:49:b8:fa:1a:3a:
d6:58:f7:72:81:a2:eb:3a:b3:40:46:4c:3d:db:b9:
41:0b:e1:ba:a8:60:61:cd:1f:0e:b0:0a:04:c7:b2:
00:94:5b:eb:58:d5:f3:af:db:8a:c3:95:c7:a7:33:
e4:04:4b:fe:94:17:4f:a6:ce:13:25:13:be:c1:75:
fd:90:b5:25:86:33:51:00:99:c8:c1:9b:32:4a:4a:
3d:79:e9:ef:de:9d:1e:05:28:dc:ed:e6:ef:79:c2:
d4:93:bf:8a:c1:07:96:c0:83:70:d6:4a:6f:1e:0d:
01:e2:b0:ec:24:68:bf:cc:2c:5b:eb:12:50:05:c4:
0f:fb:ac:6c:48:90:5a:89:7f:e2:52:b7:4a:50:3e:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D3:DA:85:DA:B3:A3:44:77:57:3E:EA:18:8B:B2:24:19:88:2A:FE
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/a9Pahdqzo0R3Vz7qGIuyJBmIKv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.161.0/24
81.5.177.0/24
81.5.186.0/24
81.168.107.0/24
82.152.60.0/24
82.152.63.0/24
82.152.69.0/24
82.153.141.0/24
82.153.183.0/24
82.153.234.0/24
Signature Algorithm: sha256WithRSAEncryption
03:45:32:e3:56:36:96:31:26:7b:e0:6e:b8:53:11:42:59:b2:
39:e7:3c:82:40:eb:0c:a7:c6:eb:dc:87:6e:ed:1e:a8:58:00:
f7:d7:be:f9:df:73:d4:62:41:27:66:26:6d:6d:d6:d3:d5:ad:
fe:a8:7a:07:84:ed:81:86:2e:7d:5c:9b:93:f5:2d:d2:de:54:
56:f9:63:0a:a4:80:dd:70:ff:b1:72:fe:5b:51:e1:66:f4:7d:
29:07:7d:e2:87:9d:a7:fa:af:d5:97:65:72:be:6e:13:ec:15:
3a:16:37:71:91:01:01:47:c5:b6:2f:a2:bf:67:c0:9a:17:f8:
0c:94:ae:ce:a9:d5:82:e7:92:ce:e3:90:ea:4e:f9:64:4f:4f:
2e:42:42:f3:8f:9a:39:54:8a:fe:28:9c:ee:3b:2c:c3:84:80:
37:de:e8:18:c3:c3:28:75:8c:dc:f7:c6:57:34:fb:28:1f:02:
9e:46:a2:04:75:a0:c5:d9:7f:1d:35:99:a7:97:2c:de:d1:e1:
67:39:fd:c1:3d:b8:a8:f6:e0:75:85:e5:2f:d6:67:a5:5e:0b:
72:ad:09:5e:b1:53:5a:76:c0:53:a0:3d:94:d1:55:e3:70:2f:
f8:16:3e:13:12:cb:71:0b:42:fb:d4:c4:54:ab:93:e3:f8:d9:
3e:3e:07:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:10 2026 by rpki-client