Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bQBWyyNI38zQ9eAbZLWgwaROjlE.roa
File: bQBWyyNI38zQ9eAbZLWgwaROjlE.roa (raw, json)
Hash identifier: bAvbM38stfavK8CBNnQhio7XJSynHMKc0ZH15icFoYU=
Subject key identifier: 6D:00:56:CB:23:48:DF:CC:D0:F5:E0:1B:64:B5:A0:C1:A4:4E:8E:51
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A014E15CFC506C097147217DA244C7D003
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bQBWyyNI38zQ9eAbZLWgwaROjlE.roa
Signing time: Tue 18 Aug 2026 12:38:28 +0000
ROA not before: Tue 18 Aug 2026 12:38:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56655
IP address blocks: 81.5.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:e1:5c:fc:50:6c:09:71:47:21:7d:a2:44:c7:d0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 18 12:38:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d0056cb2348dfccd0f5e01b64b5a0c1a44e8e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:e9:33:b3:79:c7:ed:3e:d3:29:b5:de:9e:
f0:02:a8:3a:6e:e2:21:06:72:a8:69:32:ee:10:3b:
43:d7:3c:9c:ea:7b:f7:c8:68:0a:6f:7b:ff:0c:46:
b1:fc:05:98:b0:c9:89:dd:66:b8:98:61:d7:93:e9:
0c:8e:a8:d7:25:48:83:c0:08:4c:81:e8:d5:58:4a:
f9:40:9d:7e:7c:c7:a5:49:19:e4:b6:e1:c2:69:6f:
44:a8:79:0c:ab:ee:13:64:9e:0f:cf:4d:ff:0f:72:
00:76:c3:a8:ff:5b:48:75:c6:e8:c9:44:91:4a:56:
1b:2f:26:2f:a0:52:60:bd:a4:3f:99:d3:1c:f3:2e:
d8:d7:0f:5d:65:9e:75:72:80:84:27:cd:6c:b6:63:
0a:0d:c3:dc:aa:23:82:8b:41:cf:3e:6f:a4:b9:ff:
c4:cc:b1:f3:9e:0c:34:cb:a3:5d:9a:15:01:ec:09:
99:49:71:55:d2:11:70:d5:b7:d7:b5:55:fc:e9:ee:
bb:90:7e:66:e2:84:4b:39:ba:9a:65:36:da:62:4d:
28:fb:03:1b:5d:73:04:b5:06:f9:c3:84:36:2b:7a:
ef:9a:2a:ec:e3:25:1a:68:36:09:29:6f:e2:c4:82:
08:62:d1:2b:fd:2e:56:41:00:c3:b7:46:d0:74:88:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:00:56:CB:23:48:DF:CC:D0:F5:E0:1B:64:B5:A0:C1:A4:4E:8E:51
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bQBWyyNI38zQ9eAbZLWgwaROjlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.160.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f4:8f:68:f2:4d:82:c2:d2:02:96:e3:3c:12:83:86:e5:f8:
56:4b:da:d5:2e:36:7a:8d:31:44:ad:c2:f1:bc:91:4e:38:0b:
ed:2b:ce:30:e4:2e:59:a2:c9:d2:6d:03:0e:c8:ba:7e:39:ea:
da:da:50:14:ca:4e:43:a6:f7:42:ff:7b:03:fe:2a:e5:ef:b0:
fa:03:78:71:ca:a6:ec:20:21:af:e4:94:6f:5f:67:20:b0:4a:
28:51:92:0a:41:63:1f:c2:db:02:6e:51:c5:0b:bf:25:a2:23:
00:77:aa:f5:8d:79:cb:1e:ec:eb:21:4d:42:37:ab:8d:de:0e:
43:1a:23:8b:f7:c1:7c:6c:c0:dd:c1:04:b2:87:c2:28:98:e6:
ed:ef:25:a2:be:a4:44:93:e3:fe:e3:38:43:73:2c:6f:c7:e4:
8b:a8:eb:c9:27:ba:1d:08:3c:a2:f9:5e:db:ab:65:af:9d:01:
24:9e:81:35:37:6e:10:bd:a7:0c:5c:0d:0a:c0:95:2c:1f:7d:
5c:8d:c0:14:a9:6b:02:e9:4e:eb:42:dc:6a:85:78:24:31:d4:
4e:ca:60:8f:3e:8f:2a:d6:75:eb:8b:90:0a:44:29:08:bf:bb:
11:1e:a3:1f:d4:c2:9f:1f:1d:e9:a3:4c:6a:30:f6:2b:78:fa:
e7:9e:59:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:44 2026 by rpki-client