Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/boLvh4cHBOc3KFn810_aUtDj4M0.roa
File: boLvh4cHBOc3KFn810_aUtDj4M0.roa (raw, json)
Hash identifier: e3BSecrECFBGJLt67oJvv3BpiprLNi9EK0qGgPLwj8Q=
Subject key identifier: 6E:82:EF:87:87:07:04:E7:37:28:59:FC:D7:4F:DA:52:D0:E3:E0:CD
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F6F20C93D8D307C5D9D5038B3BB38C008
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/boLvh4cHBOc3KFn810_aUtDj4M0.roa
Signing time: Fri 17 Jul 2026 08:10:47 +0000
ROA not before: Fri 17 Jul 2026 08:10:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146906
IP address blocks: 213.130.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:20:c9:3d:8d:30:7c:5d:9d:50:38:b3:bb:38:c0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 17 08:10:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e82ef87870704e7372859fcd74fda52d0e3e0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:36:52:4c:cb:12:3d:ef:70:fe:d9:62:db:
7d:d1:49:b0:40:81:eb:0b:bc:fb:2c:fc:8e:d8:de:
93:d3:59:3a:a3:07:11:4e:cb:d6:06:67:ca:49:92:
e1:4c:a9:62:68:b1:f9:8f:7a:76:c1:f3:a2:43:b2:
66:49:0d:a5:74:21:af:f3:7a:2c:57:0b:3e:8d:0f:
cd:56:17:a7:a8:2d:68:2a:c8:f6:af:66:f9:c3:36:
18:ea:ce:a5:61:35:8f:44:0c:18:e4:ec:d5:15:9e:
3b:6c:ee:40:ad:d6:05:91:a6:88:3b:17:26:fc:27:
33:52:18:7c:25:19:43:ee:12:40:d3:8e:c7:e2:bd:
64:83:99:cc:2e:f1:50:08:a1:82:12:fc:af:30:07:
fc:ac:62:f7:80:9c:21:92:eb:99:6f:2c:3c:1b:11:
26:a3:42:3c:1c:2f:9a:97:06:75:46:5c:2f:f0:62:
47:97:fa:5c:41:f6:60:2f:e3:4c:ca:f5:fe:a0:ae:
ac:87:4d:1a:74:fc:40:72:dc:e7:c0:1f:28:d8:c3:
40:ae:85:f1:db:00:03:10:01:c4:bc:68:9a:7d:83:
04:24:0c:a8:4d:db:c8:4c:be:ad:6a:7d:d3:ad:98:
ea:87:a9:a5:d4:1c:aa:6d:9c:69:a2:43:e7:4a:d7:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:82:EF:87:87:07:04:E7:37:28:59:FC:D7:4F:DA:52:D0:E3:E0:CD
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/boLvh4cHBOc3KFn810_aUtDj4M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.137.0/24
Signature Algorithm: sha256WithRSAEncryption
29:41:83:fe:7c:81:81:00:b9:eb:76:ca:ea:c9:b4:a8:45:76:
53:e3:36:b0:c7:cc:ee:3b:e0:12:d9:3e:67:59:ff:cd:1e:f0:
4e:74:c3:c4:59:9f:62:fb:5b:01:86:23:19:48:a0:2a:0d:f5:
ae:97:ab:cf:bf:5f:6c:ea:c1:f9:15:45:5f:38:46:92:f7:80:
ac:26:6e:9a:1d:b5:bf:fc:a5:cd:71:63:bb:03:37:23:36:21:
1f:96:0f:15:5d:f2:bb:b6:d7:1f:5a:1f:82:9c:dd:20:fb:98:
78:2f:83:30:f6:6d:3c:11:08:5e:ea:13:8a:ec:10:1f:9f:c2:
29:9e:f2:0d:c1:2c:e7:65:2d:67:cc:18:58:84:1b:21:70:8a:
87:cb:20:a5:84:83:4c:31:cf:89:ec:54:aa:41:6c:c0:37:38:
a8:48:f7:2f:72:a7:fb:ca:31:85:0e:68:c3:d1:38:57:1f:75:
b9:51:5c:94:67:5b:96:57:14:75:0f:33:a7:7d:5e:71:d8:f6:
43:ed:45:bc:8c:59:4d:14:59:18:2d:9e:3f:b2:37:f0:33:da:
f7:a7:b1:e5:e8:c0:0f:a4:2b:2d:fd:ab:50:98:58:8c:93:ef:
b9:3d:44:04:83:28:4a:44:49:f8:21:d5:60:12:93:45:45:70:
65:d6:6f:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9vIMk9jTB8XZ1QOLO7OMAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzE3MDgxMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTgyZWY4Nzg3MDcwNGU3MzcyODU5ZmNkNzRmZGE1MmQwZTNlMGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hs2UkzLEj3vcP7ZYtt90UmwQIHr
C7z7LPyO2N6T01k6owcRTsvWBmfKSZLhTKliaLH5j3p2wfOiQ7JmSQ2ldCGv83os
Vws+jQ/NVhenqC1oKsj2r2b5wzYY6s6lYTWPRAwY5OzVFZ47bO5ArdYFkaaIOxcm
/CczUhh8JRlD7hJA047H4r1kg5nMLvFQCKGCEvyvMAf8rGL3gJwhkuuZbyw8GxEm
o0I8HC+alwZ1Rlwv8GJHl/pcQfZgL+NMyvX+oK6sh00adPxActznwB8o2MNAroXx
2wADEAHEvGiafYMEJAyoTdvITL6tan3TrZjqh6ml1ByqbZxpokPnStc/IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG6C74eHBwTnNyhZ/NdP2lLQ4+DNMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYm9Mdmg0Y0hCT2MzS0ZuODEwX2FVdERqNE0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YKJMA0G
CSqGSIb3DQEBCwUAA4IBAQApQYP+fIGBALnrdsrqybSoRXZT4zawx8zuO+AS2T5n
Wf/NHvBOdMPEWZ9i+1sBhiMZSKAqDfWul6vPv19s6sH5FUVfOEaS94CsJm6aHbW/
/KXNcWO7AzcjNiEflg8VXfK7ttcfWh+CnN0g+5h4L4Mw9m08EQhe6hOK7BAfn8Ip
nvINwSznZS1nzBhYhBshcIqHyyClhINMMc+J7FSqQWzANzioSPcvcqf7yjGFDmjD
0ThXH3W5UVyUZ1uWVxR1DzOnfV5x2PZD7UW8jFlNFFkYLZ4/sjfwM9r3p7Hl6MAP
pCst/atQmFiMk++5PUQEgyhKREn4IdVgEpNFRXBl1m8b
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:14:57 2026 by rpki-client