Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bsV6IAdCaUJ0-aIsfD5oH9b_gkw.roa
File: bsV6IAdCaUJ0-aIsfD5oH9b_gkw.roa (raw, json)
Hash identifier: OY2qmZaBU9G+YQBJ2WGi2RsZTw/eUOcqxoWYN9VFOXo=
Subject key identifier: 6E:C5:7A:20:07:42:69:42:74:F9:A2:2C:7C:3E:68:1F:D6:FF:82:4C
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F70B0631B85E9EA6355539A83E24EDBE6
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bsV6IAdCaUJ0-aIsfD5oH9b_gkw.roa
Signing time: Fri 17 Jul 2026 15:27:15 +0000
ROA not before: Fri 17 Jul 2026 15:27:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 81.168.62.0/24 maxlen: 24
81.168.64.0/24 maxlen: 24
81.168.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:b0:63:1b:85:e9:ea:63:55:53:9a:83:e2:4e:db:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 17 15:27:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ec57a200742694274f9a22c7c3e681fd6ff824c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:af:82:18:e3:67:f7:cf:fa:cd:d3:62:9e:
b8:02:43:d9:83:6d:4f:3a:3d:8b:24:ef:8b:0d:a0:
c5:e2:29:ea:97:ae:4f:4a:53:8b:9f:cf:69:61:2b:
83:ad:a5:d3:05:7d:c0:38:a8:4b:92:6d:2d:5c:04:
b2:67:39:7e:2c:97:4a:7a:a3:82:d5:6e:8f:63:c2:
01:98:1f:49:95:ce:56:70:2f:e5:a5:a2:14:e0:b5:
78:77:eb:12:6d:a4:27:05:13:04:c2:03:05:25:4c:
95:aa:37:90:65:28:29:fd:3e:79:8a:16:4f:96:74:
88:17:68:e3:e8:cf:37:b9:b9:6c:1b:3a:f0:3f:b5:
5d:3e:9b:5d:06:a3:ea:0c:81:db:4d:b3:4d:da:6f:
c5:f9:4a:a6:ce:4a:d2:06:95:7a:6e:19:b3:a6:8c:
d2:18:ba:d3:6e:4e:dc:e1:f7:d2:06:d6:b2:3c:8d:
0b:30:1b:67:0f:9e:5e:c6:ce:cc:14:b0:6d:6a:08:
33:08:80:e2:0a:df:3c:df:48:2f:a5:a9:af:23:2c:
db:2e:f8:f1:c1:80:31:4f:dc:cd:03:fc:7f:0f:c1:
33:86:e8:2a:06:36:22:1b:5b:2a:92:de:ef:44:83:
87:4d:95:f5:1a:5a:68:81:14:a1:ee:5b:a7:31:87:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C5:7A:20:07:42:69:42:74:F9:A2:2C:7C:3E:68:1F:D6:FF:82:4C
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bsV6IAdCaUJ0-aIsfD5oH9b_gkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.62.0/24
81.168.64.0/24
81.168.112.0/24
Signature Algorithm: sha256WithRSAEncryption
43:9d:93:53:7a:c8:63:fa:3d:35:0b:5e:03:c0:8b:7d:a2:44:
f1:cc:83:51:8a:d3:02:2b:6a:1e:b3:ba:c7:05:59:d4:10:6f:
7b:39:69:3f:a7:d3:51:f7:b5:35:20:8c:82:94:38:27:c0:47:
f1:36:22:09:72:99:aa:1c:b5:5d:4c:39:7c:2b:2e:13:e1:eb:
eb:03:53:e3:53:43:9c:91:8e:7c:49:5b:9e:5f:71:64:e1:c3:
58:df:56:a6:d1:05:b3:ab:a6:b2:1b:c3:9c:69:93:3b:42:3c:
c3:d9:30:71:cd:9a:0d:26:6b:cf:b9:46:b7:ec:b2:bc:a4:2a:
e4:41:0f:e3:e5:16:ac:68:45:e2:68:dd:14:6d:65:77:dd:b2:
fb:f7:6a:19:6a:3c:39:4a:03:c2:58:4c:28:d8:a0:59:04:6d:
fc:14:9d:45:4c:f8:0e:9c:9e:db:3e:d6:53:c8:b2:fc:11:3c:
ce:07:78:46:26:c5:9a:97:dd:e2:55:1c:b2:5d:9f:2c:ca:74:
89:d5:08:8a:ef:c0:67:49:09:12:40:be:5c:92:8f:10:a0:1d:
4f:11:dc:b6:b0:9d:33:31:bc:8a:bb:1f:69:89:cd:73:1d:c6:
5d:2a:73:fd:b9:7e:ed:71:c1:27:25:0e:d7:4c:e0:cc:a1:a9:
f2:36:89:30
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ9wsGMbhenqY1VTmoPiTtvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzE3MTUyNzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWM1N2EyMDA3NDI2OTQyNzRmOWEyMmM3YzNlNjgxZmQ2ZmY4MjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiyvghjjZ/fP+s3TYp64AkPZg21P
Oj2LJO+LDaDF4inql65PSlOLn89pYSuDraXTBX3AOKhLkm0tXASyZzl+LJdKeqOC
1W6PY8IBmB9Jlc5WcC/lpaIU4LV4d+sSbaQnBRMEwgMFJUyVqjeQZSgp/T55ihZP
lnSIF2jj6M83ublsGzrwP7VdPptdBqPqDIHbTbNN2m/F+UqmzkrSBpV6bhmzpozS
GLrTbk7c4ffSBtayPI0LMBtnD55exs7MFLBtaggzCIDiCt8830gvpamvIyzbLvjx
wYAxT9zNA/x/D8EzhugqBjYiG1sqkt7vRIOHTZX1GlpogRSh7lunMYf0TwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG7FeiAHQmlCdPmiLHw+aB/W/4JMMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYnNWNklBZENhVUowLWFJc2ZENW9IOWJfZ2t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUag+AwQA
UahAAwQAUahwMA0GCSqGSIb3DQEBCwUAA4IBAQBDnZNTeshj+j01C14DwIt9okTx
zINRitMCK2oes7rHBVnUEG97OWk/p9NR97U1IIyClDgnwEfxNiIJcpmqHLVdTDl8
Ky4T4evrA1PjU0OckY58SVueX3Fk4cNY31am0QWzq6ayG8OcaZM7QjzD2TBxzZoN
JmvPuUa37LK8pCrkQQ/j5RasaEXiaN0UbWV33bL792oZajw5SgPCWEwo2KBZBG38
FJ1FTPgOnJ7bPtZTyLL8ETzOB3hGJsWal93iVRyyXZ8synSJ1QiK78BnSQkSQL5c
ko8QoB1PEdy2sJ0zMbyKux9pic1zHcZdKnP9uX7tccEnJQ7XTODMoanyNokw
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:07:39 2026 by rpki-client