Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c9VhJfM2fdRcdFh7YRdWfQeHYk0.roa
File: c9VhJfM2fdRcdFh7YRdWfQeHYk0.roa (raw, json)
Hash identifier: EduAZ/RpPvhSFOyvAH3PfAAO33vXjcippOV6JdEhkGA=
Subject key identifier: 73:D5:61:25:F3:36:7D:D4:5C:74:58:7B:61:17:56:7D:07:87:62:4D
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23690677AC51F7455A6ACF8187D9CC71
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c9VhJfM2fdRcdFh7YRdWfQeHYk0.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214208
IP address blocks: 213.218.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:06:77:ac:51:f7:45:5a:6a:cf:81:87:d9:cc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73d56125f3367dd45c74587b6117567d0787624d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:14:59:a7:c9:64:40:3b:1c:81:9d:80:ca:
26:ac:d5:97:6f:d8:69:53:dc:62:bb:49:db:ed:9e:
21:42:6b:ec:00:7a:1c:52:c3:60:70:67:c7:ce:d9:
5d:8a:3a:e6:a2:0c:0f:48:68:c1:f7:4b:89:d4:64:
b3:e8:58:e5:e6:eb:99:a7:b9:5a:c9:cb:01:97:fa:
8e:b2:1b:b6:7f:d3:28:d1:3d:5f:7b:e0:dc:7d:4e:
34:12:1b:6a:23:22:d9:2d:20:dd:8f:e6:be:52:b1:
51:73:60:9c:c1:f3:7b:03:d1:2c:d2:44:60:31:6a:
ce:20:d7:c1:e0:cd:52:bd:5a:cb:8c:35:43:1b:2e:
74:43:8b:01:1e:e1:6f:80:6e:85:5e:96:cb:5e:cc:
c8:8f:e9:c4:dc:f3:f5:a8:ee:b1:ff:51:ab:e1:c7:
ce:da:4d:ce:a9:39:b5:24:c0:09:68:98:e8:d3:dd:
6c:2c:87:44:c0:c2:a1:76:17:c1:89:99:d8:8a:5f:
f5:34:91:1f:d1:2f:b4:0a:b6:fa:23:e6:c8:84:fc:
0e:83:01:7a:96:cd:94:f6:32:06:2f:0c:86:c8:8e:
59:98:3b:b5:59:ec:23:c7:e4:1e:88:bf:45:29:1a:
79:1f:0d:22:bb:d7:88:bd:68:5c:e5:da:db:d2:a5:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D5:61:25:F3:36:7D:D4:5C:74:58:7B:61:17:56:7D:07:87:62:4D
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c9VhJfM2fdRcdFh7YRdWfQeHYk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.215.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a2:0a:44:18:13:22:90:49:0d:e0:3f:23:46:84:ec:8b:14:
7e:5b:68:e9:29:33:56:ad:19:77:cd:4e:64:06:94:cd:e2:9a:
4d:34:e0:ad:8a:03:e9:3b:12:8d:db:57:dd:62:cf:7e:70:d5:
bb:a3:af:ce:dc:4c:a9:c0:a0:39:c9:5c:82:dc:c3:4a:b1:42:
b6:42:86:9b:51:77:06:e2:a2:dd:9e:aa:9d:4f:eb:b5:8f:a9:
99:f9:16:a4:3e:be:3d:dc:02:8a:8f:a7:2d:db:16:04:89:97:
d7:70:15:2c:b1:ed:54:a1:87:5d:36:ad:79:5f:62:ce:f9:62:
40:17:fd:b7:ca:ad:e3:40:b4:b9:13:e4:72:5a:7e:85:4e:fe:
40:de:65:92:eb:cf:f5:76:f3:43:71:47:d0:1d:56:62:88:59:
03:33:9d:d7:62:e0:ab:10:2a:8b:b4:0f:93:22:f2:87:d7:3f:
d3:a3:79:4a:47:38:12:62:fc:3d:ee:50:cd:9d:6d:b7:3c:c6:
b1:f2:ef:a6:75:f3:5a:0a:af:74:ee:08:90:9d:52:7a:cc:33:
e9:41:97:68:15:f7:89:1a:35:e7:c6:8e:3f:fa:7c:2d:c8:41:
fd:56:53:22:be:4f:47:ee:68:d0:31:6c:70:e5:27:0c:c8:78:
43:84:1d:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQZ3rFH3RVpqz4GH2cxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2Q1NjEyNWYzMzY3ZGQ0NWM3NDU4N2I2MTE3NTY3ZDA3ODc2MjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwwUWafJZEA7HIGdgMomrNWXb9hp
U9xiu0nb7Z4hQmvsAHocUsNgcGfHztldijrmogwPSGjB90uJ1GSz6Fjl5uuZp7la
ycsBl/qOshu2f9Mo0T1fe+DcfU40EhtqIyLZLSDdj+a+UrFRc2CcwfN7A9Es0kRg
MWrOINfB4M1SvVrLjDVDGy50Q4sBHuFvgG6FXpbLXszIj+nE3PP1qO6x/1Gr4cfO
2k3OqTm1JMAJaJjo091sLIdEwMKhdhfBiZnYil/1NJEf0S+0Crb6I+bIhPwOgwF6
ls2U9jIGLwyGyI5ZmDu1Wewjx+QeiL9FKRp5Hw0iu9eIvWhc5drb0qWyIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHPVYSXzNn3UXHRYe2EXVn0Hh2JNMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYzlWaEpmTTJmZFJjZEZoN1lSZFdmUWVIWWswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1drXMA0G
CSqGSIb3DQEBCwUAA4IBAQCBogpEGBMikEkN4D8jRoTsixR+W2jpKTNWrRl3zU5k
BpTN4ppNNOCtigPpOxKN21fdYs9+cNW7o6/O3EypwKA5yVyC3MNKsUK2QoabUXcG
4qLdnqqdT+u1j6mZ+RakPr493AKKj6ct2xYEiZfXcBUsse1UoYddNq15X2LO+WJA
F/23yq3jQLS5E+RyWn6FTv5A3mWS68/1dvNDcUfQHVZiiFkDM53XYuCrECqLtA+T
IvKH1z/To3lKRzgSYvw97lDNnW23PMax8u+mdfNaCq907giQnVJ6zDPpQZdoFfeJ
GjXnxo4/+nwtyEH9VlMivk9H7mjQMWxw5ScMyHhDhB3A
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:16:26 2026 by rpki-client