Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cVmyXCb1NZwjdovIC4crMkMSjDU.roa
File: cVmyXCb1NZwjdovIC4crMkMSjDU.roa (raw, json)
Hash identifier: ZzRBmQoJczQZ4fvRU/Tr7Rj//6wLQxIcqbs4etm7D+o=
Subject key identifier: 71:59:B2:5C:26:F5:35:9C:23:76:8B:C8:0B:87:2B:32:43:12:8C:35
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368B65C0A9922E9A3E29610D431EF83
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cVmyXCb1NZwjdovIC4crMkMSjDU.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33355
IP address blocks: 81.168.105.0/24 maxlen: 24
213.130.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b6:5c:0a:99:22:e9:a3:e2:96:10:d4:31:ef:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7159b25c26f5359c23768bc80b872b3243128c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:4f:61:7c:4f:90:7d:6c:50:ef:b5:ba:76:
9d:94:95:15:0a:98:a0:31:ab:c1:d0:72:92:f5:f8:
4a:dc:8d:33:3c:17:7a:00:aa:32:fe:15:9d:17:2c:
10:b0:d3:49:62:e9:58:38:57:8a:9d:43:8a:6f:df:
f9:3c:70:b4:7b:75:fe:80:41:5e:2c:72:c5:d4:dd:
82:99:f0:75:7f:d0:23:e2:6f:0c:ee:a7:c5:43:8a:
6f:cc:8e:0a:f3:bc:75:76:5a:89:0e:21:e2:0d:40:
07:e8:34:f3:ae:24:01:45:53:94:a9:72:da:04:c0:
82:0f:1e:0a:a4:d8:85:89:2e:4d:8f:8b:95:42:6d:
52:d0:93:1b:3a:66:49:9d:1f:83:b8:a7:d7:c5:0a:
42:61:be:13:ee:76:57:cb:7a:33:a2:c0:21:8b:5e:
11:0c:fd:91:76:bd:29:30:9d:50:3c:02:2a:38:5e:
3d:53:7f:cb:a3:94:1a:4d:bd:61:eb:ec:9b:dd:04:
cd:bd:2b:f7:19:06:11:3a:d4:51:f8:1a:a9:c8:6a:
08:40:ea:13:45:11:bc:a6:29:3b:b4:bf:be:ba:05:
eb:5e:fb:57:77:f1:1e:6d:40:3d:d4:53:f3:5f:84:
e5:bf:e2:85:6b:1b:aa:02:b4:f6:a4:f1:96:0c:d1:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:59:B2:5C:26:F5:35:9C:23:76:8B:C8:0B:87:2B:32:43:12:8C:35
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cVmyXCb1NZwjdovIC4crMkMSjDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.105.0/24
213.130.132.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3f:83:73:39:88:69:fc:a2:e4:f0:cd:6b:c2:4c:9d:f4:2f:
c3:59:ee:a7:d9:4b:ee:bc:68:b1:f3:96:06:94:3c:5c:73:d3:
40:2b:36:be:a9:32:6f:a5:34:84:3b:14:a9:ef:a1:5f:69:d5:
17:81:10:23:0f:19:49:c9:15:2c:ea:18:c9:0c:72:d9:c6:b7:
45:b4:50:88:3f:b4:69:b7:77:18:b1:bb:c3:54:d4:cc:b6:c0:
74:f1:6f:50:71:14:02:f5:d4:cc:09:03:77:68:38:fb:e3:44:
37:e9:49:e4:44:96:b1:a2:d6:59:81:52:0c:b8:be:10:61:73:
5c:3f:e4:cb:38:e7:89:37:9e:d1:4f:fe:d4:e8:c0:dc:0a:70:
71:45:3a:fb:72:6d:cc:86:45:cb:28:84:fd:dc:e5:a7:7f:82:
1b:9c:c1:89:d8:ea:72:1b:25:ea:c7:17:e9:51:e6:ff:af:b2:
e1:2b:a1:1a:ef:e4:16:1b:3e:25:fc:31:d1:7a:b7:6b:ca:cc:
12:fb:01:61:9c:e5:59:be:c2:84:49:23:b4:24:5b:15:0d:c9:
8f:48:7f:7b:1e:93:e6:f9:18:22:36:06:03:18:50:96:10:a2:
2a:33:54:20:8c:a9:d4:de:da:9a:e6:2d:62:5f:d7:7a:c6:e2:
d8:1f:ec:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:40 2026 by rpki-client