Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dFIf_THAIHg9Q6rzD52v5cL9t88.roa
File: dFIf_THAIHg9Q6rzD52v5cL9t88.roa (raw, json)
Hash identifier: 9xohOcxwEGX5IfskgT59HljIwNMQQz/CAJR6G9sKC20=
Subject key identifier: 74:52:1F:FD:31:C0:20:78:3D:43:AA:F3:0F:9D:AF:E5:C2:FD:B7:CF
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC6869BF44C5F73EECA3079F91991AAB5
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dFIf_THAIHg9Q6rzD52v5cL9t88.roa
Signing time: Mon 03 Aug 2026 07:28:58 +0000
ROA not before: Mon 03 Aug 2026 07:28:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 81.5.160.0/24 maxlen: 24
81.5.161.0/24 maxlen: 24
81.5.177.0/24 maxlen: 24
81.5.186.0/24 maxlen: 24
81.168.107.0/24 maxlen: 24
82.152.60.0/24 maxlen: 24
82.152.63.0/24 maxlen: 24
82.152.69.0/24 maxlen: 24
82.153.141.0/24 maxlen: 24
82.153.183.0/24 maxlen: 24
82.153.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:86:9b:f4:4c:5f:73:ee:ca:30:79:f9:19:91:aa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 07:28:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74521ffd31c020783d43aaf30f9dafe5c2fdb7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:e5:c2:eb:0d:b1:41:10:e6:a3:c2:1f:00:
2d:fc:91:5d:1f:0d:71:ba:7c:27:21:d5:69:40:e8:
44:0d:90:26:b7:59:69:1b:1b:34:0a:0c:39:0b:d8:
21:82:8e:8f:46:92:8b:35:b6:6f:d8:c0:06:2e:4d:
93:09:bf:48:1e:a7:86:ad:ca:f0:58:c5:4a:dd:c9:
2f:13:bf:e8:9d:36:1d:2d:79:3c:aa:b7:a7:43:ad:
46:22:ee:72:c2:d5:2b:3d:e7:c5:86:a1:64:42:e7:
0c:c6:c2:a1:d1:3f:ba:fb:63:ae:ae:ed:88:73:1a:
f0:e1:6e:64:68:2f:e1:92:dc:52:f0:d3:83:28:17:
43:6c:3e:a0:32:a6:07:60:74:31:91:71:8b:c6:46:
d3:b9:1b:f1:9d:88:48:87:70:f7:71:c5:34:2d:70:
52:db:57:54:81:32:84:59:a7:c9:a4:bd:95:e1:62:
f5:51:e9:c6:b0:1d:2e:9f:12:bb:5c:73:d0:01:e9:
ed:42:45:7f:a2:5c:19:8c:8a:df:d6:92:f6:0c:ae:
69:25:ca:39:07:c4:a9:20:d4:14:fd:81:01:3c:3f:
ad:31:77:0e:12:e5:82:9c:e9:8b:ac:30:a8:cf:57:
2b:c0:05:de:4d:25:f3:5b:86:98:98:4b:77:79:49:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:52:1F:FD:31:C0:20:78:3D:43:AA:F3:0F:9D:AF:E5:C2:FD:B7:CF
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dFIf_THAIHg9Q6rzD52v5cL9t88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.160.0/23
81.5.177.0/24
81.5.186.0/24
81.168.107.0/24
82.152.60.0/24
82.152.63.0/24
82.152.69.0/24
82.153.141.0/24
82.153.183.0/24
82.153.234.0/24
Signature Algorithm: sha256WithRSAEncryption
84:8c:a0:44:cc:0b:4c:c0:0d:ba:9f:b9:94:9e:c9:a2:9a:6d:
e2:f3:16:5f:04:31:95:6a:6a:6e:67:9d:72:bb:da:23:4b:05:
d0:77:a6:83:e6:0a:59:b0:f8:7e:92:ef:bf:1b:e4:f4:c1:44:
26:6c:d2:0e:d6:ce:1e:e5:34:cb:05:0b:fa:8c:5d:49:38:15:
54:61:83:94:9c:5b:84:f3:84:b9:34:58:0e:9d:ac:7f:60:89:
1c:c6:83:ce:be:e6:85:52:fe:78:04:da:cd:dd:8c:09:71:44:
5d:23:4d:94:c0:84:07:4c:79:c0:77:23:b7:51:6e:2a:7d:9b:
4c:2f:77:6c:8f:27:a4:e7:bf:d0:f3:3e:a6:0a:bd:42:28:9f:
f2:48:27:0e:67:56:ee:15:b3:c2:af:97:1a:a1:76:2f:9f:3e:
5c:58:be:2a:a0:5e:8b:2f:3b:89:e5:ad:b0:d2:24:2c:d2:46:
17:c2:5a:db:1d:20:94:3b:83:4d:cf:98:fb:6a:8f:59:1a:1f:
3c:47:3a:2c:50:1e:33:73:50:33:a7:6e:ba:15:94:13:d1:4d:
c8:85:d0:34:97:4a:d8:d4:64:59:eb:cc:e6:34:b0:57:b7:e5:
1f:1f:57:54:ad:27:f1:dc:90:88:13:38:75:90:19:26:e6:73:
0b:d0:4c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:20 2026 by rpki-client