Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dQaF1Pa3Xe9voPEBGBOOg4v4A0M.roa
File: dQaF1Pa3Xe9voPEBGBOOg4v4A0M.roa (raw, json)
Hash identifier: rNas7RbQupSeD6MHRfmDZokQJvIfVQI/TGB9gI4RqJU=
Subject key identifier: 75:06:85:D4:F6:B7:5D:EF:6F:A0:F1:01:18:13:8E:83:8B:F8:03:43
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368FB7AC84057EEF7C3F4D45A4991BE
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dQaF1Pa3Xe9voPEBGBOOg4v4A0M.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212783
IP address blocks: 81.168.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fb:7a:c8:40:57:ee:f7:c3:f4:d4:5a:49:91:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=750685d4f6b75def6fa0f10118138e838bf80343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:aa:bd:1a:a9:c9:d9:2e:0a:3c:89:17:10:
d1:da:2d:90:67:55:bb:93:26:6a:ea:27:17:44:b0:
ea:b3:73:4e:d5:a5:ea:44:cc:2a:9c:51:89:32:f6:
77:2b:81:3e:6c:c4:8f:cc:ba:fa:97:ef:2c:c0:71:
38:c5:e4:17:4c:77:68:6b:9a:8c:f1:21:3d:f3:ce:
a8:15:24:03:23:9b:66:ca:50:ac:af:3e:03:e6:e5:
13:2f:51:5f:6e:da:55:fc:6c:43:18:ae:a8:79:03:
2e:b2:10:70:5c:9a:e5:86:a4:15:8c:a7:78:c4:53:
a7:ab:6d:9b:4e:27:0e:33:26:1c:25:70:01:67:8b:
5c:69:b4:a8:64:6c:b8:65:32:e0:b5:1c:63:33:ca:
99:68:4e:3a:63:fd:d0:eb:64:f5:94:1b:cf:bf:9f:
4f:4b:05:93:93:1b:9b:5f:3e:b1:8f:53:c2:8d:77:
9b:43:61:0c:7c:d8:18:1f:4a:0e:f2:46:91:c9:ee:
06:23:63:c0:67:80:98:e2:5f:e2:77:34:99:44:65:
71:06:e6:ed:5d:6c:03:1a:95:9f:fc:3b:7d:ed:bf:
97:a5:94:d2:31:c2:1e:ed:4d:fa:08:3d:92:41:75:
ca:25:45:7c:cc:37:8d:36:a7:46:64:6c:c7:37:17:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:06:85:D4:F6:B7:5D:EF:6F:A0:F1:01:18:13:8E:83:8B:F8:03:43
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dQaF1Pa3Xe9voPEBGBOOg4v4A0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.35.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e7:10:ee:7f:fe:85:5c:75:e2:4f:a7:82:73:0c:cd:14:7c:
c8:09:e3:ee:f4:83:76:b8:17:27:fd:e5:06:d9:49:dc:cf:96:
a5:e2:53:91:95:bd:6d:cf:05:9c:0f:ab:66:74:eb:3a:2d:fe:
95:11:aa:1c:6d:dc:4a:91:25:80:e3:12:50:81:df:e1:fa:43:
2a:81:0d:cb:80:3d:3c:ca:3e:b1:ac:2d:de:b5:ff:33:83:d4:
4f:ad:68:9c:75:65:2b:57:a8:f1:76:ac:19:4f:39:11:f1:50:
0f:82:58:05:d6:9e:67:a9:d7:c9:11:91:e9:27:15:f7:89:f0:
ee:0e:fe:b1:6f:22:f8:72:c1:7d:6d:31:07:9d:43:c6:fb:cb:
70:e8:77:f1:83:2f:5a:6e:c3:17:da:25:c3:96:74:2f:2f:18:
c9:26:28:fb:ea:b3:7f:17:18:b1:f9:1e:ac:0f:35:88:78:7b:
3d:ed:35:3b:b5:d5:40:e6:9e:29:62:d9:b0:1e:30:4c:24:e8:
99:2c:de:f3:3f:6a:68:c4:54:a3:0c:3a:8e:8b:08:4d:65:f5:
fc:33:d7:4b:54:70:b4:27:e8:3b:15:9c:3e:d4:74:a1:50:a9:
5b:d4:04:52:0f:3e:f3:d3:a9:c1:55:fd:14:de:c2:d8:70:a6:
b0:ba:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:27 2026 by rpki-client