Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dVnZZwd-b8gKqn6pL-4LgdeHELA.roa
File: dVnZZwd-b8gKqn6pL-4LgdeHELA.roa (raw, json)
Hash identifier: Z2wpJiAZfWmkWYJRsybO5b7W30/BlHyN1u2Tre7Zpy8=
Subject key identifier: 75:59:D9:67:07:7E:6F:C8:0A:AA:7E:A9:2F:EE:0B:81:D7:87:10:B0
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F236900A5C44781C4DAE131A5164BCA17
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dVnZZwd-b8gKqn6pL-4LgdeHELA.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213517
IP address blocks: 213.130.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:00:a5:c4:47:81:c4:da:e1:31:a5:16:4b:ca:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7559d967077e6fc80aaa7ea92fee0b81d78710b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e3:b8:d1:a2:5e:ed:fa:4d:2a:e6:df:20:ca:
e9:58:74:c9:2a:f8:33:11:93:bd:b2:28:1a:9f:bb:
1b:84:25:14:36:52:1c:ad:1f:57:d5:55:83:fa:78:
31:5e:16:c1:fd:9b:9e:b1:b5:db:9c:2a:06:64:9f:
ef:ba:29:60:7a:c4:25:31:e0:17:71:45:22:fc:95:
f5:17:ca:08:90:78:32:a2:cf:be:2d:53:9a:a0:ef:
5a:b5:48:50:81:2e:1b:dd:98:15:31:ae:16:ec:a8:
33:75:30:d2:d6:76:aa:65:e3:42:0b:30:6b:0f:23:
ad:9c:73:68:00:70:ac:77:d4:d9:f8:ac:df:d6:3c:
ba:c2:0e:51:d9:2c:ae:a8:33:9f:fb:89:3f:09:93:
64:c0:27:ed:bf:38:18:6e:94:42:b8:db:5a:22:17:
2b:07:95:00:8e:2b:b5:6e:a5:79:61:b2:6d:00:a1:
31:40:5b:e8:43:58:f6:c7:42:a3:9d:de:ed:fd:73:
f4:68:3a:25:73:9f:b7:ca:14:28:39:f0:d4:f9:98:
99:1a:f7:42:17:97:27:66:63:bc:dd:53:70:29:74:
e8:de:4e:0c:5c:62:d5:6d:c8:8e:62:13:72:f9:96:
14:b7:cf:07:d6:39:82:ac:2e:df:19:46:15:fe:10:
4a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:59:D9:67:07:7E:6F:C8:0A:AA:7E:A9:2F:EE:0B:81:D7:87:10:B0
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dVnZZwd-b8gKqn6pL-4LgdeHELA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.153.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b8:e3:20:db:83:f5:72:80:15:e3:2f:73:07:b5:4e:c8:d8:
de:e0:6c:e7:cc:eb:a9:e2:fb:54:f6:79:ea:6b:20:5f:44:7e:
54:fc:b5:1a:aa:3c:f1:83:4c:dd:3b:9a:ad:c6:77:5e:66:f5:
0d:e0:f5:9f:2f:18:26:33:43:32:a0:13:86:02:37:7e:7d:5e:
a9:c5:9f:e8:c7:c6:a4:8d:78:2b:5f:4a:d8:73:0f:58:0f:30:
89:6f:0c:fe:78:b0:6d:09:f2:e6:b1:37:d9:bd:d0:ae:11:e4:
fa:5f:9a:21:6a:e3:0e:a4:36:e5:5f:3a:85:9d:e6:46:24:46:
af:24:06:94:36:bf:4c:99:e2:bc:54:fa:41:d4:c9:1f:46:85:
aa:ff:0a:d0:cb:39:7d:69:54:b0:ce:21:fa:1b:72:f3:ae:c9:
ac:a9:00:17:d8:aa:a9:85:0b:2f:b5:86:7f:35:9a:3e:ce:be:
94:1a:39:49:96:ef:f7:e7:7d:7e:5b:e4:26:8f:56:24:24:03:
db:37:f8:36:ac:62:41:01:61:65:8f:48:c3:a8:78:9f:b0:30:
21:27:6b:09:b8:29:33:50:ac:72:eb:27:53:f8:a4:74:9a:35:
42:7a:53:52:58:04:07:a3:8f:bf:00:e0:00:78:26:f5:d2:6d:
3b:fb:e2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:52 2026 by rpki-client