Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fEs0A--KVoIJTNi7LBTsxsiPt_4.roa
File: fEs0A--KVoIJTNi7LBTsxsiPt_4.roa (raw, json)
Hash identifier: L0jtFLZMZatU7LPF9y/C5HEguzdXarz4eEtT18VsRAE=
Subject key identifier: 7C:4B:34:03:EF:8A:56:82:09:4C:D8:BB:2C:14:EC:C6:C8:8F:B7:FE
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FEFAF54A527FE72870850A51DB833D482
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fEs0A--KVoIJTNi7LBTsxsiPt_4.roa
Signing time: Tue 11 Aug 2026 07:17:52 +0000
ROA not before: Tue 11 Aug 2026 07:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 81.168.38.0/24 maxlen: 24
82.153.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:af:54:a5:27:fe:72:87:08:50:a5:1d:b8:33:d4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 11 07:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c4b3403ef8a5682094cd8bb2c14ecc6c88fb7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:e7:5a:22:be:ef:7f:cc:3c:e2:ae:a6:b5:
ed:a2:e1:e6:da:fe:b1:1a:52:06:19:a4:30:d6:44:
1d:37:3f:1b:07:be:ce:e9:69:5a:d6:90:f7:a2:4f:
8b:57:af:b9:3c:d6:39:09:c2:91:cd:3e:ae:3f:d2:
35:8f:f9:bf:0f:99:12:3d:a3:6c:06:88:18:2c:47:
41:8b:48:0f:53:fc:13:1a:db:dd:56:42:d0:4b:81:
f4:ac:8c:94:76:c2:9d:13:63:0b:84:bc:0d:eb:18:
ef:b7:8e:cb:6d:f7:68:59:9a:9e:8d:c9:f5:b9:6b:
d1:2d:e5:ff:ef:63:37:ce:2e:93:22:c9:a4:63:89:
e7:11:c2:e1:00:9f:17:cc:0b:a0:12:4f:10:d1:0f:
58:a0:dc:f6:4a:69:31:b4:ac:49:e9:b1:5e:6d:36:
6e:f0:59:10:b0:28:1f:46:09:97:f3:ea:fa:4c:87:
c6:f5:a7:30:7b:34:52:70:89:b0:f6:26:34:62:11:
fd:19:c6:a8:63:a1:a6:3a:38:23:8a:77:0d:c7:71:
54:6e:22:07:e7:57:ce:ff:0b:18:ef:12:22:f4:45:
24:8a:a4:a6:8c:2e:a1:c6:53:93:2e:f6:d9:dc:22:
04:56:88:86:99:06:a5:7c:38:99:57:4a:fd:17:18:
25:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4B:34:03:EF:8A:56:82:09:4C:D8:BB:2C:14:EC:C6:C8:8F:B7:FE
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fEs0A--KVoIJTNi7LBTsxsiPt_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.38.0/24
82.153.99.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e2:5f:27:44:cf:b7:42:2e:fc:bd:85:ee:ba:fd:44:7e:15:
e0:17:06:f8:5d:a2:ab:d6:7f:25:6a:71:0b:00:05:aa:3d:f4:
04:d7:3a:9b:cd:44:97:e2:ed:02:bb:2e:3e:96:8c:28:7f:a5:
49:ac:64:9e:e4:27:4c:91:52:c1:64:51:8e:ee:bd:bf:7e:e7:
99:b7:73:53:8c:a6:90:54:57:4a:6e:6f:1f:9b:38:64:aa:62:
2a:91:97:42:54:08:25:c0:43:80:5e:43:33:e7:b1:24:9d:80:
be:27:cb:a9:4d:54:73:05:31:8d:7c:82:de:6e:41:7b:e1:cb:
99:cc:d3:af:aa:63:14:37:38:1d:cf:d1:79:33:30:59:2a:6f:
b2:80:cd:d3:4c:d3:bf:9a:ef:f6:16:42:fb:c3:7b:5d:ca:c6:
dd:8a:95:f7:0b:19:fd:d7:36:aa:63:83:30:0f:e0:41:f1:46:
f0:ec:99:7e:78:0d:41:3a:eb:54:79:54:d7:02:2b:1a:93:be:
ee:96:a5:70:f9:b0:8c:8d:3f:fe:d4:8c:c7:82:87:85:b8:f5:
49:60:ef:ab:0c:8c:df:70:8d:e3:f9:3b:c5:b3:a1:84:88:6e:
94:0a:fe:c9:df:dd:0d:58:03:fd:61:04:46:35:59:69:64:83:
17:16:15:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:13 2026 by rpki-client