Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fbQP1c85OIKrBQm5BYNVdnwxdyE.roa
File: fbQP1c85OIKrBQm5BYNVdnwxdyE.roa (raw, json)
Hash identifier: TfrkE0L+2J2j2S1cKl7P8VyprQiWJzhtMXH1cb0NDXU=
Subject key identifier: 7D:B4:0F:D5:CF:39:38:82:AB:05:09:B9:05:83:55:76:7C:31:77:21
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368DAEFF5DD8ADBFC32654659035330
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fbQP1c85OIKrBQm5BYNVdnwxdyE.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198810
IP address blocks: 81.5.141.0/24 maxlen: 24
82.152.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:da:ef:f5:dd:8a:db:fc:32:65:46:59:03:53:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7db40fd5cf393882ab0509b9058355767c317721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:ef:46:73:56:48:ca:40:f0:ac:1d:c7:e8:
83:2d:12:2d:66:df:0c:f5:7d:bd:ec:7d:6f:54:d1:
a7:6f:6c:ac:24:2c:da:e3:75:89:99:0c:b0:ef:d5:
86:59:5d:53:ff:fa:2f:ce:07:a8:a3:40:7d:af:2e:
af:67:3d:d3:6c:78:61:c8:dd:db:20:c1:66:58:da:
e2:2f:80:ae:4a:e5:b1:42:67:ca:e4:b6:9d:33:63:
16:10:33:70:23:63:9c:ef:74:d2:75:41:2b:fe:a0:
a3:77:92:b2:6f:5b:70:0f:e0:54:f7:06:fc:95:be:
44:2b:ef:96:f5:03:70:c8:49:52:09:27:ca:5f:4e:
e8:89:89:56:84:7e:d2:19:1e:11:78:ee:b6:95:19:
29:3a:d6:d6:8c:1d:f4:74:9c:70:36:9c:f7:57:bd:
e8:1f:c5:0d:1c:e7:a2:84:c2:99:63:09:b0:c9:0c:
52:fa:9f:1d:a1:82:66:0e:17:0c:a8:28:e8:74:21:
d4:3f:9b:7e:a2:81:17:1a:84:4d:27:64:27:4e:21:
3f:59:80:25:87:a9:eb:4e:87:78:c0:9f:ef:dc:48:
0c:ed:13:d9:a6:6d:53:21:d6:26:7a:02:55:ac:bd:
41:bf:6f:21:ab:97:3a:0e:fa:2f:ba:d9:1c:dd:89:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B4:0F:D5:CF:39:38:82:AB:05:09:B9:05:83:55:76:7C:31:77:21
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fbQP1c85OIKrBQm5BYNVdnwxdyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.141.0/24
82.152.222.0/24
Signature Algorithm: sha256WithRSAEncryption
77:64:ca:69:37:4b:6f:6a:82:3e:14:8d:c4:e6:41:ca:de:3a:
94:77:47:54:a7:cf:c6:f3:e8:4b:02:c4:b7:f5:f1:8d:3f:7a:
71:d4:cf:3d:f9:f8:a9:22:33:52:39:12:ee:5f:4b:50:86:01:
e0:62:74:1b:2d:03:4f:66:20:65:31:03:63:d8:dd:80:4a:6e:
16:ef:82:ff:af:c8:12:4b:76:29:f3:1b:53:8b:c0:8f:54:2d:
a2:91:fa:65:99:b4:b5:cf:02:c8:40:97:f2:e3:43:01:ef:77:
32:94:cd:bd:22:cb:43:68:7f:fe:b8:8f:71:11:62:f8:98:c0:
6b:48:0f:97:65:20:55:f8:28:b5:cc:e3:2c:e4:d6:72:a8:d6:
a1:2c:b4:87:96:83:44:09:65:70:64:e2:87:12:bd:32:40:d4:
a8:d7:f2:a1:c7:dd:89:76:df:4f:7d:62:b7:2c:19:f1:fb:67:
33:d3:47:4b:ff:c8:72:a8:e9:d9:2d:7d:51:c0:6d:c1:0a:32:
86:4b:81:4e:50:57:e0:89:ff:a1:9b:10:33:d5:ad:15:76:b2:
98:cc:56:a5:ee:ba:56:9b:50:54:35:22:77:20:aa:72:39:cd:
32:b2:e4:63:3b:c1:74:c6:1f:a7:cc:a4:ca:c4:e8:4f:cc:ce:
4b:72:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:38 2026 by rpki-client