Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fiw8mD8dn697qFsrhWZrh8ZTl2E.roa
File: fiw8mD8dn697qFsrhWZrh8ZTl2E.roa (raw, json)
Hash identifier: 7WEaPLztHdM0bXRtkGI3nZqVWa2++o/tbDMXsN9IXZ8=
Subject key identifier: 7E:2C:3C:98:3F:1D:9F:AF:7B:A8:5B:2B:85:66:6B:87:C6:53:97:61
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC7406E946C4BA9904EE1D88A6665DB51
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fiw8mD8dn697qFsrhWZrh8ZTl2E.roa
Signing time: Mon 03 Aug 2026 10:51:56 +0000
ROA not before: Mon 03 Aug 2026 10:51:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207267
IP address blocks: 81.168.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:40:6e:94:6c:4b:a9:90:4e:e1:d8:8a:66:65:db:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 10:51:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e2c3c983f1d9faf7ba85b2b85666b87c6539761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f9:0d:68:4c:76:f9:06:1c:70:ba:ed:ff:a5:
90:07:11:e6:e2:90:76:4d:46:f6:5c:b6:17:c1:45:
4b:0e:ca:8a:1b:e5:6e:43:a8:62:b0:c3:9c:b0:fe:
1b:3d:83:a3:2a:c2:fa:ba:c5:b5:8d:ca:59:b1:4b:
27:00:90:d5:bc:4f:1e:0e:62:a5:3b:43:9d:17:cb:
84:7d:ab:90:8e:7e:51:c2:0e:bf:ad:3a:40:4f:3c:
34:fc:80:1f:aa:86:03:44:f2:e7:72:ad:db:8b:73:
af:b1:19:c5:6f:db:9f:80:d8:b8:20:f6:64:17:85:
80:a8:f1:52:c3:41:7b:fd:97:05:b9:50:cb:8b:67:
d6:b2:98:a6:2c:c2:e7:90:64:09:11:75:57:79:ad:
0a:37:26:4c:d2:8b:67:fb:fc:d0:17:fc:c7:fd:22:
17:eb:03:38:94:3e:66:24:cc:e1:54:24:45:31:67:
3d:4a:b8:ff:ed:e8:f5:65:57:ac:91:45:7f:12:57:
fb:ad:64:74:f6:54:fd:a9:b7:9f:36:8f:eb:1b:61:
46:48:5c:aa:97:83:79:ea:a9:bd:72:6a:2f:15:d6:
81:dc:6f:61:ce:04:7e:67:81:7f:fc:71:73:61:71:
89:ed:3e:84:1a:44:37:b1:cc:90:31:80:cf:92:6d:
ad:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2C:3C:98:3F:1D:9F:AF:7B:A8:5B:2B:85:66:6B:87:C6:53:97:61
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fiw8mD8dn697qFsrhWZrh8ZTl2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.70.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4d:93:45:36:c0:b0:03:13:2a:7d:be:1f:f5:19:f6:d1:57:
59:fa:7c:28:d4:75:49:44:15:93:8c:ea:6d:1f:52:84:80:ea:
c6:de:78:dc:a2:b0:f2:e6:b1:9b:54:1b:57:3a:3d:be:7c:89:
a6:49:86:89:9d:f1:11:f3:2c:f4:38:63:70:e0:5d:69:ac:3f:
20:2b:88:6d:d5:3f:38:aa:62:32:18:fb:60:13:09:4d:03:77:
af:e8:40:a6:92:51:92:14:9f:98:98:ce:83:62:9e:e3:60:36:
85:2e:b3:d0:15:88:96:38:5b:76:f5:34:04:03:19:fc:d5:31:
6c:eb:62:61:11:24:ca:65:c0:82:89:d0:59:5f:45:af:c1:ea:
41:1a:dc:6c:9a:a7:a0:68:12:09:86:41:1c:b1:e7:50:c6:54:
8b:4b:b7:13:fa:d4:23:ae:ed:ad:52:3f:60:cb:58:c9:f9:7d:
5a:9d:7e:cb:30:95:22:c8:9d:fc:21:3e:00:14:9f:56:32:e2:
61:dc:d9:c9:37:56:5a:46:d6:be:5e:03:ef:15:84:38:c1:9d:
37:d0:08:8a:34:d6:a6:da:43:95:3e:c5:91:78:17:27:e3:69:
d1:f4:27:43:48:72:d6:a2:72:85:ee:85:12:fe:4e:c5:ba:70:
1c:20:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:18 2026 by rpki-client