Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gSx7SlB1kYmooXDhEKcLVaA5JFU.roa
File: gSx7SlB1kYmooXDhEKcLVaA5JFU.roa (raw, json)
Hash identifier: 4UKS9hGoC7jJHfIRnWbKE1Uadmrp7LEflJMVxmQOIEI=
Subject key identifier: 81:2C:7B:4A:50:75:91:89:A8:A1:70:E1:10:A7:0B:55:A0:39:24:55
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FEFAF562616D730C71851D8DBCD55CA91
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gSx7SlB1kYmooXDhEKcLVaA5JFU.roa
Signing time: Tue 11 Aug 2026 07:17:52 +0000
ROA not before: Tue 11 Aug 2026 07:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210476
IP address blocks: 81.168.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:af:56:26:16:d7:30:c7:18:51:d8:db:cd:55:ca:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 11 07:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=812c7b4a50759189a8a170e110a70b55a0392455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:fb:45:7c:d8:85:bb:5c:ca:c0:f9:4d:89:
80:49:42:5d:6c:22:c2:3c:20:08:4b:b8:99:88:8c:
4a:2e:5d:27:a1:c2:c5:e8:2b:b7:39:d3:fb:5c:f7:
53:3b:15:02:5f:bf:c0:98:33:a0:34:f0:2a:6c:f0:
33:cf:71:41:76:e7:da:88:f7:99:8f:bd:20:a0:4d:
14:f5:08:58:17:bd:db:97:d5:4e:4e:79:df:60:c3:
6a:e9:df:85:5e:0d:d4:93:a1:52:06:27:5a:7b:67:
be:65:96:44:c6:b4:ac:55:9f:e0:55:5c:90:18:d7:
4d:c7:31:d1:e7:4e:90:ba:1d:28:63:56:27:b4:6a:
d4:f8:3b:d4:15:4d:39:00:f9:7a:d8:9f:e1:1d:e2:
e7:fa:57:8b:7d:40:3a:bc:58:81:20:84:38:43:8a:
90:1b:0c:dd:b7:62:a8:94:24:c8:b3:98:09:74:ce:
0e:e2:75:3e:ed:0f:4d:10:57:29:b3:bb:ea:d5:22:
db:04:5d:52:8b:52:14:1c:91:76:88:5f:cf:27:e9:
8e:f4:7f:85:cd:a1:92:ff:b9:63:94:2c:0b:8a:7f:
40:55:9e:21:e6:18:00:17:7c:3d:80:97:ae:06:5b:
64:94:e4:e7:d4:0f:8b:de:08:d5:84:f9:7d:04:50:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2C:7B:4A:50:75:91:89:A8:A1:70:E1:10:A7:0B:55:A0:39:24:55
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gSx7SlB1kYmooXDhEKcLVaA5JFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f4:a2:8e:47:f8:93:18:cc:4a:e6:1b:41:27:5e:2b:31:4e:
ee:6a:36:3d:4a:c5:3e:fb:29:71:f4:fb:3e:4a:cc:37:c6:b8:
89:15:02:ce:e3:9b:6e:59:7a:df:7c:d8:95:f7:f1:f7:5d:8d:
e8:da:56:0f:d2:a9:7b:f7:3a:4c:e3:cc:c5:c9:22:97:08:ec:
9a:5f:76:83:b9:cf:69:6e:ef:57:c0:a4:a0:65:90:8e:ce:37:
38:97:f7:1d:dd:76:6a:20:3d:e5:7d:61:35:08:da:5f:25:0e:
e1:30:c6:c8:8a:bb:b8:b7:93:cf:9d:c6:00:8b:05:d5:c9:b0:
5f:fa:92:e1:b0:5c:53:5b:4f:fe:40:a7:a3:6e:fb:28:02:a0:
a9:a5:fc:e1:ec:49:b7:15:b2:35:23:c1:2f:a6:4b:ae:ef:2c:
17:52:57:d8:b9:43:db:6f:43:94:d8:9c:8d:86:92:54:33:d4:
98:f2:e9:d9:63:6e:df:09:e8:d3:fe:55:96:c8:36:43:aa:5e:
83:e7:b6:7e:5f:31:67:24:09:5b:a8:35:dc:9b:a1:8d:fc:1f:
ff:36:4a:e0:02:db:c2:3a:29:c1:81:9a:8b:fd:93:c0:51:40:
fb:b1:b3:12:aa:fb:08:86:41:63:ad:25:43:a1:6a:97:b6:98:
90:5e:fe:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:03 2026 by rpki-client