Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/haUXa96-jM8QFjxygf_ebmRuWc4.roa
File: haUXa96-jM8QFjxygf_ebmRuWc4.roa (raw, json)
Hash identifier: ZPEUXiQXajVFaG2npLquUzZwODUmBkpsRshouGhghpE=
Subject key identifier: 85:A5:17:6B:DE:BE:8C:CF:10:16:3C:72:81:FF:DE:6E:64:6E:59:CE
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC86DA70314391E5D51E143F6284DDA4A
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/haUXa96-jM8QFjxygf_ebmRuWc4.roa
Signing time: Mon 03 Aug 2026 16:20:57 +0000
ROA not before: Mon 03 Aug 2026 16:20:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140224
IP address blocks: 81.168.76.0/24 maxlen: 24
81.168.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:6d:a7:03:14:39:1e:5d:51:e1:43:f6:28:4d:da:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 16:20:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85a5176bdebe8ccf10163c7281ffde6e646e59ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:49:39:e0:a6:63:7e:ef:7b:c0:64:bc:02:
df:22:c9:f1:ed:9e:b4:e2:5e:63:76:7f:ff:30:cf:
9a:e7:8e:4e:f9:e4:c1:c8:11:b7:04:b4:59:3b:67:
10:e5:78:9f:f9:cb:24:47:5c:bb:33:6d:b9:37:f4:
1f:f5:36:78:db:eb:a7:4e:bb:b1:8e:cb:77:e0:42:
41:2d:95:96:69:0b:22:3d:d2:6b:c6:54:00:2e:e9:
ab:05:a2:09:d4:5d:f1:ce:55:db:37:1a:4b:51:6b:
b4:87:42:c6:fd:73:12:16:6a:a0:cd:d1:05:0e:1b:
1b:ad:31:bb:b1:20:cc:d5:bc:b9:b7:c0:5c:18:d0:
ec:0e:06:e0:aa:8d:31:32:1d:b5:83:0d:78:28:59:
51:3c:fb:e8:75:85:c1:af:69:4c:6a:51:db:76:25:
fa:b1:0c:ec:c9:80:d4:da:a1:7f:a8:27:98:0a:8d:
a7:88:f3:2a:9b:33:59:d9:75:d2:99:22:54:3a:1a:
78:05:b3:af:70:ca:ea:d9:af:4a:5b:a8:78:6c:cc:
eb:7b:7f:a7:e4:45:c9:12:e8:34:4d:fd:34:75:f1:
4e:94:57:d3:1b:a9:c5:0f:b1:82:6e:40:ec:c0:96:
3a:ea:45:00:15:d3:02:f2:3b:4d:53:ef:97:21:3f:
84:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A5:17:6B:DE:BE:8C:CF:10:16:3C:72:81:FF:DE:6E:64:6E:59:CE
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/haUXa96-jM8QFjxygf_ebmRuWc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.76.0/24
81.168.79.0/24
Signature Algorithm: sha256WithRSAEncryption
53:82:f4:bc:67:08:9f:1b:6d:e1:af:0c:d8:04:05:8d:83:10:
a2:8c:f9:2a:f3:da:69:1f:dd:8d:75:ff:4d:2f:34:08:c0:8a:
23:cf:a6:b5:d7:b2:66:06:3b:83:54:8b:09:d9:08:bb:06:c5:
c8:d0:e9:85:bd:71:7a:3d:0a:80:94:f7:ef:9b:e2:5b:4e:66:
81:31:56:e6:4a:21:b7:9e:04:62:c7:6d:2a:4b:ae:29:ef:03:
1d:fb:77:a5:49:81:65:8e:4a:6c:43:b2:7e:ae:59:4e:c7:9b:
fe:d2:f0:c3:c4:2d:ce:c2:bb:45:42:89:1a:96:f6:a0:46:4b:
ed:57:41:6c:c3:5a:97:8a:16:94:7f:f6:5c:15:0f:f5:b2:c4:
fe:2f:ce:a2:90:0d:13:c5:22:81:d0:3f:ad:1f:12:60:43:2f:
b7:37:ac:49:f1:c8:26:6d:5b:18:ef:6c:cc:1d:28:67:b5:17:
c8:68:58:69:fc:62:7f:b2:84:98:a9:d6:f3:27:cf:8b:d3:a9:
05:e4:5a:72:f2:eb:0f:4b:94:9e:be:98:f5:c4:3e:1b:3d:d8:
2a:85:ee:ec:7f:06:b3:f5:0f:d6:16:a1:6b:5b:f7:58:70:f3:
fd:24:12:fa:7d:66:9d:35:bf:be:6f:07:c1:ac:89:c0:62:e5:
2c:df:63:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:19 2026 by rpki-client