Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iB987oTbvolsN-Vm9JmIbQ_ULrc.roa
File: iB987oTbvolsN-Vm9JmIbQ_ULrc.roa (raw, json)
Hash identifier: aSigVg093NLkPpS22b5XWF0xxR6dYIPCsSZ6yxV2QmM=
Subject key identifier: 88:1F:7C:EE:84:DB:BE:89:6C:37:E5:66:F4:99:88:6D:0F:D4:2E:B7
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A019E05A3A965D735B9CB75BFA5ACC2527
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iB987oTbvolsN-Vm9JmIbQ_ULrc.roa
Signing time: Wed 19 Aug 2026 11:55:28 +0000
ROA not before: Wed 19 Aug 2026 11:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 81.168.96.0/24 maxlen: 24
82.152.118.0/24 maxlen: 24
82.152.122.0/24 maxlen: 24
82.152.219.0/24 maxlen: 24
82.153.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:e0:5a:3a:96:5d:73:5b:9c:b7:5b:fa:5a:cc:25:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 19 11:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=881f7cee84dbbe896c37e566f499886d0fd42eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:80:60:8a:b2:54:be:dd:e9:f6:14:fa:6f:97:
d0:20:8e:3d:3a:3f:bf:d1:c6:ef:ea:1e:53:aa:fb:
5a:56:ce:c6:66:e1:20:25:a9:f9:6e:78:21:e2:85:
4c:d7:8e:1f:af:3e:dc:06:02:1a:54:d6:2f:cb:11:
c0:d5:ce:55:2f:3f:4d:00:d6:0b:a0:9c:c4:20:5d:
8b:da:15:c0:74:55:46:ad:d7:ec:55:78:7c:9f:38:
62:8f:ae:cb:9c:04:8d:28:c2:ea:bc:fa:19:80:b9:
fc:f8:6e:53:71:c3:f4:0a:3d:39:92:db:9b:79:61:
11:2c:82:a9:5f:31:2e:8b:2e:b9:34:4a:e9:30:9e:
f8:8d:f7:8a:46:00:0e:d2:e9:02:fb:c5:89:72:b4:
e4:cb:0a:e5:40:8d:fd:01:e2:a7:51:f0:77:e9:d3:
06:cb:49:a5:b5:ab:fe:38:a3:f3:e8:29:58:77:c8:
f3:41:7d:c6:ef:83:2a:15:bd:41:d6:48:ba:42:0a:
53:6e:f2:29:3c:ed:fd:fa:99:f1:74:84:04:85:a3:
c5:6e:ec:6c:b6:8c:8e:51:02:b1:6b:79:28:0b:63:
dc:30:bd:03:65:80:2f:04:fa:ce:60:14:cf:18:04:
f9:fc:b3:92:06:ad:e4:5e:b9:9f:d5:34:b1:54:f6:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1F:7C:EE:84:DB:BE:89:6C:37:E5:66:F4:99:88:6D:0F:D4:2E:B7
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iB987oTbvolsN-Vm9JmIbQ_ULrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.96.0/24
82.152.118.0/24
82.152.122.0/24
82.152.219.0/24
82.153.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ca:1d:1b:c7:1f:22:f3:7f:ba:ca:47:49:4e:ec:e2:b9:c8:
8e:55:92:1f:6f:8f:15:e5:02:db:f8:e6:e1:6f:08:9e:96:60:
58:b2:d7:04:2e:21:8b:48:7b:41:73:97:16:29:0f:60:0a:d4:
85:54:e7:f7:e7:ba:09:35:54:6c:40:5f:f5:73:1c:24:05:fb:
f2:57:e0:fe:db:63:48:10:6a:ea:86:f7:b0:2f:b7:b3:c2:a0:
00:1b:7b:2b:47:7d:a6:c2:df:e9:ed:ab:4f:9b:81:19:5e:3b:
1b:30:8f:91:e1:1b:6d:f5:f0:ab:e0:b8:34:cc:0c:b9:6b:e3:
83:90:86:20:a2:04:7f:6c:db:7e:98:cf:3b:3b:f2:99:fa:7e:
bc:c2:fa:7d:b2:6d:df:25:29:62:43:b4:09:39:eb:d6:43:4a:
42:e9:d3:5a:a4:bd:e0:52:94:3d:ee:11:76:3d:89:10:89:fd:
87:66:bd:50:3b:18:b3:0c:17:79:ab:c1:73:fd:5a:12:60:4c:
b4:b3:2a:ee:6c:da:5e:08:44:93:e7:59:f4:f2:59:de:82:fe:
01:68:bf:e0:c5:ee:18:06:61:2b:5f:a0:9d:02:8b:9b:e0:16:
f7:43:c9:49:62:3d:5c:4d:ba:d8:b6:14:5c:c0:e9:2c:9c:76:
cd:06:70:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:05:59 2026 by rpki-client