Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iifPm1bZxeIzcxjICImwm1SF0VE.roa
File: iifPm1bZxeIzcxjICImwm1SF0VE.roa (raw, json)
Hash identifier: Or0TZa+R9vYP65AIfu4EqUy4rFHD7YhrZSkGQ4L3ZTc=
Subject key identifier: 8A:27:CF:9B:56:D9:C5:E2:33:73:18:C8:08:89:B0:9B:54:85:D1:51
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A03DCDBF768E5E16348ECDE85EBF605D4F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iifPm1bZxeIzcxjICImwm1SF0VE.roa
Signing time: Wed 26 Aug 2026 11:21:29 +0000
ROA not before: Wed 26 Aug 2026 11:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 37963
IP address blocks: 81.168.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:cd:bf:76:8e:5e:16:34:8e:cd:e8:5e:bf:60:5d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 26 11:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a27cf9b56d9c5e2337318c80889b09b5485d151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0c:9f:ce:45:39:41:10:fb:9d:35:cd:dc:7c:
d2:47:e4:d1:80:1f:b6:67:63:6d:4f:54:21:aa:04:
69:b6:9f:4f:9c:e8:03:62:8c:0e:15:ca:92:e3:93:
71:01:d4:98:a1:d5:a1:1c:e5:4e:ec:7f:2b:5a:39:
ee:7c:54:aa:77:ff:b7:76:d6:ba:2e:af:d9:6e:7e:
6e:ea:2e:48:e2:09:18:87:3d:e9:be:24:ae:07:69:
fd:0a:69:bf:76:e4:c3:81:64:1e:2d:76:ed:1a:4a:
7c:a1:c8:a7:11:e2:b3:8d:d2:21:7f:f4:2f:4e:bb:
a8:fe:dd:4a:89:17:bf:6f:c1:a4:d4:23:6e:32:26:
17:08:b5:85:f6:9d:27:f5:b9:6f:cc:5d:19:2d:c2:
22:84:ff:2f:d3:83:84:39:ee:b8:d9:40:45:f0:0c:
7b:ba:af:21:7a:72:0c:db:0d:5c:a2:76:97:11:3c:
a9:a1:f8:4e:b3:93:56:ba:f2:27:a4:42:61:fd:25:
97:b4:ad:62:d0:ce:a6:8e:7f:dc:b3:5c:f7:57:40:
c9:24:25:a2:8e:95:6e:7a:00:af:3d:5d:ac:1c:ce:
64:22:33:53:4c:3e:46:f0:69:35:23:c5:d2:79:2f:
5b:47:be:31:4e:2b:f1:c9:7c:17:41:41:99:c4:96:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:27:CF:9B:56:D9:C5:E2:33:73:18:C8:08:89:B0:9B:54:85:D1:51
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iifPm1bZxeIzcxjICImwm1SF0VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.109.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:1a:fb:55:ea:e3:1b:9c:a3:5a:48:76:fe:24:f2:ba:33:35:
e4:ae:1f:bf:77:19:8f:56:b4:52:95:25:75:0d:55:1c:be:6c:
1d:5b:bf:61:e2:cb:77:f5:26:60:a4:0c:cb:c9:23:9d:92:b4:
93:4b:e4:61:43:f9:2b:d1:63:8c:ef:cc:6d:33:e4:9d:6b:79:
b7:84:d6:a4:07:61:d4:8e:e0:9c:ec:93:c3:a1:ab:95:c5:ca:
a0:fb:01:de:ee:b6:c9:86:bf:0f:79:55:64:f4:de:81:b4:da:
1f:47:43:b6:2f:64:a5:cf:51:7a:c0:49:81:ff:15:aa:24:45:
1b:97:ca:67:12:b7:96:db:92:52:f0:f4:6d:32:c8:68:5c:1e:
26:7f:dc:e3:27:3f:f5:a7:10:87:37:86:64:2d:63:85:a7:f3:
aa:45:42:f5:e3:fb:2a:1d:38:fc:b3:01:12:e7:e9:b1:15:1e:
b2:e7:56:68:0f:c6:0d:d8:2c:ae:be:e1:8f:87:af:84:be:b5:
29:5c:b4:ab:0e:77:b5:7d:27:e9:13:67:06:9c:b5:75:42:05:
1f:c0:94:d1:71:de:14:ef:db:7f:a0:b1:e6:2d:18:fe:44:0a:
aa:b4:cc:07:cc:b1:f8:73:00:18:8f:00:b2:d1:58:9e:0a:5f:
20:8d:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:15:25 2026 by rpki-client