Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lwwTIFj6Mxu2dwkc7cd4VZLVGJU.roa
File: lwwTIFj6Mxu2dwkc7cd4VZLVGJU.roa (raw, json)
Hash identifier: kOq/YmiD41od5kKcYm5psmRd1XZ0gk1YtPVIXp5jj8g=
Subject key identifier: 97:0C:13:20:58:FA:33:1B:B6:77:09:1C:ED:C7:78:55:92:D5:18:95
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC7406E336728826D14C07959FA0BCC6B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lwwTIFj6Mxu2dwkc7cd4VZLVGJU.roa
Signing time: Mon 03 Aug 2026 10:51:56 +0000
ROA not before: Mon 03 Aug 2026 10:51:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142401
IP address blocks: 81.5.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:40:6e:33:67:28:82:6d:14:c0:79:59:fa:0b:cc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 10:51:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=970c132058fa331bb677091cedc7785592d51895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:52:be:89:30:0f:b2:2c:81:0e:01:7f:46:
42:47:1a:54:dc:b9:00:f7:25:9e:bd:27:f8:72:3e:
f0:34:7f:79:e8:ad:ac:68:ce:9d:bb:c4:8c:4d:d2:
d2:a7:26:71:70:ff:87:17:ad:3e:2c:a8:5d:4f:12:
d4:b6:e7:c0:15:10:62:b8:8f:31:59:0c:73:91:ec:
77:29:45:28:14:67:53:5d:4b:2c:4a:6c:9d:65:79:
c7:eb:08:19:7c:15:c6:32:e0:da:52:d3:cb:80:97:
b4:2e:20:64:7b:6d:d2:1f:8b:05:69:08:56:44:82:
4e:1a:88:a3:a0:3a:5d:4c:b7:4a:f0:13:69:2c:e6:
f8:0b:6a:f2:9f:b4:56:43:96:d2:31:6f:80:fd:c6:
ef:7f:ad:f8:b9:cb:bf:6f:80:1f:e8:ad:36:8c:05:
fd:d3:42:4f:b0:d0:03:f8:60:b4:5b:5c:14:af:a5:
4e:53:9e:a3:5f:c8:25:ab:a4:39:5a:c4:f9:17:5f:
5a:49:96:54:56:4e:40:5d:73:db:a4:16:8c:44:ee:
b5:7e:4a:75:2d:ec:83:a1:82:40:01:05:25:29:6f:
ac:6e:72:cf:87:fc:48:f0:b8:9c:0b:bf:f3:d7:18:
2b:25:5f:19:58:a0:0e:ca:a2:1e:72:16:0e:d7:50:
d3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0C:13:20:58:FA:33:1B:B6:77:09:1C:ED:C7:78:55:92:D5:18:95
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lwwTIFj6Mxu2dwkc7cd4VZLVGJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.183.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:8a:3c:ca:e9:a1:7f:78:f5:84:dd:86:1d:24:5f:f7:5e:c2:
a2:b9:a0:2c:a0:58:5c:a4:d3:a5:78:eb:64:4a:7e:a9:c3:95:
bd:c2:a1:28:89:c9:05:e5:72:17:03:8e:dc:3f:12:b6:51:1d:
7d:0e:a1:b9:6c:b9:c8:65:c4:21:78:60:71:fd:b1:4a:c9:db:
6b:10:5f:a9:bd:44:1f:8d:39:72:93:ad:ff:b3:11:2c:7d:c0:
2f:47:51:d5:13:7e:89:55:7e:f3:e4:7c:40:8e:24:4d:06:01:
2a:3a:36:b2:b9:e7:6c:94:75:bf:d9:68:87:31:19:b1:44:35:
80:15:86:af:5b:e5:7c:c2:8b:0f:13:52:42:f4:ae:95:fa:88:
d5:bb:03:dc:69:c4:2f:1c:a7:0d:0b:b9:a0:22:e7:69:f8:97:
b3:01:9f:03:8b:2a:78:77:4c:55:23:cb:1a:d9:ee:c0:d3:5a:
16:80:6f:57:2a:0f:7a:d7:af:e9:0d:78:1c:e0:cf:af:a9:37:
27:94:b3:6b:18:87:e4:ce:62:f4:e9:81:69:23:2c:47:3e:bb:
56:31:e2:6d:4a:28:34:bf:d3:5b:f6:4a:4e:f7:01:a3:e4:fe:
c6:9b:19:05:01:3d:95:4d:53:93:e8:9d:a8:d4:2f:ce:ec:69:
b9:12:2d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:13 2026 by rpki-client