Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mGB9TM9_u4TyP1Vdkc70bKspRik.roa
File: mGB9TM9_u4TyP1Vdkc70bKspRik.roa (raw, json)
Hash identifier: yRsGhA40KP7X8fShQupXuTORsQuhmO1x3yNvXNhVmT0=
Subject key identifier: 98:60:7D:4C:CF:7F:BB:84:F2:3F:55:5D:91:CE:F4:6C:AB:29:46:29
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368D7F539B025B68A5FB8F078B90B92
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mGB9TM9_u4TyP1Vdkc70bKspRik.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197246
IP address blocks: 81.168.125.0/24 maxlen: 24
82.153.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d7:f5:39:b0:25:b6:8a:5f:b8:f0:78:b9:0b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98607d4ccf7fbb84f23f555d91cef46cab294629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:19:32:3b:13:1d:a3:2f:6b:9b:52:4e:99:
65:6f:5d:d7:ab:ab:f9:66:2e:ed:e0:09:a7:05:a6:
7f:65:c5:5e:89:31:d0:ba:d4:eb:64:1b:ea:f1:a5:
6d:fb:da:c9:9d:09:b7:f8:5d:08:ef:bd:05:a5:0f:
f7:03:25:91:a0:11:89:31:3b:14:a6:1c:a7:98:69:
ee:a3:83:d1:6f:b5:08:67:3a:dc:ff:36:2e:61:0c:
96:80:10:75:72:9e:b4:f8:c2:29:73:ed:57:03:ff:
8b:4f:2d:07:c8:ed:92:66:23:44:70:2b:d5:1a:72:
72:ff:0b:82:da:76:0f:36:41:a4:c9:b9:fb:79:21:
f1:fb:d6:19:3c:7a:c7:49:fc:01:46:b1:6d:c2:31:
cc:cf:28:49:a6:b4:8f:ba:1c:21:c5:d2:ee:b6:b3:
2f:c2:f7:f5:15:0e:30:72:98:bb:82:df:8b:73:cb:
9e:7d:ba:4e:d9:fd:f0:4d:9d:95:43:fe:0c:5b:cf:
bf:f2:bd:87:23:b7:52:98:f9:3f:c5:d4:b2:4e:2f:
aa:60:23:02:da:79:2a:42:90:46:20:f2:0c:98:94:
a5:95:9a:d1:8d:8e:c4:4c:84:57:81:dc:75:62:e3:
4a:a2:fb:23:40:81:21:67:69:75:9b:e9:47:d9:1c:
fc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:60:7D:4C:CF:7F:BB:84:F2:3F:55:5D:91:CE:F4:6C:AB:29:46:29
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mGB9TM9_u4TyP1Vdkc70bKspRik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.125.0/24
82.153.49.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ba:b9:90:fa:fb:87:c7:65:be:b1:18:5a:a5:22:58:d3:db:
1a:d5:ff:a2:e7:8b:8f:5c:05:a6:58:d4:09:7e:36:ed:75:4f:
1d:c0:d0:13:76:39:64:d4:b3:f9:dd:7d:29:4b:25:ee:ed:20:
cb:e9:cb:b1:17:e3:eb:d1:06:8d:99:16:d6:66:4d:7e:b0:51:
95:42:97:43:a6:d0:c2:f9:13:61:db:3e:07:ab:25:a9:1c:18:
10:cc:1c:65:63:47:29:18:59:a5:7d:37:24:fd:74:06:cd:e2:
82:84:a2:f6:0f:c3:8f:a9:fa:71:bb:c7:3e:23:28:9e:95:eb:
f4:53:4c:9f:f7:d0:9a:57:a6:44:33:30:f5:56:8a:39:a8:da:
ad:d3:e6:fe:33:9c:18:04:78:cb:e3:40:49:3d:6f:92:15:f9:
74:ae:32:12:97:b5:e3:2d:57:c2:f0:5e:fb:3f:e2:f5:37:5d:
a2:56:fb:9a:06:11:03:17:d4:44:fd:ee:cd:dc:1c:a7:6b:23:
d6:d1:4b:7c:5a:b5:3f:69:91:7d:2a:05:db:3e:52:31:6d:2e:
f5:a8:6d:27:01:5a:c5:7a:2b:e3:c9:1b:44:27:f4:0c:66:33:
a7:00:c2:5b:94:a0:4d:e8:16:10:4c:c1:c2:a5:be:9c:21:7c:
86:ec:b3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:37 2026 by rpki-client