Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nAEo85raH9ULd6cZlglRV5cH4r0.roa
File: nAEo85raH9ULd6cZlglRV5cH4r0.roa (raw, json)
Hash identifier: n7c2UCQ+KSgzOFwEwJ2WSp6UezIku3NMsGqXlzwTG3Q=
Subject key identifier: 9C:01:28:F3:9A:DA:1F:D5:0B:77:A7:19:96:09:51:57:97:07:E2:BD
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F84230585F20F930381D9647C793919A0
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nAEo85raH9ULd6cZlglRV5cH4r0.roa
Signing time: Tue 21 Jul 2026 10:05:15 +0000
ROA not before: Tue 21 Jul 2026 10:05:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142495
IP address blocks: 81.168.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:23:05:85:f2:0f:93:03:81:d9:64:7c:79:39:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 21 10:05:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c0128f39ada1fd50b77a719960951579707e2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:53:c0:06:27:23:a8:57:d7:3f:37:74:bd:
83:76:37:cd:d9:b3:8b:bc:a8:20:a0:c8:fb:3b:4f:
3c:af:56:b6:d9:fc:df:ce:dc:70:99:d1:23:83:51:
06:30:bc:1b:f0:b3:24:cd:eb:55:e9:1e:75:8c:57:
36:c1:9f:f1:03:c7:68:de:6a:15:71:e2:8b:21:55:
ff:b3:bb:0f:41:00:1f:87:d3:f6:d5:c9:30:86:ba:
12:cc:24:01:0c:6d:a7:6b:59:4f:19:60:9d:fa:b8:
08:0e:20:41:87:4f:5f:22:96:d3:8b:90:a4:62:a3:
80:81:a9:52:0d:a9:6a:f0:ca:43:e6:5c:58:52:f5:
fb:ba:bd:90:2c:7b:0e:28:bc:97:96:94:4c:0c:2e:
53:ec:ea:b4:aa:fa:25:be:ed:cb:ec:83:da:be:45:
34:b8:4e:38:d0:55:e2:2c:db:35:56:c3:b7:cf:8c:
45:5d:0c:ff:c6:16:1a:a7:4b:d1:ac:f4:21:40:26:
f7:26:42:76:46:83:e9:06:c4:f7:09:18:83:62:1d:
d4:04:cd:31:61:25:1e:37:c8:12:74:d9:5a:2c:db:
e3:db:19:e2:b0:8d:b9:a8:09:49:3a:82:72:1c:f6:
f0:4d:d8:e7:1b:f0:3e:1c:75:50:61:d5:a5:38:d2:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:01:28:F3:9A:DA:1F:D5:0B:77:A7:19:96:09:51:57:97:07:E2:BD
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nAEo85raH9ULd6cZlglRV5cH4r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b2:95:3d:f2:7c:5a:ad:57:39:56:4c:83:bd:a0:b5:d9:79:
b4:58:bc:c1:34:7c:6b:2a:b8:63:b4:d8:54:2f:b7:f6:14:72:
be:ba:3f:65:80:77:f6:3e:7b:b6:f2:6c:9c:e0:f2:d0:6c:c1:
51:24:84:19:77:a2:10:af:4f:a2:45:52:9b:67:04:b4:d7:79:
e4:b4:3d:d5:cd:d7:51:16:9a:0b:30:19:4e:c0:df:5c:22:29:
01:a4:17:82:d0:e0:75:c9:7e:9b:19:a6:9b:32:27:24:2a:95:
fb:6a:be:b0:2e:87:7a:f1:cc:97:e7:d6:7f:73:a4:23:66:04:
fb:ca:7e:c3:30:fc:8c:b6:88:66:f7:18:eb:59:e8:3f:a1:92:
6b:f8:19:f8:85:a1:1d:33:cf:da:9c:89:4f:fe:ad:c2:15:17:
1e:be:bb:7b:92:ef:b5:7f:a7:80:02:a7:b1:b1:36:4b:a7:43:
8a:9f:73:7a:84:46:79:e9:e2:82:1f:6b:14:75:48:d9:b4:a1:
54:83:46:8f:a5:a5:a4:c4:7a:ac:75:04:90:d3:80:f6:8d:aa:
e3:5d:b8:1d:69:39:ea:4f:61:eb:1b:92:a8:db:eb:82:d1:5a:
44:84:79:ad:cc:00:87:4b:fd:0b:19:39:1c:79:91:fa:57:b5:
6b:5b:10:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:32 2026 by rpki-client