Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pEvWzisfLFPeDO3IaMP8XpzXKKs.roa
File: pEvWzisfLFPeDO3IaMP8XpzXKKs.roa (raw, json)
Hash identifier: LgKK2iS4S1sxQGJUpS5/K9K3ddLWFbr7SBn+geUqubM=
Subject key identifier: A4:4B:D6:CE:2B:1F:2C:53:DE:0C:ED:C8:68:C3:FC:5E:9C:D7:28:AB
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FCBADDC99ACE46C0EEFC9CCCBD4E26A89
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pEvWzisfLFPeDO3IaMP8XpzXKKs.roa
Signing time: Tue 04 Aug 2026 07:29:56 +0000
ROA not before: Tue 04 Aug 2026 07:29:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212895
IP address blocks: 81.168.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:ad:dc:99:ac:e4:6c:0e:ef:c9:cc:cb:d4:e2:6a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 4 07:29:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a44bd6ce2b1f2c53de0cedc868c3fc5e9cd728ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:9a:c2:63:7a:bb:9a:14:b6:2e:bd:ba:83:
d0:df:6a:28:8b:7b:2b:91:3b:d7:f4:f5:0e:2c:df:
61:60:f4:6a:89:01:b7:66:86:aa:6e:cc:a1:c9:6b:
9a:b5:3d:43:c7:a4:98:b8:73:a2:73:05:aa:b5:fd:
36:4d:90:83:c6:53:eb:45:a3:95:db:1a:09:f9:9d:
35:3d:79:3e:41:27:7b:74:a8:2e:d2:89:df:10:8f:
b3:ad:1c:ae:7b:ee:0d:79:50:49:29:a1:c9:17:fe:
55:74:84:62:45:a9:3f:9f:26:4d:0e:5b:87:42:bf:
4b:97:6a:83:67:72:69:17:27:bc:83:c4:22:f1:f4:
56:25:df:1f:9d:61:48:98:0c:1a:61:82:63:1d:0a:
41:dd:56:a9:55:6a:6c:57:0a:b9:d0:a3:c8:4c:30:
3b:8c:d5:f8:22:1e:ec:66:8e:7c:97:3e:0c:66:62:
af:72:70:ac:90:84:e3:cd:68:33:d5:a6:f0:46:c4:
70:d1:e4:9c:81:e2:49:da:86:bb:57:46:d1:53:4b:
9d:b6:6d:43:3e:8a:dc:0d:ae:0f:bc:5b:b0:f9:9f:
64:22:38:20:96:4c:43:1d:ec:ad:91:8d:b8:e7:3c:
9a:ad:50:9b:70:1f:1b:b7:a9:93:ce:78:a5:c7:12:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4B:D6:CE:2B:1F:2C:53:DE:0C:ED:C8:68:C3:FC:5E:9C:D7:28:AB
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pEvWzisfLFPeDO3IaMP8XpzXKKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.111.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d2:fc:92:7b:95:92:68:8d:e3:8c:af:48:c1:31:ea:eb:2c:
b4:c1:20:b1:05:fb:01:25:da:3a:ae:90:3e:a6:f6:c7:a9:a4:
07:e8:d4:f5:8c:5b:be:0c:59:26:1b:2b:df:d9:94:9b:92:66:
4a:b1:4b:9d:0a:ce:49:ea:d7:7b:e1:b3:f2:b9:12:ab:59:f4:
94:06:e0:df:fc:94:1c:df:db:51:53:33:08:dc:bd:b4:40:4d:
0a:20:fd:bb:06:62:2f:f3:5d:9e:e8:41:12:ab:b6:dd:f0:2e:
de:c2:1c:d5:d7:0b:1d:c3:f5:72:93:fb:ce:38:80:e7:d4:c1:
2f:a7:3d:bd:1e:78:fd:42:5a:72:d9:44:df:df:09:34:eb:11:
94:b8:8e:89:9c:db:02:4d:d8:bf:01:d8:69:d0:b8:04:61:69:
be:45:93:84:d9:c1:a7:26:39:33:4b:46:c7:dd:c2:a0:12:5f:
29:57:80:96:ab:18:c5:e4:b6:6b:a2:7a:b5:d7:55:a3:94:c7:
4f:74:db:f1:0f:30:8d:1e:e4:64:e4:e1:2e:4f:54:4e:95:3e:
60:57:ba:ad:34:2d:a9:90:09:c1:40:a6:8b:02:3f:83:4a:12:
81:82:ed:8e:1d:55:dd:38:07:c3:4f:9c:ea:72:b4:47:a7:ef:
fd:05:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:27 2026 by rpki-client