Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pEyHif3vgM1zmJy7SryDrlOZZkM.roa
File: pEyHif3vgM1zmJy7SryDrlOZZkM.roa (raw, json)
Hash identifier: tKzd6MvsIAEqjC1+Py/bA8ZX2oI29HGuGZGy4LQS/og=
Subject key identifier: A4:4C:87:89:FD:EF:80:CD:73:98:9C:BB:4A:BC:83:AE:53:99:66:43
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC86DA6195CCA9879F57640DA8F00CB87
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pEyHif3vgM1zmJy7SryDrlOZZkM.roa
Signing time: Mon 03 Aug 2026 16:20:56 +0000
ROA not before: Mon 03 Aug 2026 16:20:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18186
IP address blocks: 81.168.76.0/24 maxlen: 24
81.168.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:6d:a6:19:5c:ca:98:79:f5:76:40:da:8f:00:cb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 16:20:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a44c8789fdef80cd73989cbb4abc83ae53996643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:f7:50:02:d1:43:6d:c7:30:53:83:1f:2e:
54:d0:f9:dc:dc:87:26:98:ca:6f:ba:1c:c4:52:87:
5d:9f:54:1c:de:0d:71:3e:68:1b:9c:0f:3d:30:ec:
df:59:d2:3c:4a:46:56:e7:13:4a:09:8b:f1:b5:1e:
d6:c8:de:7d:d8:48:a0:40:2b:ba:a7:7a:2b:65:d6:
e9:99:9e:75:37:37:cc:e8:b2:f8:ee:fa:5d:a2:7b:
51:6f:3a:a3:40:da:77:a8:33:db:8f:05:52:d4:09:
15:98:2a:69:7c:90:62:ae:c2:43:6b:c2:0b:cf:ea:
18:e1:6b:8a:d7:07:fe:c8:c4:57:03:05:65:94:a9:
50:2e:26:5a:f9:71:00:cf:42:e8:2b:a7:8e:5d:81:
48:df:35:3a:23:26:e5:e0:ac:9f:8f:b0:eb:fa:83:
b6:6c:21:39:cf:05:12:a1:ee:86:59:f8:be:2d:e4:
a2:a4:09:a4:6a:7d:bc:f7:2e:7e:a2:1a:10:37:e7:
69:74:80:cf:cc:33:d6:ea:be:22:3c:9f:27:30:db:
32:8a:20:e8:7b:fa:b9:16:42:ac:0f:d5:38:48:bc:
3f:05:7f:2e:95:f6:ab:dd:85:33:e9:ac:11:79:70:
4e:3c:d4:8a:9d:4a:bb:3b:22:02:13:b8:d2:97:7f:
8e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4C:87:89:FD:EF:80:CD:73:98:9C:BB:4A:BC:83:AE:53:99:66:43
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pEyHif3vgM1zmJy7SryDrlOZZkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.76.0/24
81.168.79.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:9b:bc:74:2f:5c:d5:82:f8:fb:25:bc:74:37:c5:6a:b5:ca:
c8:1d:ae:3a:08:f6:b7:ba:e0:dd:e0:e8:7e:78:5b:73:fd:33:
4b:ac:cc:fa:3e:fd:cb:8b:55:ca:e0:3d:85:e0:fe:7f:ec:42:
66:cb:80:a0:18:92:1c:c8:57:40:bb:b3:aa:e2:d8:99:1a:e0:
c3:61:c2:bf:a2:a3:ed:a3:b0:93:32:8d:9f:31:47:7a:f4:dd:
cf:5c:72:ac:04:b0:66:58:50:83:a9:48:52:b9:b9:b4:4e:55:
64:38:32:0b:f2:27:79:ef:77:12:70:79:70:3d:76:78:ea:f7:
75:e8:8a:1e:d3:a1:77:e1:a5:8b:9d:99:60:4b:43:41:77:c4:
df:25:f1:3c:3a:1a:cf:18:f4:d8:49:d1:7e:66:5c:4c:15:60:
66:bf:fd:31:26:57:07:32:5d:6d:e7:4f:a2:44:f7:e4:0f:7c:
41:ee:99:e8:46:fc:79:f4:ac:d5:3c:77:a2:a9:6a:35:e1:14:
2c:7c:8c:e6:b1:76:b5:9d:b2:f9:2f:73:b4:34:27:ff:ae:1d:
3f:20:7a:69:4e:4f:4f:f4:c9:00:a3:6c:1e:79:74:c8:3e:69:
ac:54:fd:be:13:2b:0c:8f:ad:b4:bf:bb:cf:46:79:cf:60:91:
b1:95:3a:64
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/IbaYZXMqYefV2QNqPAMuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODAzMTYyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDRjODc4OWZkZWY4MGNkNzM5ODljYmI0YWJjODNhZTUzOTk2NjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8H3UALRQ23HMFODHy5U0Pnc3Icm
mMpvuhzEUoddn1Qc3g1xPmgbnA89MOzfWdI8SkZW5xNKCYvxtR7WyN592EigQCu6
p3orZdbpmZ51NzfM6LL47vpdontRbzqjQNp3qDPbjwVS1AkVmCppfJBirsJDa8IL
z+oY4WuK1wf+yMRXAwVllKlQLiZa+XEAz0LoK6eOXYFI3zU6Iybl4Kyfj7Dr+oO2
bCE5zwUSoe6GWfi+LeSipAmkan289y5+ohoQN+dpdIDPzDPW6r4iPJ8nMNsyiiDo
e/q5FkKsD9U4SLw/BX8ulfar3YUz6awReXBOPNSKnUq7OyICE7jSl3+OHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKRMh4n974DNc5icu0q8g65TmWZDMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvcEV5SGlmM3ZnTTF6bUp5N1NyeURybE9aWmtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUahMAwQA
UahPMA0GCSqGSIb3DQEBCwUAA4IBAQAbm7x0L1zVgvj7Jbx0N8VqtcrIHa46CPa3
uuDd4Oh+eFtz/TNLrMz6Pv3Li1XK4D2F4P5/7EJmy4CgGJIcyFdAu7Oq4tiZGuDD
YcK/oqPto7CTMo2fMUd69N3PXHKsBLBmWFCDqUhSubm0TlVkODIL8id573cScHlw
PXZ46vd16Ioe06F34aWLnZlgS0NBd8TfJfE8OhrPGPTYSdF+ZlxMFWBmv/0xJlcH
Ml1t50+iRPfkD3xB7pnoRvx59KzVPHeiqWo14RQsfIzmsXa1nbL5L3O0NCf/rh0/
IHppTk9P9MkAo2weeXTIPmmsVP2+EysMj620v7vPRnnPYJGxlTpk
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:28 2026 by rpki-client