Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pfEdWQMH5bmhM2XzvwTI9VZ15V4.roa
File: pfEdWQMH5bmhM2XzvwTI9VZ15V4.roa (raw, json)
Hash identifier: ggULXmNTeIu3q2gNkOYao5li7HXqeYuZXho4IjUCMUs=
Subject key identifier: A5:F1:1D:59:03:07:E5:B9:A1:33:65:F3:BF:04:C8:F5:56:75:E5:5E
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FB1F02C6350986C18AA06DE56239C6516
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pfEdWQMH5bmhM2XzvwTI9VZ15V4.roa
Signing time: Thu 30 Jul 2026 07:32:14 +0000
ROA not before: Thu 30 Jul 2026 07:32:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 81.5.156.0/24 maxlen: 24
81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.140.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
82.153.249.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 21:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:f0:2c:63:50:98:6c:18:aa:06:de:56:23:9c:65:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 30 07:32:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5f11d590307e5b9a13365f3bf04c8f55675e55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:e8:57:5d:80:66:ec:bc:ce:ea:2c:4e:91:
f9:56:60:10:1e:61:5b:18:6f:69:58:9f:91:dd:78:
fe:27:40:65:e6:e5:38:4a:f7:28:a8:a5:c6:08:4d:
70:f2:0a:67:02:c8:14:1e:a8:e1:af:cc:13:10:76:
65:5e:22:16:d2:4e:62:e2:2a:02:19:e9:44:5f:bb:
ed:d6:aa:f5:73:62:fa:e2:13:f7:fb:d7:69:89:4f:
2c:de:ca:6a:1b:20:d5:99:1b:f0:01:af:38:15:2b:
73:ad:e8:d9:26:a1:83:61:31:f9:43:f7:34:a4:01:
94:96:b6:c7:4a:96:4b:1b:43:9e:59:64:a5:d0:ea:
17:7b:8b:32:9f:55:d3:6f:9c:0f:7f:6c:87:e7:15:
a8:8e:03:17:e5:df:39:94:cf:a1:d3:3e:e0:b2:85:
d2:3b:e2:14:de:77:fb:d5:37:6b:0a:ae:68:b1:43:
96:f7:b2:8e:8f:3f:89:97:b4:e9:39:24:4c:e4:dd:
ff:f3:b5:0e:46:38:10:06:d7:d4:74:57:6f:8b:50:
d0:ed:2a:74:b8:6d:55:37:c3:b8:52:d3:6a:18:56:
53:6c:02:d1:96:23:fc:48:af:bd:59:7f:27:86:7b:
be:66:49:e6:69:33:1f:5f:f7:cb:81:13:80:62:a2:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F1:1D:59:03:07:E5:B9:A1:33:65:F3:BF:04:C8:F5:56:75:E5:5E
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pfEdWQMH5bmhM2XzvwTI9VZ15V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
82.153.137.0/24
82.153.139.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.240.0/24
82.153.249.0-82.153.250.255
Signature Algorithm: sha256WithRSAEncryption
6c:49:1c:98:92:28:a4:0f:8a:f9:fa:58:31:b2:8d:41:fe:3a:
23:63:06:b7:0d:7b:0e:20:5f:51:ee:a9:60:9d:ae:80:ef:d0:
af:8d:6b:26:42:b9:14:be:dd:10:8e:8b:bb:a2:ff:ea:16:c1:
5b:8a:af:1f:55:ce:45:65:85:2a:5f:35:d3:5c:66:a6:1b:bd:
ce:02:0a:82:7d:6c:bc:e4:da:72:aa:f8:16:e7:d9:e9:f2:b5:
bf:d2:01:25:0f:1b:7e:da:e7:80:f8:5d:7a:45:5d:9b:ab:7f:
ec:6a:7b:26:97:b8:1a:8c:94:3d:77:55:74:8c:42:38:96:28:
cb:4c:b9:23:db:c9:33:e0:c2:09:0f:f9:24:00:f8:42:c5:0a:
c7:9e:7b:1f:35:c0:b8:44:ab:35:27:7f:f4:c8:0e:4e:fe:af:
15:ee:b1:77:82:88:69:37:12:67:bf:c3:19:5a:c6:0c:5a:ff:
d3:8d:e7:c9:73:56:bc:96:ac:68:d3:08:94:cf:78:e6:94:15:
70:b6:09:5d:09:7b:eb:8c:be:7c:53:3b:f4:61:10:a4:00:09:
3b:59:d1:55:09:13:d7:3d:51:a4:54:da:83:54:d7:9c:da:42:
40:71:1b:56:d7:1e:55:af:48:a2:53:a1:f4:54:02:99:00:76:
f0:63:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 04:00:08 2026 by rpki-client