Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pk4M4YcnyWUSW732yh1DjH7vxaQ.roa
File: pk4M4YcnyWUSW732yh1DjH7vxaQ.roa (raw, json)
Hash identifier: l/0OrF7a0gSHYO/Lo0CczrYJ6A/JzUMZ/soOczC3N+M=
Subject key identifier: A6:4E:0C:E1:87:27:C9:65:12:5B:BD:F6:CA:1D:43:8C:7E:EF:C5:A4
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368AE1ACCF0A72581780F8E35E46FA5
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pk4M4YcnyWUSW732yh1DjH7vxaQ.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 80.240.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ae:1a:cc:f0:a7:25:81:78:0f:8e:35:e4:6f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a64e0ce18727c965125bbdf6ca1d438c7eefc5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:72:2d:26:58:07:c5:c9:47:f4:67:a3:a7:f6:
30:c0:47:e1:72:7c:cd:16:60:c3:fd:83:bc:57:5e:
cf:6a:81:c9:21:ee:3e:eb:27:24:ac:60:90:d5:70:
6d:17:2e:98:e6:c4:7a:13:fd:82:1b:d4:0e:12:9f:
ba:f1:02:e2:cd:5f:07:21:37:38:98:f6:5a:75:45:
82:6d:ea:55:4b:ab:ad:7b:11:e8:3a:44:26:a1:27:
db:16:00:74:5a:97:dc:f1:8a:54:b2:d4:f0:a1:18:
01:00:38:a0:69:72:2b:76:f3:92:42:bd:01:1c:a6:
8d:f0:32:b8:17:87:fc:6b:46:28:b1:f9:ba:cd:f5:
05:2d:ad:09:27:4a:c1:c5:e9:70:0c:63:57:c8:58:
66:a2:8e:d1:47:6e:f2:d7:4f:79:54:c6:f3:52:b1:
e0:5c:84:45:10:ab:5c:68:f8:bb:75:30:7a:49:7f:
03:52:2a:31:d5:26:e0:b5:26:e1:99:ba:c9:16:96:
6b:95:21:ae:9e:71:49:f9:57:ec:a4:c3:fa:49:f7:
30:39:ad:72:3c:09:1e:6c:6a:ff:0d:5f:df:c0:68:
05:12:59:47:ec:9e:b5:37:0c:72:7a:ea:6d:f5:20:
16:dd:49:80:2d:93:b1:93:4c:34:4e:58:d1:57:96:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4E:0C:E1:87:27:C9:65:12:5B:BD:F6:CA:1D:43:8C:7E:EF:C5:A4
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pk4M4YcnyWUSW732yh1DjH7vxaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.93.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a7:38:61:f8:b2:2b:38:28:db:3f:6c:28:11:34:fe:2b:3d:
1f:92:16:49:a0:ae:d8:72:e6:9f:3e:76:39:77:f2:d1:3f:62:
6f:28:d3:87:38:3b:69:59:8c:97:fe:a9:bc:ec:f7:44:e0:82:
c6:f9:d5:6c:64:5e:19:a4:55:e3:a2:4a:29:d4:81:49:da:1f:
4c:b2:00:72:57:35:78:c7:55:15:26:a5:1b:ad:7d:f8:36:02:
bb:0a:39:8d:8d:f1:ee:e3:b2:0e:bc:40:b6:bb:a0:83:17:b3:
55:91:7b:84:31:fc:3c:f2:65:bd:9e:2e:49:ac:ca:cf:0e:b0:
75:87:8f:94:f8:88:0a:92:ff:5a:65:f1:2c:41:61:e5:0c:ef:
6e:3b:8d:db:52:ef:98:c2:cd:91:a4:37:ca:7e:41:ef:cc:2a:
6c:64:1e:87:af:dc:c1:ef:a3:bc:b4:51:ca:52:99:15:e5:ba:
0e:d3:54:ab:0a:21:1c:2f:29:1b:23:38:0c:57:1e:e2:03:23:
04:df:92:a4:14:f1:fa:3a:eb:d9:61:2a:f9:a3:c7:e1:f3:c3:
92:10:eb:4e:fc:6a:ac:15:04:e8:11:eb:df:8b:08:16:03:b5:
0a:6b:85:13:9d:4d:8a:45:f2:f9:41:26:b4:be:f8:f6:e8:4c:
e9:8d:d0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:52 2026 by rpki-client