Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rRvQQEIyDgy_cptU2KsZUEzb6o8.roa
File: rRvQQEIyDgy_cptU2KsZUEzb6o8.roa (raw, json)
Hash identifier: WIxQXT39SLmWTRQxDsRBHIUuw/eSWBtG2zg0T+KWI44=
Subject key identifier: AD:1B:D0:40:42:32:0E:0C:BF:72:9B:54:D8:AB:19:50:4C:DB:EA:8F
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A10B490542E9C5322EE8DC43DB5463B708
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rRvQQEIyDgy_cptU2KsZUEzb6o8.roa
Signing time: Mon 05 Oct 2026 08:58:17 +0000
ROA not before: Mon 05 Oct 2026 08:58:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 80.240.88.0/21 maxlen: 24
80.240.88.0/24 maxlen: 24
80.240.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:49:05:42:e9:c5:32:2e:e8:dc:43:db:54:63:b7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 5 08:58:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad1bd04042320e0cbf729b54d8ab19504cdbea8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:09:45:a1:f5:dc:83:2b:23:7a:0e:f1:c9:
61:fb:6e:77:77:1a:25:f4:f9:eb:26:a0:9d:30:ea:
79:b2:78:88:1f:75:de:3f:2f:50:c1:48:c7:a8:8b:
4f:d4:5c:5c:02:10:0e:40:04:35:b0:5e:d6:0b:87:
5b:2a:36:65:7a:32:6a:ae:24:07:e9:34:64:1d:42:
08:e0:86:0e:e8:49:55:11:ab:aa:d7:12:b2:e7:51:
da:39:b9:0d:a3:04:4a:9b:e3:33:51:c1:ca:49:7a:
97:5f:3d:dd:23:6c:66:24:21:65:d8:9c:1f:c5:0e:
8e:8a:75:71:bd:10:4f:a4:1f:d1:e2:19:01:ab:93:
55:4c:9c:db:9f:0b:34:cd:c7:c5:36:84:7e:00:07:
db:98:e2:ec:1a:44:9e:34:17:c9:93:0e:6d:51:01:
87:6b:72:b9:2e:7b:ba:2b:ac:d9:0f:e6:f8:9a:c8:
27:14:bc:16:d9:47:46:85:da:2c:94:cd:86:bb:51:
e1:32:a2:ef:46:8b:e6:f1:3a:cc:8f:b8:3a:49:e5:
14:9d:cc:b2:96:d3:ed:85:54:d0:08:0b:08:9b:49:
57:3f:dd:1f:f9:75:38:0c:66:d3:02:0e:13:33:42:
a0:3a:90:d1:73:e2:89:11:00:76:83:8c:28:ba:f2:
00:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1B:D0:40:42:32:0E:0C:BF:72:9B:54:D8:AB:19:50:4C:DB:EA:8F
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rRvQQEIyDgy_cptU2KsZUEzb6o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:d4:37:2f:c4:20:2a:14:eb:dd:8a:33:c1:2e:85:cc:fe:44:
5e:20:b2:25:fe:84:ff:02:e9:b8:5c:ca:89:f6:41:5f:c6:42:
a1:f5:a1:85:33:a1:11:1a:70:75:bf:12:1e:3e:bd:58:16:66:
0c:fc:29:ff:df:04:24:48:12:32:38:57:25:ad:dd:59:ed:04:
68:e8:64:ab:7a:f9:90:15:ab:b4:14:8a:49:9c:8f:b1:1d:3d:
3c:31:6c:55:01:c8:aa:39:d0:28:53:d4:6d:4c:a8:47:62:16:
2a:3d:ff:3f:0a:fa:f8:b1:19:99:64:0f:ba:37:80:5f:89:01:
2d:5b:a2:53:2f:31:f8:3f:cd:20:87:9b:b1:0d:4d:8e:bf:6f:
ee:b2:3a:5d:0e:3c:1a:63:1f:3f:44:00:26:92:43:20:b4:0b:
80:b0:b0:7a:b3:01:69:8f:2e:56:a5:75:d8:16:e6:1e:a1:94:
81:6f:2e:41:15:db:d2:0a:66:9b:36:2e:07:61:31:e4:e5:f5:
26:fc:e0:ed:09:5f:76:2e:e0:d2:dd:e0:5c:eb:1b:10:e3:6b:
d3:77:5b:ce:be:79:91:f3:1d:bd:6e:59:92:0a:3d:13:a4:02:
8f:ba:65:b8:bd:b2:6a:9d:c1:22:70:84:e5:16:a6:4d:14:e6:
35:e5:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:55:40 2026 by rpki-client