Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sf5HWVcIINWP317ZjKiyaQPGVQA.roa
File: sf5HWVcIINWP317ZjKiyaQPGVQA.roa (raw, json)
Hash identifier: Xd2H/yQBrnqNYlch0CJqPlhsH1o2WrucQH4BuJF0ed8=
Subject key identifier: B1:FE:47:59:57:08:20:D5:8F:DF:5E:D9:8C:A8:B2:69:03:C6:55:00
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368CBD91A718C2CE67A535798DFFC73
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sf5HWVcIINWP317ZjKiyaQPGVQA.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140641
IP address blocks: 77.93.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cb:d9:1a:71:8c:2c:e6:7a:53:57:98:df:fc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1fe4759570820d58fdf5ed98ca8b26903c65500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:f0:ff:38:e4:c6:c3:4b:a0:c7:ea:b0:42:
fb:83:db:bd:71:b8:bb:ec:d5:7d:fe:15:26:e0:fa:
b9:06:56:a0:30:b5:5b:f3:3c:20:48:d0:7b:94:02:
b9:28:3b:13:25:e7:c7:3c:c3:5b:6a:a6:4c:e5:46:
50:81:6a:c9:c2:8d:b5:86:2d:15:7e:bd:e6:e9:dd:
b6:24:04:b1:ab:27:a0:34:5c:c7:a9:b6:0f:67:94:
41:03:01:dd:24:33:92:aa:e3:3f:0b:03:d8:bd:83:
c1:9c:57:bb:ca:2d:6f:49:cd:fc:e6:7b:65:56:07:
49:a4:3b:9e:5f:39:93:57:fb:14:1c:78:99:06:bf:
ca:e4:3a:23:89:d4:29:1c:b5:47:4c:14:ae:81:1b:
ea:a1:66:0b:a9:7d:db:8c:f8:80:c5:54:44:bc:3e:
ab:83:e4:c6:b0:71:60:74:3b:ef:c9:43:dc:4e:b4:
8d:8d:f6:17:be:3d:af:b0:f6:4b:bf:b7:72:ba:3f:
82:b2:30:ac:9a:68:03:6e:bb:83:ef:6e:80:c8:8e:
45:e2:41:b4:ed:0f:c4:43:8b:df:0c:af:3d:95:cf:
64:16:e6:44:f0:6a:30:34:d3:0e:65:2c:cc:2e:6e:
30:aa:d8:ef:b8:78:76:7d:35:cf:ca:6b:a3:28:fe:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FE:47:59:57:08:20:D5:8F:DF:5E:D9:8C:A8:B2:69:03:C6:55:00
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sf5HWVcIINWP317ZjKiyaQPGVQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.133.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a3:f3:c5:5f:61:6f:f9:64:42:c1:dc:f2:7a:95:ef:8f:3c:
32:35:bf:aa:c4:f5:59:4e:d0:6b:7c:77:94:f5:ef:0b:1c:ce:
79:1e:b8:a2:9c:bd:36:54:8f:eb:fd:67:dd:8c:1c:1f:96:f1:
02:fe:d2:bf:a5:73:51:f1:ee:69:8d:fc:b7:3d:e6:bf:78:b9:
59:66:6e:db:77:3f:24:50:e8:a7:31:e9:a4:b3:7e:42:b6:31:
ea:13:01:c8:6f:eb:74:74:48:e5:83:df:bf:2f:bd:ae:a6:3f:
48:cf:01:58:dd:5d:82:18:5e:88:60:1c:6d:a7:b8:0c:1e:56:
da:e2:7b:ac:04:1a:85:d4:0c:c6:81:56:4e:5b:1b:0d:aa:03:
b0:f5:9d:84:68:05:11:05:d7:94:50:1d:71:e9:84:34:ef:38:
bb:6b:6d:3e:20:91:37:a1:be:06:b0:3f:ad:3a:3c:04:8c:d7:
b8:ff:6c:56:2b:30:02:32:9e:7d:db:22:14:b7:a1:7c:df:7c:
dc:b8:7a:c5:97:e7:e0:20:7c:d6:ee:6d:e2:7d:88:59:04:5f:
a2:c0:0b:5f:5e:1d:b5:8f:ec:5b:ac:a6:94:81:b1:ea:77:d9:
48:1d:b0:16:38:f1:3e:0e:5f:96:10:f5:47:13:8a:a4:a4:21:
fb:fc:25:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:22:22 2026 by rpki-client