Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/stYNyV1eyC3B_Ywaur8dy1ihINE.roa
File: stYNyV1eyC3B_Ywaur8dy1ihINE.roa (raw, json)
Hash identifier: GAOathTTZh5Tf5DHnGiLi62uUcX2jKfqEAMBu1En94Q=
Subject key identifier: B2:D6:0D:C9:5D:5E:C8:2D:C1:FD:8C:1A:BA:BF:1D:CB:58:A1:20:D1
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FD609389E4A04A553F7BE7AB91CDB0E8E
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/stYNyV1eyC3B_Ywaur8dy1ihINE.roa
Signing time: Thu 06 Aug 2026 07:45:56 +0000
ROA not before: Thu 06 Aug 2026 07:45:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400909
IP address blocks: 77.93.150.0/23 maxlen: 24
81.5.189.0/24 maxlen: 24
82.152.105.0/24 maxlen: 24
82.153.32.0/24 maxlen: 24
89.213.124.0/23 maxlen: 23
109.176.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:09:38:9e:4a:04:a5:53:f7:be:7a:b9:1c:db:0e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 6 07:45:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2d60dc95d5ec82dc1fd8c1ababf1dcb58a120d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:8d:8c:62:47:bd:15:48:fc:6b:50:ed:72:
fd:43:89:d0:0a:57:b9:70:4f:23:95:1b:6a:5a:ae:
8a:be:43:77:e1:d6:e9:f0:44:9f:6c:e9:56:cc:f3:
04:00:6d:dc:eb:82:5c:e9:19:51:af:75:9e:e0:95:
0c:80:f0:ec:83:8c:16:47:47:a0:e4:18:5f:d0:1d:
42:30:35:22:d9:cd:b0:ae:9c:ed:ee:df:54:3a:c3:
eb:8c:b6:a1:b3:22:16:87:2d:5c:24:6d:b1:b8:ee:
0c:80:3d:2b:e4:05:03:3c:78:e8:dc:7d:43:a1:24:
c6:de:50:03:b6:cc:78:0c:7f:e7:da:91:67:b2:e5:
f8:12:bf:bf:2f:78:5a:88:47:c9:ba:4c:5b:cd:df:
04:09:80:a6:26:16:27:7c:51:c8:b8:db:a7:44:9f:
2a:99:40:c0:23:0f:59:d5:fa:12:c7:02:88:02:fb:
a0:c9:e6:dd:cd:49:bd:83:44:1a:7f:b6:14:60:76:
42:2e:a6:4b:7f:4c:23:cf:aa:73:6f:e6:8d:d1:33:
3b:68:91:0b:2d:98:d8:0c:4c:da:f1:3f:3f:7f:ac:
72:70:4e:c3:6d:2a:b8:c3:2e:5d:05:6b:f8:b1:b0:
20:79:86:da:2e:7b:bb:10:ef:cc:1a:74:ef:19:68:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D6:0D:C9:5D:5E:C8:2D:C1:FD:8C:1A:BA:BF:1D:CB:58:A1:20:D1
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/stYNyV1eyC3B_Ywaur8dy1ihINE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.150.0/23
81.5.189.0/24
82.152.105.0/24
82.153.32.0/24
89.213.124.0/23
109.176.204.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:dc:b2:a1:88:c2:fe:6b:21:2c:9e:02:07:81:fe:35:c9:e1:
cc:31:fe:ac:cd:d4:4d:7e:6f:bf:fc:d0:2f:67:a2:28:a0:a6:
48:c7:fa:53:6b:f8:b1:cf:f6:29:60:50:c9:3e:c0:c9:6c:99:
fb:22:ee:5c:f3:e9:af:e1:22:ec:0b:27:5b:d1:21:b5:a6:f9:
9e:a5:6d:96:10:9c:08:37:d4:6c:c6:5d:c3:eb:1f:df:ae:f7:
bc:6b:05:c3:b1:64:cd:13:fb:99:23:fb:3f:87:63:9e:6b:2e:
c0:c6:0e:9e:1e:ea:13:f5:b2:9e:94:42:62:46:32:5d:e7:0b:
eb:09:56:00:2a:db:f7:02:11:6f:f8:bd:e4:28:6c:c3:76:a7:
8b:65:21:19:7e:f8:47:d3:60:a4:46:4f:f5:45:43:ed:c9:9a:
f7:ea:0d:60:6a:74:27:f7:bb:87:9a:f7:6d:88:ba:7b:20:76:
f6:89:30:1b:7b:07:82:b1:d6:28:c7:dc:e5:0c:45:b9:9d:d9:
9b:58:f8:13:40:a4:b4:52:92:19:70:8e:a4:b5:6f:71:fb:4a:
4a:14:bf:8e:29:b3:2b:ec:4d:63:58:21:10:10:d9:ac:10:09:
06:7b:93:1e:b4:9f:e5:9c:9e:70:c0:3e:b6:ae:83:fc:31:31:
9a:61:5f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:00 2026 by rpki-client