Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/t5nwO0iIpszCCHb1UGOam2Kjqmo.roa
File: t5nwO0iIpszCCHb1UGOam2Kjqmo.roa (raw, json)
Hash identifier: kxZF79wRR+cwXWeRmb33xIMwQmcK9vvgRDDN7q6/z2k=
Subject key identifier: B7:99:F0:3B:48:88:A6:CC:C2:08:76:F5:50:63:9A:9B:62:A3:AA:6A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC86DA6972F95857A8AE569EE4D68D601
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/t5nwO0iIpszCCHb1UGOam2Kjqmo.roa
Signing time: Mon 03 Aug 2026 16:20:57 +0000
ROA not before: Mon 03 Aug 2026 16:20:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63902
IP address blocks: 81.168.76.0/24 maxlen: 24
81.168.79.0/24 maxlen: 24
89.28.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:6d:a6:97:2f:95:85:7a:8a:e5:69:ee:4d:68:d6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 16:20:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b799f03b4888a6ccc20876f550639a9b62a3aa6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:80:cb:63:36:96:8b:59:a0:fe:72:a8:6a:e4:
fe:7e:c8:af:7b:29:f2:4c:f9:14:e0:f8:bb:e3:98:
ca:b4:ca:18:d9:55:54:0c:d4:86:8b:d4:b5:a3:48:
8e:15:2e:f7:b2:7a:f6:74:23:ab:99:b6:fc:b8:dd:
54:80:39:43:88:32:99:67:a8:55:e3:cf:32:6a:b2:
a6:4c:95:ed:5c:aa:c2:d6:cd:35:d3:93:97:ce:4d:
7d:4b:86:01:57:61:1d:ce:ab:12:b1:15:c1:37:38:
d5:99:2a:c4:62:05:05:c3:6a:77:ae:0c:7e:c3:99:
9b:fd:0c:d8:46:32:9d:cd:24:52:05:b5:c9:1a:bc:
bd:8e:6e:6e:87:76:0b:84:70:e9:02:c3:ec:73:49:
96:a2:88:7f:25:15:77:84:d9:bc:23:ff:27:98:c2:
12:53:28:a1:fd:23:39:bd:66:69:79:2e:6b:24:eb:
87:de:d8:c2:c3:d1:55:06:be:db:a9:cf:8a:6f:05:
c8:a2:2f:7f:c5:19:8e:7d:78:39:48:1b:12:89:1a:
d2:d0:e1:c5:5d:25:dc:a8:52:b0:eb:f5:37:29:9b:
2d:e4:5f:bb:d7:bb:f5:e8:65:2f:85:c3:d0:3c:10:
6c:ab:2c:5d:8e:f5:30:58:4d:57:af:05:62:11:e4:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:99:F0:3B:48:88:A6:CC:C2:08:76:F5:50:63:9A:9B:62:A3:AA:6A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/t5nwO0iIpszCCHb1UGOam2Kjqmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.76.0/24
81.168.79.0/24
89.28.235.0/24
Signature Algorithm: sha256WithRSAEncryption
37:94:f2:95:cd:b2:87:72:2c:35:ab:c9:00:97:04:f2:04:18:
0f:fd:20:41:5c:b8:3f:c5:33:37:36:07:d5:44:ba:e0:32:4e:
8a:b1:9e:df:2b:0f:d1:10:01:be:69:b5:76:ed:e4:d2:94:71:
15:86:94:5d:62:df:85:e2:9e:b6:a6:87:3d:21:a8:98:7a:98:
48:3d:cc:cc:f8:89:fd:fa:a0:97:b8:9b:fc:5e:06:16:a2:b6:
10:59:c6:01:9b:36:b1:b1:95:fe:7d:32:0e:35:8e:aa:d6:aa:
76:a4:9a:dc:36:06:90:df:b4:c8:07:5b:e8:d1:6f:1a:03:30:
d5:e4:33:0b:57:f0:de:ce:5e:e1:ac:fb:8f:2c:bc:29:8a:9f:
96:2c:f8:66:f9:01:7e:52:5f:25:a0:5c:2f:64:a4:01:b5:8e:
cb:93:e5:e5:14:3f:bc:68:6d:77:50:ee:e0:74:86:a6:55:f4:
06:fa:94:ce:81:b0:29:75:c1:a5:ad:bc:14:66:27:f7:5c:32:
fa:8f:62:5b:5c:32:c1:ba:7d:ef:27:55:50:12:bd:01:ba:76:
1b:f3:9f:14:52:0c:14:86:12:7c:40:a2:eb:38:94:a7:fd:3d:
55:cd:cb:50:eb:3b:22:df:96:af:d2:a8:f1:42:e5:01:16:a3:
95:61:a8:77
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ/IbaaXL5WFeorlae5NaNYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODAzMTYyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzk5ZjAzYjQ4ODhhNmNjYzIwODc2ZjU1MDYzOWE5YjYyYTNhYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14DLYzaWi1mg/nKoauT+fsiveyny
TPkU4Pi745jKtMoY2VVUDNSGi9S1o0iOFS73snr2dCOrmbb8uN1UgDlDiDKZZ6hV
488yarKmTJXtXKrC1s0105OXzk19S4YBV2EdzqsSsRXBNzjVmSrEYgUFw2p3rgx+
w5mb/QzYRjKdzSRSBbXJGry9jm5uh3YLhHDpAsPsc0mWooh/JRV3hNm8I/8nmMIS
Uyih/SM5vWZpeS5rJOuH3tjCw9FVBr7bqc+KbwXIoi9/xRmOfXg5SBsSiRrS0OHF
XSXcqFKw6/U3KZst5F+717v16GUvhcPQPBBsqyxdjvUwWE1XrwViEeTnSwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLeZ8DtIiKbMwgh29VBjmptio6pqMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvdDVud08waUlwc3pDQ0hiMVVHT2FtMktqcW1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUahMAwQA
UahPAwQAWRzrMA0GCSqGSIb3DQEBCwUAA4IBAQA3lPKVzbKHciw1q8kAlwTyBBgP
/SBBXLg/xTM3NgfVRLrgMk6KsZ7fKw/REAG+abV27eTSlHEVhpRdYt+F4p62poc9
IaiYephIPczM+In9+qCXuJv8XgYWorYQWcYBmzaxsZX+fTIONY6q1qp2pJrcNgaQ
37TIB1vo0W8aAzDV5DMLV/Dezl7hrPuPLLwpip+WLPhm+QF+Ul8loFwvZKQBtY7L
k+XlFD+8aG13UO7gdIamVfQG+pTOgbApdcGlrbwUZif3XDL6j2JbXDLBun3vJ1VQ
Er0BunYb858UUgwUhhJ8QKLrOJSn/T1VzctQ6zsi35av0qjxQuUBFqOVYah3
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:59 2026 by rpki-client