Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tGZXsu28b53jEDLDXd7qzFVG_-g.roa
File: tGZXsu28b53jEDLDXd7qzFVG_-g.roa (raw, json)
Hash identifier: uD8QzQ9B9CkJdnSj7AXhE8okzMFBoX71Y3FAVIV27sM=
Subject key identifier: B4:66:57:B2:ED:BC:6F:9D:E3:10:32:C3:5D:DE:EA:CC:55:46:FF:E8
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FD134583A4362285D3E63F57F7D0FA338
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tGZXsu28b53jEDLDXd7qzFVG_-g.roa
Signing time: Wed 05 Aug 2026 09:14:56 +0000
ROA not before: Wed 05 Aug 2026 09:14:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399486
IP address blocks: 81.168.62.0/24 maxlen: 24
82.152.110.0/24 maxlen: 24
82.153.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:34:58:3a:43:62:28:5d:3e:63:f5:7f:7d:0f:a3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 5 09:14:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b46657b2edbc6f9de31032c35ddeeacc5546ffe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:ed:7d:60:75:a3:8c:12:fc:85:95:d5:fb:
1c:fd:b6:4d:c0:3b:d7:1e:1c:15:8c:e3:a8:de:45:
11:f3:b2:21:89:95:43:d8:6e:71:70:ba:12:4e:91:
a3:b3:7d:fc:a0:7e:55:14:35:8b:02:a3:0d:50:60:
bb:da:99:3b:99:0d:cc:54:96:b2:b8:14:ff:c7:00:
95:37:e9:aa:c6:f1:0f:36:a4:c9:bd:ee:1a:93:bf:
fd:48:12:fd:00:69:25:6e:4f:b3:dd:ab:02:9c:03:
e1:cb:d1:37:b5:da:65:29:3a:ab:e6:77:c2:ec:6a:
e5:50:15:86:7f:fd:30:26:87:f2:5f:90:2b:0c:59:
b0:86:4d:0e:b6:a0:42:73:00:51:f3:00:68:3d:4d:
19:a2:cb:cf:58:93:72:f0:9a:d2:eb:8e:b5:de:6d:
77:6b:87:16:9a:6b:09:d9:3f:d0:f6:66:48:35:fb:
ac:cb:5c:98:5f:74:5b:38:7a:9f:18:92:81:ef:e4:
e2:39:b4:98:f9:ec:aa:cc:12:cf:31:ff:e9:0d:60:
20:eb:36:2a:e7:68:56:71:9c:43:86:66:58:99:d5:
2c:13:1b:31:bb:7c:0a:b5:f4:00:6a:03:8c:ac:8e:
13:1a:90:ce:62:c3:f0:52:57:41:f5:97:2b:17:8e:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:66:57:B2:ED:BC:6F:9D:E3:10:32:C3:5D:DE:EA:CC:55:46:FF:E8
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tGZXsu28b53jEDLDXd7qzFVG_-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.62.0/24
82.152.110.0/24
82.153.142.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:7e:a4:a8:f2:80:3b:71:98:cc:de:98:d1:97:d9:71:94:26:
cb:e4:29:de:1e:79:22:58:bb:0d:6a:26:19:7e:b4:19:e1:bf:
41:0b:13:57:62:da:59:63:9c:21:e0:ef:0b:7e:9a:25:a7:ff:
65:41:9c:4e:b7:10:5b:54:a6:23:46:bd:a4:95:00:71:a5:61:
78:75:45:25:ee:75:dc:1c:37:b7:a9:6e:04:de:7e:05:ba:92:
06:44:7d:77:3e:57:43:cc:92:4e:e5:f7:1b:35:8b:27:94:e9:
c7:fd:61:8a:5a:ca:84:aa:82:11:c1:45:63:5b:28:b4:39:87:
93:e4:09:55:4e:ba:78:31:c0:b7:03:e4:ff:90:96:80:d7:67:
55:39:49:c8:82:4b:95:06:06:c4:8e:e5:42:3f:ab:f4:3b:e9:
b1:34:d7:0d:04:f8:5d:fa:41:c8:0f:9b:97:75:87:bf:56:25:
5d:2c:f4:f6:d3:7d:1e:45:07:cf:5a:b1:bd:2a:ce:73:d7:0a:
63:51:5b:d6:17:bb:6e:66:f6:56:a0:da:23:51:ab:c7:16:21:
69:b0:dd:bb:a1:0f:bf:42:ea:fc:9d:67:8d:61:e7:68:95:c6:
b5:a4:ad:0d:3f:17:4b:92:01:f7:4c:0e:c1:ba:04:fe:26:cb:
7a:8c:dc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:02 2026 by rpki-client