Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/thC3ZVIOFj8UMYzdDA_g2XoLn3A.roa
File: thC3ZVIOFj8UMYzdDA_g2XoLn3A.roa (raw, json)
Hash identifier: +U+b4RTbgkyHdlz33jZD78gXxmfDidXKADpkcoHItVU=
Subject key identifier: B6:10:B7:65:52:0E:16:3F:14:31:8C:DD:0C:0F:E0:D9:7A:0B:9F:70
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F236919A11BA94F2446B3B6A24730DFCC
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/thC3ZVIOFj8UMYzdDA_g2XoLn3A.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 267507
IP address blocks: 109.176.16.0/24 maxlen: 24
212.38.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:19:a1:1b:a9:4f:24:46:b3:b6:a2:47:30:df:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b610b765520e163f14318cdd0c0fe0d97a0b9f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:fe:08:df:60:4d:4c:dc:45:5c:f6:b9:68:
e9:bb:b8:ea:95:e5:a7:4b:6e:4c:11:5c:be:e7:78:
00:e5:81:36:aa:62:9a:55:d3:a2:c4:ab:bc:5d:7d:
4b:93:61:9d:93:36:89:2b:fc:ee:8f:d3:e3:49:55:
33:86:0a:90:37:5e:a1:a6:c7:10:d0:ac:c4:63:9e:
5b:85:6a:be:2a:01:70:f4:4b:a7:ad:ea:71:95:f0:
6b:90:dc:b5:cd:45:1a:2b:2f:9a:86:9b:8a:d2:9d:
46:2f:7d:d9:ec:5b:8a:61:5a:ff:41:d9:0e:c6:8a:
e0:ab:e1:79:c7:b2:ef:8c:c3:70:33:f1:8f:fd:16:
1d:35:ff:26:92:b2:79:5b:89:d9:54:d1:f8:da:9e:
32:f4:24:58:00:77:0e:d9:d3:83:b6:56:c0:ce:2b:
18:9d:d5:98:ce:70:bb:43:cd:e9:dc:4f:7b:86:a9:
7c:63:28:72:4a:8a:1e:dd:4a:ae:85:38:cb:2d:87:
6d:5a:c4:30:43:dc:72:b7:98:35:33:09:3f:83:02:
be:f5:53:4b:d5:8b:7a:ca:4a:de:cc:6e:69:ad:38:
88:09:1e:88:df:a4:45:34:1b:c2:09:67:4e:7e:78:
15:8e:65:5e:32:73:71:4d:8b:8e:17:b5:29:b8:4d:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:10:B7:65:52:0E:16:3F:14:31:8C:DD:0C:0F:E0:D9:7A:0B:9F:70
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/thC3ZVIOFj8UMYzdDA_g2XoLn3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.16.0/24
212.38.84.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6c:47:e2:df:33:38:de:6e:4a:18:42:ba:66:a1:84:8a:41:
57:7b:5d:94:57:9c:ef:01:48:86:c1:d6:50:40:25:72:c9:8c:
90:e8:66:23:e7:a8:82:1f:36:f7:f3:9d:87:ba:23:9f:35:6c:
94:ff:21:2f:0c:47:17:06:72:9c:8c:ee:f1:4b:93:80:a4:af:
5a:8b:37:cf:26:78:8a:a2:55:cb:00:f2:07:4e:dd:2e:4b:ca:
d0:45:fa:9a:36:be:90:de:cc:ae:4c:ea:c7:32:85:f5:6e:f2:
c3:a7:72:85:8d:08:ad:03:91:7a:92:d5:de:fe:a9:4e:7d:88:
72:93:fb:58:80:5f:85:76:bf:4f:b5:1a:e9:b6:c0:d8:e1:8b:
66:fa:3b:3b:8c:8f:f2:6c:02:d5:ab:dc:e4:0b:b0:c7:78:b8:
a1:5e:3e:32:75:24:75:8f:4c:f3:6f:b0:16:73:c7:9e:d6:77:
6d:11:22:81:32:a9:8f:c2:5d:65:87:11:b6:ea:c6:9b:ed:77:
2f:5b:1f:ae:6a:2f:fd:22:23:6f:a6:ce:45:f6:7e:26:5f:2f:
8e:ff:a7:8b:9a:7b:70:ab:9a:d9:83:9a:26:72:ad:a3:ce:d6:
5a:83:ca:2b:28:02:28:c5:f1:08:19:1e:ca:66:0b:c3:23:6e:
81:47:5d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:16:30 2026 by rpki-client