Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tuNTKA0e1IFM8unKqCIgnN1nnSc.roa
File: tuNTKA0e1IFM8unKqCIgnN1nnSc.roa (raw, json)
Hash identifier: qywxo0ejn7Sxrc+X96pdsCX7vlsoCiU5DCsjmJQpIIY=
Subject key identifier: B6:E3:53:28:0D:1E:D4:81:4C:F2:E9:CA:A8:22:20:9C:DD:67:9D:27
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC6EB4922E364D0CA300CFE85D31D64FE
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tuNTKA0e1IFM8unKqCIgnN1nnSc.roa
Signing time: Mon 03 Aug 2026 09:18:56 +0000
ROA not before: Mon 03 Aug 2026 09:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60439
IP address blocks: 81.168.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:eb:49:22:e3:64:d0:ca:30:0c:fe:85:d3:1d:64:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 09:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6e353280d1ed4814cf2e9caa822209cdd679d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:0c:a7:9e:f3:f0:2f:f9:be:4d:94:21:d0:
69:0b:e0:2f:92:12:b2:1c:be:ff:78:b1:fe:a2:67:
13:c1:5a:5d:d7:0d:f0:03:f1:ed:9e:b9:85:60:59:
7b:4c:60:e7:56:ac:f6:99:ed:e7:02:41:c2:48:2a:
47:2d:be:14:b1:fc:dd:fb:e0:39:ea:b4:80:b5:8d:
2d:df:22:72:7e:a6:b2:68:6d:22:ab:9b:ce:29:25:
bd:87:cc:9f:f2:13:74:18:f0:95:55:69:0b:17:c6:
9d:26:ab:80:3c:36:ac:75:1a:ab:3c:54:0d:17:d2:
f6:e1:83:da:0f:10:76:88:b5:6a:ab:af:96:95:ae:
50:e8:f9:92:45:e4:d9:19:35:02:1b:14:dd:70:27:
96:26:8b:58:c2:50:de:51:5d:cd:a0:e1:92:e8:1c:
e3:ad:48:63:27:9b:d7:09:74:16:e2:69:ef:f0:0c:
3d:ad:3a:f6:ef:52:f7:73:f0:79:8c:16:67:15:d9:
3e:3d:b8:f3:e0:a9:a1:e3:db:a3:6f:77:42:ee:26:
0f:8b:00:1c:7d:7b:18:22:2d:60:88:c2:a2:0b:ce:
11:fe:b7:85:9e:a5:4d:92:07:46:3b:94:a1:92:b3:
30:45:66:ca:e0:6e:f8:2d:f3:87:c5:83:8f:19:d3:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E3:53:28:0D:1E:D4:81:4C:F2:E9:CA:A8:22:20:9C:DD:67:9D:27
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tuNTKA0e1IFM8unKqCIgnN1nnSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.110.0/24
Signature Algorithm: sha256WithRSAEncryption
42:2b:d8:91:3f:4d:d0:18:e4:2a:7f:41:82:57:4e:4a:f4:2e:
be:77:90:d7:73:6f:11:34:0e:c9:9b:7d:a6:0a:da:8d:78:ab:
21:c5:c1:aa:3c:24:ae:c4:36:33:a0:07:39:76:46:cb:38:11:
a5:92:86:69:06:94:3c:ca:95:75:23:8e:16:3a:f2:12:49:1c:
fb:63:29:7a:de:e3:28:f1:cd:da:c1:c5:d1:8b:09:5b:89:62:
80:c6:ce:77:eb:55:08:6f:f8:e2:b7:58:d3:ce:d1:73:e6:43:
91:92:5b:f9:d3:33:d7:95:36:58:af:ae:0c:3b:e9:8d:ba:82:
23:e8:30:61:6c:80:5f:60:f2:26:7d:80:f9:4f:d8:85:3d:d9:
04:6d:54:75:98:45:bb:af:9f:ac:ed:95:6e:73:ae:68:a6:7e:
f0:5b:b6:0c:8b:23:0e:06:14:b1:9f:12:74:26:43:da:48:d0:
86:ac:94:53:3c:fc:4f:7d:3d:b7:17:29:57:aa:90:84:51:30:
74:76:86:5a:85:bf:bf:56:33:e6:9a:1c:24:6c:25:3d:15:87:
b2:dc:f4:d3:82:b6:1a:34:e9:50:3d:8c:9f:93:1e:92:f7:47:
36:83:68:58:31:a0:52:a2:29:ea:85:18:39:17:43:ff:ae:d8:
18:bd:73:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:22 2026 by rpki-client