Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v2u-K1UotjzjqrYXi_dyHE0OxmY.roa
File: v2u-K1UotjzjqrYXi_dyHE0OxmY.roa (raw, json)
Hash identifier: /dpcVqEk8oaPtWKBeIDdqsHn08mMOz364CbM0L2m4no=
Subject key identifier: BF:6B:BE:2B:55:28:B6:3C:E3:AA:B6:17:8B:F7:72:1C:4D:0E:C6:66
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A00EEFC2EC98D64CE8EEAF23AE3F4F9C7C
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v2u-K1UotjzjqrYXi_dyHE0OxmY.roa
Signing time: Mon 17 Aug 2026 08:56:29 +0000
ROA not before: Mon 17 Aug 2026 08:56:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 77.107.83.0/24 maxlen: 24
82.153.115.0/24 maxlen: 24
213.210.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:ef:c2:ec:98:d6:4c:e8:ee:af:23:ae:3f:4f:9c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 17 08:56:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf6bbe2b5528b63ce3aab6178bf7721c4d0ec666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:24:ff:91:2e:bf:e3:10:4a:8d:c4:fe:69:
3d:02:5d:8a:ee:5d:7c:d5:d9:e0:93:bb:91:2d:54:
b6:b6:94:40:96:e4:1b:bf:2c:f4:8f:1a:b8:b2:f1:
28:0c:18:ad:48:4a:3e:01:94:72:9e:f0:b5:42:22:
86:fa:0b:f8:0a:4c:61:51:69:0d:d9:01:d2:50:db:
54:a4:9e:e3:cd:55:98:73:a7:a3:66:c3:87:63:39:
0f:09:08:d0:46:5d:a3:a4:67:e0:14:36:5a:54:88:
32:72:a4:6a:43:30:30:24:dc:a0:69:cc:16:17:5f:
9b:05:c6:91:22:b4:ab:a0:36:01:5e:f9:cd:b9:38:
3b:f0:31:e7:e9:85:79:2a:22:29:80:59:3d:c8:38:
09:68:a2:ae:f3:f5:a6:f9:e1:dd:33:32:81:e9:2f:
23:f7:6a:f8:8f:c0:98:b6:24:16:20:57:c4:60:b1:
33:b8:73:a1:6e:28:64:b8:17:6d:e3:f5:a8:db:72:
df:8e:8a:6a:ca:ae:1c:e7:3c:f8:1c:d1:da:91:86:
43:c7:ed:8a:19:c9:a7:a1:32:90:e8:4d:87:38:bb:
d5:9c:71:d7:aa:1a:0e:3f:1a:b7:e1:dc:09:56:47:
e1:06:95:b3:a9:0f:65:2f:89:39:01:8a:f9:5a:46:
5a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6B:BE:2B:55:28:B6:3C:E3:AA:B6:17:8B:F7:72:1C:4D:0E:C6:66
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v2u-K1UotjzjqrYXi_dyHE0OxmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.83.0/24
82.153.115.0/24
213.210.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2e:f1:10:05:2e:22:b8:a1:54:d3:0e:d1:29:41:76:c5:af:
52:2c:b2:23:81:11:53:ed:71:c1:ea:2a:e2:59:4c:cd:92:c1:
ca:cb:90:ef:fe:b8:43:43:86:98:3f:6e:7d:14:ce:73:db:48:
0c:0a:84:13:e5:9e:02:d9:6c:1e:c6:db:21:5f:13:d1:ff:4d:
fe:82:2c:a2:13:70:33:56:a9:f9:bc:59:22:89:3f:8e:9d:45:
94:c6:55:bc:fa:7d:c6:33:d3:c6:f3:a8:69:e3:cc:19:20:61:
5c:e2:2c:de:d4:a2:ce:ef:31:09:67:c9:1d:7a:2e:53:44:22:
2a:27:d6:65:23:0e:70:e9:6d:c5:ea:e2:76:e9:b8:d1:d4:6c:
5b:ce:a9:fd:39:29:e1:97:90:8e:50:3b:30:da:a7:91:56:7c:
d0:cf:c9:f1:3a:3e:c4:50:7e:52:1a:05:f9:4f:a3:b3:fc:ee:
45:79:67:a8:89:c4:34:9f:f8:76:27:4b:df:c5:82:31:c4:bf:
c0:09:f2:05:ec:68:f6:e7:c8:b8:ed:c9:28:b2:e5:f7:da:dd:
e2:dc:1a:2d:46:95:a1:64:e0:de:aa:88:6e:3d:25:cf:21:9b:
e4:af:37:51:f2:11:0c:2e:62:1e:2e:e0:04:08:18:28:dd:50:
d8:de:a1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:28 2026 by rpki-client