Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vIN3ohLqNltHXiABOE8RMXp625k.roa
File: vIN3ohLqNltHXiABOE8RMXp625k.roa (raw, json)
Hash identifier: woWiK72GIMm3mqK1mYmbMIb1+qei+1SPazWRav4cGvw=
Subject key identifier: BC:83:77:A2:12:EA:36:5B:47:5E:20:01:38:4F:11:31:7A:7A:DB:99
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2369152F1B91CA5101980F668D23B76B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vIN3ohLqNltHXiABOE8RMXp625k.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 81.5.161.0/24 maxlen: 24
82.152.63.0/24 maxlen: 24
82.152.220.0/24 maxlen: 24
82.152.223.0/24 maxlen: 24
82.153.151.0/24 maxlen: 24
82.153.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:15:2f:1b:91:ca:51:01:98:0f:66:8d:23:b7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc8377a212ea365b475e2001384f11317a7adb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:7d:94:f3:ec:b2:f1:48:10:8f:c1:2a:13:
a1:27:b3:65:ec:42:9d:07:d5:33:7a:a8:24:87:06:
13:0e:eb:cd:5f:11:f3:ba:51:c9:4b:01:4a:a1:6e:
82:8e:3d:4d:4e:11:a5:d6:d7:e6:32:52:04:04:6f:
84:37:fc:7b:81:1b:7e:27:5b:9a:72:68:51:b3:a7:
96:9c:d8:4c:00:06:81:df:b8:a7:a2:bc:5f:93:0f:
bd:24:11:03:43:2e:72:19:4c:72:e7:ed:90:63:90:
57:9e:2d:4c:87:7f:d5:88:84:6d:24:d8:27:4f:60:
c7:12:45:43:29:c2:1e:7d:23:b9:b3:18:05:f7:bc:
0d:39:0d:f9:7b:4b:52:62:71:b5:5f:b4:9b:bc:aa:
57:c4:72:d9:e5:09:37:a8:78:0a:3c:3f:46:58:74:
ab:55:85:ff:96:41:9c:b8:a9:f5:51:45:49:35:12:
62:a8:14:8b:cd:ba:e0:8f:1b:ef:b6:8e:1f:35:c6:
df:87:aa:bb:fb:b7:4f:99:73:05:90:cc:4d:91:08:
e9:77:8f:f2:5d:17:a6:7a:0e:98:96:88:4c:e6:10:
88:11:36:1a:69:1f:3b:0f:10:ab:e9:97:ad:79:93:
b1:70:60:da:22:98:f5:e4:0c:8e:ba:27:97:5a:ac:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:83:77:A2:12:EA:36:5B:47:5E:20:01:38:4F:11:31:7A:7A:DB:99
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vIN3ohLqNltHXiABOE8RMXp625k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.161.0/24
82.152.63.0/24
82.152.220.0/24
82.152.223.0/24
82.153.151.0/24
82.153.234.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3e:da:cf:ec:b0:23:99:e0:dc:b8:69:70:67:67:64:70:3c:
84:f9:ee:18:94:b9:ea:c5:8c:f6:fa:18:40:67:34:a5:d0:f8:
9f:09:38:78:a8:db:be:7c:93:23:63:cc:42:e6:07:96:c0:e8:
6c:5f:3d:9a:94:d8:2c:ed:a0:2d:b0:e9:9f:79:be:82:6b:e0:
41:1b:b9:85:d2:a8:6e:99:20:b5:ad:00:f7:0f:04:e9:ef:e7:
ff:b7:58:86:c3:73:2a:ef:ca:58:b3:16:04:c7:cf:0a:c0:04:
3d:47:8e:f4:62:5f:5a:53:cf:af:38:58:4f:93:9a:9e:ae:24:
1f:c0:39:ea:18:dd:b4:39:42:c1:d5:0f:ad:c3:23:ee:7d:e2:
76:7e:31:7b:25:1b:48:89:20:e8:4e:8f:0f:37:8b:09:ea:15:
8c:ef:28:c9:1b:7f:e0:05:4f:b9:3f:7a:13:ff:3b:28:5b:cf:
ba:49:f9:4f:7f:9a:e5:59:d2:ba:67:54:9c:ba:3a:95:bc:9a:
00:fa:f7:ac:2a:5d:21:b2:12:d1:68:12:07:8e:5d:f0:58:3c:
ac:d0:f4:49:e5:44:da:03:83:16:b2:4e:24:1d:f9:55:6c:94:
29:fa:0e:c6:a3:25:ab:e0:98:15:99:26:41:78:1d:d7:6a:6e:
84:95:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:01 2026 by rpki-client