Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x3RHgrvl-yUH6lPcGz1jEWwEGXo.roa
File: x3RHgrvl-yUH6lPcGz1jEWwEGXo.roa (raw, json)
Hash identifier: u2tD6/brQevhmCvy1cFcEPwub/xY6pKJRyJc4U7LJMI=
Subject key identifier: C7:74:47:82:BB:E5:FB:25:07:EA:53:DC:1B:3D:63:11:6C:04:19:7A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368A5FF9C4F67F5C9D0E368BE713375
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x3RHgrvl-yUH6lPcGz1jEWwEGXo.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 109.176.210.0/24 maxlen: 24
109.176.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a5:ff:9c:4f:67:f5:c9:d0:e3:68:be:71:33:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7744782bbe5fb2507ea53dc1b3d63116c04197a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:97:80:4a:03:e6:18:ff:83:e8:5e:57:10:
ac:7e:5e:a8:9e:ff:64:58:0c:7e:ea:d3:32:2d:23:
16:26:88:69:d7:a1:2b:d2:1b:15:61:7b:69:9d:e3:
be:7a:54:7d:8e:17:6e:73:40:e3:62:17:2c:08:67:
65:af:cf:cc:c8:ce:73:d6:da:2c:bd:c4:83:cf:ce:
8f:1b:95:2a:5e:6b:e9:fa:a3:9b:ab:32:4f:0d:4b:
e1:5e:93:8a:cc:25:43:83:24:91:6d:53:e0:11:d3:
93:0e:6f:12:17:05:42:e3:89:6f:df:62:ab:40:48:
64:a6:6d:5c:04:76:11:e4:66:bf:57:0e:d7:f7:c0:
18:6a:92:59:48:6a:33:7f:5c:57:19:ac:85:3e:21:
38:ab:bf:d8:be:6f:33:b2:d1:d1:f5:ec:04:9e:31:
31:22:94:f0:2d:54:2b:cc:21:ed:15:bd:07:59:be:
16:06:83:27:54:6a:c2:0e:54:f5:42:81:26:f3:a9:
65:cf:3e:72:1a:23:39:0d:36:a9:13:26:a3:98:bb:
a0:27:c2:47:ff:54:85:35:99:e1:58:38:85:ae:78:
63:f7:53:1d:8c:9b:1b:5b:93:a0:b7:89:36:83:7c:
46:4c:99:39:c4:10:3c:f0:8a:b2:f3:08:6f:e2:df:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:74:47:82:BB:E5:FB:25:07:EA:53:DC:1B:3D:63:11:6C:04:19:7A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x3RHgrvl-yUH6lPcGz1jEWwEGXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.210.0/24
109.176.241.0/24
Signature Algorithm: sha256WithRSAEncryption
10:30:76:ce:b1:f8:92:86:a4:32:de:06:5c:83:e1:7b:bc:c0:
92:3e:21:15:90:21:9c:34:43:8c:c2:01:09:91:22:ad:97:cf:
6a:2f:96:8f:b9:22:0b:6e:60:f9:62:c5:0a:f9:91:72:c9:be:
c4:14:d8:6d:a0:24:2e:2c:54:1e:88:71:c8:63:c3:c0:fc:d2:
f8:df:71:da:26:85:11:c8:28:9d:7c:72:88:b3:cb:09:91:34:
fa:68:a8:5e:f0:fe:f6:95:07:30:d9:21:26:91:13:8d:ef:7a:
72:50:4f:c2:2d:d6:f2:e9:c0:35:0b:ad:5a:32:29:ec:d1:40:
19:4b:a6:af:fa:e6:6e:1b:b6:fc:8e:45:98:12:00:13:ca:8a:
e5:6a:fd:c7:ad:78:d0:09:b1:aa:52:93:b0:2a:56:d9:4d:27:
49:66:c4:42:cc:4a:f5:d8:81:ed:64:f4:68:7f:1a:4a:2e:81:
81:ab:b2:c6:1e:95:72:b4:5f:f1:48:c9:87:5b:b1:2c:c0:b9:
a3:c1:54:71:d2:03:58:f9:7c:e3:f4:93:02:1d:e3:5e:a7:2d:
8c:1d:2c:01:b3:c7:0d:0b:75:d0:e4:de:61:c8:fc:41:1e:5e:
be:73:00:7e:3c:5e:a7:b8:40:18:0d:05:5c:3f:b2:21:fa:55:
d3:ce:9a:fd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaKX/nE9n9cnQ42i+cTN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzc0NDc4MmJiZTVmYjI1MDdlYTUzZGMxYjNkNjMxMTZjMDQxOTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYGXgEoD5hj/g+heVxCsfl6onv9k
WAx+6tMyLSMWJohp16Er0hsVYXtpneO+elR9jhduc0DjYhcsCGdlr8/MyM5z1tos
vcSDz86PG5UqXmvp+qObqzJPDUvhXpOKzCVDgySRbVPgEdOTDm8SFwVC44lv32Kr
QEhkpm1cBHYR5Ga/Vw7X98AYapJZSGozf1xXGayFPiE4q7/Yvm8zstHR9ewEnjEx
IpTwLVQrzCHtFb0HWb4WBoMnVGrCDlT1QoEm86llzz5yGiM5DTapEyajmLugJ8JH
/1SFNZnhWDiFrnhj91MdjJsbW5Ogt4k2g3xGTJk5xBA88Iqy8whv4t+a4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMd0R4K75fslB+pT3Bs9YxFsBBl6MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEveDNSSGdydmwteVVINmxQY0d6MWpFV3dFR1hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbbDSAwQA
bbDxMA0GCSqGSIb3DQEBCwUAA4IBAQAQMHbOsfiShqQy3gZcg+F7vMCSPiEVkCGc
NEOMwgEJkSKtl89qL5aPuSILbmD5YsUK+ZFyyb7EFNhtoCQuLFQeiHHIY8PA/NL4
33HaJoURyCidfHKIs8sJkTT6aKhe8P72lQcw2SEmkRON73pyUE/CLdby6cA1C61a
Mins0UAZS6av+uZuG7b8jkWYEgATyorlav3HrXjQCbGqUpOwKlbZTSdJZsRCzEr1
2IHtZPRofxpKLoGBq7LGHpVytF/xSMmHW7EswLmjwVRx0gNY+Xzj9JMCHeNepy2M
HSwBs8cNC3XQ5N5hyPxBHl6+cwB+PF6nuEAYDQVcP7Ih+lXTzpr9
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:52 2026 by rpki-client