Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xhaiUnsb8n6f6_Ug6U4AwLLTRes.roa
File: xhaiUnsb8n6f6_Ug6U4AwLLTRes.roa (raw, json)
Hash identifier: OfeXogGyhsgbBg0DKFhLQ0sIMpPZ6SvYwU2aRLhYd+s=
Subject key identifier: C6:16:A2:52:7B:1B:F2:7E:9F:EB:F5:20:E9:4E:00:C0:B2:D3:45:EB
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FEAB18163103F86D3C4AB975F8BD13048
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xhaiUnsb8n6f6_Ug6U4AwLLTRes.roa
Signing time: Mon 10 Aug 2026 08:02:09 +0000
ROA not before: Mon 10 Aug 2026 08:02:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149513
IP address blocks: 81.168.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:b1:81:63:10:3f:86:d3:c4:ab:97:5f:8b:d1:30:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 10 08:02:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c616a2527b1bf27e9febf520e94e00c0b2d345eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:46:b6:7b:23:c1:9d:e5:3d:a1:4c:09:ab:
75:ce:9b:1d:f2:69:2b:ed:a0:0c:d1:ef:9b:57:f1:
b4:41:bd:99:3d:f7:45:13:b5:f3:1a:07:cb:d7:83:
01:a0:b1:c5:f2:bb:db:a6:5f:8c:40:ee:46:b9:c8:
db:68:15:03:dc:a9:49:18:c6:2b:35:90:e4:b4:5a:
92:26:67:15:b6:de:bb:21:3b:0a:64:77:61:9a:4d:
20:82:83:51:07:60:09:9e:d8:89:b4:eb:f4:e6:9c:
27:98:e5:0e:0c:9f:10:6c:70:d8:eb:d0:29:d4:c4:
78:30:82:aa:b3:85:38:4f:e6:3f:06:38:d7:00:bc:
fd:b2:1d:53:c2:04:4a:f0:c2:a6:fd:90:63:84:8f:
1a:57:bc:65:9d:5e:33:fa:9a:6d:26:8c:28:6e:f1:
14:34:e6:ac:76:a1:ea:4d:ba:01:a6:cb:68:65:2f:
fb:a7:0a:f6:09:80:27:0b:0f:cb:f1:14:05:5f:5d:
f6:c3:fa:15:b2:72:13:3a:c0:a2:f9:c4:4a:e2:cd:
cf:b4:da:6c:3e:07:5b:f5:fa:98:35:ec:13:80:4c:
30:94:ab:c8:79:c5:15:fb:0d:6f:12:85:fc:2b:b6:
51:b2:17:53:e2:0e:2f:ce:57:dd:36:48:62:36:4e:
ce:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:16:A2:52:7B:1B:F2:7E:9F:EB:F5:20:E9:4E:00:C0:B2:D3:45:EB
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xhaiUnsb8n6f6_Ug6U4AwLLTRes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.109.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4e:e4:5c:44:d5:0d:83:d6:16:9e:cd:7f:00:96:43:63:69:
2f:a1:b4:e0:8e:75:e7:f8:80:72:ba:dd:8d:15:11:df:9e:68:
9a:c2:1c:5b:28:42:e3:3f:52:74:df:cb:70:ac:e6:dc:49:48:
03:79:fd:c1:f1:d8:62:1b:67:6b:6a:89:3a:1c:31:17:99:2d:
01:e0:f5:ae:3f:b8:1d:9a:73:05:88:c8:3d:17:4d:6f:13:84:
bb:aa:77:3f:89:6b:cf:96:20:da:d0:ee:a0:52:8a:fb:e9:49:
37:da:e5:c8:ef:a1:d1:62:b4:2b:2d:61:26:06:41:6e:23:0c:
ce:30:06:53:4f:25:9e:5b:56:47:06:0d:eb:6b:02:d6:71:2d:
11:be:39:00:9d:57:22:31:b1:5b:59:d7:6c:5c:04:c9:64:78:
aa:d7:72:7d:dd:59:40:68:93:e3:a5:94:2d:58:4f:0f:f0:83:
7a:d6:f5:cd:74:bf:55:e0:0d:31:f8:04:1a:37:13:81:63:7e:
a1:e0:91:98:1e:34:93:e9:7b:fe:3d:77:f2:92:4a:e7:6a:07:
c1:bb:ee:43:14:ff:ac:29:65:f9:7d:9a:92:c1:dc:c9:97:f6:
6f:3b:41:cb:e1:e3:b2:88:5d:c7:a5:2e:08:67:af:b0:f8:8a:
f7:f9:a9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:31 2026 by rpki-client