Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zdIxMjF3XFNZHBH3KtlU79VF3jY.roa
File: zdIxMjF3XFNZHBH3KtlU79VF3jY.roa (raw, json)
Hash identifier: 0mQcoBrrvCfLpH+X1OhWd63Uji9f+KY6g1cUpHm25Xs=
Subject key identifier: CD:D2:31:32:31:77:5C:53:59:1C:11:F7:2A:D9:54:EF:D5:45:DE:36
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FD609374C7DEDC915697BE87C9FA6D67C
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zdIxMjF3XFNZHBH3KtlU79VF3jY.roa
Signing time: Thu 06 Aug 2026 07:45:55 +0000
ROA not before: Thu 06 Aug 2026 07:45:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219121
IP address blocks: 81.168.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:09:37:4c:7d:ed:c9:15:69:7b:e8:7c:9f:a6:d6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 6 07:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdd2313231775c53591c11f72ad954efd545de36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:67:99:f3:32:c2:96:4e:e5:64:a1:a4:bd:6b:
f6:e9:ae:4e:0a:e6:49:35:01:74:fe:25:55:e3:35:
23:ab:d7:6f:d8:f8:d2:14:e6:e8:8e:e6:60:dd:70:
d8:14:67:07:09:f5:d5:74:bb:28:1f:9e:d0:06:56:
4a:f1:8c:2a:ed:5f:03:08:56:9a:d2:c6:93:d3:1f:
54:ea:b4:a3:09:22:32:02:68:88:2e:fe:cd:39:f6:
1c:e2:23:98:75:72:b8:0d:b8:71:b2:cd:9d:a4:40:
db:03:2a:dc:d5:2e:82:cd:8c:f0:30:c4:5c:6a:6e:
12:4f:59:8a:50:55:3e:8e:1c:a3:25:38:ce:3b:d7:
5c:ff:bc:cf:da:74:5c:e8:97:f7:29:6f:fd:15:f8:
45:00:de:fd:4f:5d:c4:31:db:14:e0:c4:16:0e:5d:
23:f6:a4:4a:44:5e:2b:b1:df:f9:9f:c3:59:fc:c7:
1c:18:e9:7b:c2:40:82:ed:4e:36:cc:6e:0e:d5:4d:
75:ad:c8:bd:3d:27:f9:11:93:59:ca:c7:96:5c:1c:
73:fe:dd:44:d9:98:99:64:74:1d:f8:39:2e:94:42:
af:4d:ed:55:bb:78:24:1b:e3:f6:69:43:eb:a6:c0:
bf:33:29:e9:d8:a5:1e:16:e2:8f:e0:5a:85:9f:36:
dd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D2:31:32:31:77:5C:53:59:1C:11:F7:2A:D9:54:EF:D5:45:DE:36
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zdIxMjF3XFNZHBH3KtlU79VF3jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.87.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:25:a0:d2:a3:2b:bd:54:d1:35:e6:d3:0a:42:98:d0:9f:0b:
f6:e6:6f:80:62:7d:b8:67:b3:f6:f8:23:a9:94:dc:e8:9c:1f:
5c:e1:28:4e:6a:62:c0:2a:f5:47:ed:94:de:29:07:9d:bc:a7:
ed:7d:d9:e1:ed:0c:a5:b7:b3:2d:73:a5:84:48:e3:3f:b7:c8:
3f:75:1f:d6:02:d0:51:2e:73:18:1d:52:ae:f8:a2:e8:87:40:
b1:52:76:f8:85:f3:26:76:eb:ba:37:03:e0:81:42:05:d9:eb:
bd:d3:13:a2:08:2c:86:87:99:58:7e:c8:59:c3:1c:f7:67:f9:
16:be:e0:e6:b3:3d:4b:31:3b:0e:f8:9c:c4:8b:78:89:5f:8e:
ea:79:fc:a2:c5:57:a8:ac:e9:f4:ca:5e:c9:a8:07:9b:14:cb:
27:65:17:3a:e2:5f:05:be:a7:08:7c:47:63:44:01:ea:f9:3b:
5b:6e:78:72:4c:28:3d:58:45:4c:1e:6d:c7:d2:98:e1:13:5a:
e2:53:98:69:bc:bb:cf:ab:d6:a0:0b:59:f8:07:4d:74:41:79:
ad:a5:f3:c0:11:41:0f:8e:69:06:34:f4:41:10:1b:85:4e:9a:
81:ff:04:85:67:68:58:2c:d7:24:b7:77:26:87:22:74:b9:32:
36:65:fa:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/WCTdMfe3JFWl76HyfptZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODA2MDc0NTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGQyMzEzMjMxNzc1YzUzNTkxYzExZjcyYWQ5NTRlZmQ1NDVkZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72eZ8zLClk7lZKGkvWv26a5OCuZJ
NQF0/iVV4zUjq9dv2PjSFObojuZg3XDYFGcHCfXVdLsoH57QBlZK8Ywq7V8DCFaa
0saT0x9U6rSjCSIyAmiILv7NOfYc4iOYdXK4Dbhxss2dpEDbAyrc1S6CzYzwMMRc
am4ST1mKUFU+jhyjJTjOO9dc/7zP2nRc6Jf3KW/9FfhFAN79T13EMdsU4MQWDl0j
9qRKRF4rsd/5n8NZ/MccGOl7wkCC7U42zG4O1U11rci9PSf5EZNZyseWXBxz/t1E
2ZiZZHQd+DkulEKvTe1Vu3gkG+P2aUPrpsC/Mynp2KUeFuKP4FqFnzbdRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM3SMTIxd1xTWRwR9yrZVO/VRd42MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvemRJeE1qRjNYRk5aSEJIM0t0bFU3OVZGM2pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUahXMA0G
CSqGSIb3DQEBCwUAA4IBAQBdJaDSoyu9VNE15tMKQpjQnwv25m+AYn24Z7P2+COp
lNzonB9c4ShOamLAKvVH7ZTeKQedvKftfdnh7Qylt7Mtc6WESOM/t8g/dR/WAtBR
LnMYHVKu+KLoh0CxUnb4hfMmduu6NwPggUIF2eu90xOiCCyGh5lYfshZwxz3Z/kW
vuDmsz1LMTsO+JzEi3iJX47qefyixVeorOn0yl7JqAebFMsnZRc64l8FvqcIfEdj
RAHq+TtbbnhyTCg9WEVMHm3H0pjhE1riU5hpvLvPq9agC1n4B010QXmtpfPAEUEP
jmkGNPRBEBuFTpqB/wSFZ2hYLNckt3cmhyJ0uTI2ZfrP
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:12 2026 by rpki-client