Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zrxpDE0oHLYgmvYTBqJ6afHrkl0.roa
File: zrxpDE0oHLYgmvYTBqJ6afHrkl0.roa (raw, json)
Hash identifier: dQs1JXZbBcxr1J82PYTerjjpm2M10UZQoKwIVT6P0K0=
Subject key identifier: CE:BC:69:0C:4D:28:1C:B6:20:9A:F6:13:06:A2:7A:69:F1:EB:92:5D
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FEFAF56909A023DD7B9BE293EF6B7D581
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zrxpDE0oHLYgmvYTBqJ6afHrkl0.roa
Signing time: Tue 11 Aug 2026 07:17:53 +0000
ROA not before: Tue 11 Aug 2026 07:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213476
IP address blocks: 81.168.18.0/24 maxlen: 24
82.163.0.0/24 maxlen: 24
89.28.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:af:56:90:9a:02:3d:d7:b9:be:29:3e:f6:b7:d5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 11 07:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cebc690c4d281cb6209af61306a27a69f1eb925d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:3b:c0:6f:5f:1a:74:84:60:a0:74:11:07:
0b:4e:e0:83:76:fe:a1:62:2a:64:64:08:b2:01:a0:
1d:8d:e7:40:24:d8:52:1f:46:ff:38:9c:4c:3b:96:
6f:6e:d2:e7:7e:d5:59:6b:dd:d2:d7:cf:95:ff:51:
26:16:1f:a0:f0:0d:5b:cd:33:2b:72:47:9a:41:a5:
8f:9a:71:ec:e2:4a:dc:76:38:3d:7e:7f:a0:c7:23:
1a:28:81:82:e0:55:f1:aa:81:df:90:33:1b:c1:4f:
e9:9e:68:36:38:15:17:c4:39:dc:50:36:0b:47:85:
5c:af:25:b7:07:be:0f:2d:2e:75:16:46:73:db:74:
c9:72:b1:a8:43:5d:7f:4f:09:fe:26:37:81:bb:f6:
b9:6d:17:9f:4d:61:40:31:3a:be:2e:72:d5:20:ee:
06:f6:b5:1f:98:e9:34:5d:8e:7c:b4:74:55:04:85:
0d:a4:4b:73:d9:e2:48:c0:18:83:4d:ae:51:21:74:
58:7f:bd:80:c6:aa:e7:12:31:c8:91:3f:c8:2e:9a:
8a:3c:fc:67:35:6e:33:43:20:95:00:12:d3:e3:b9:
db:ce:c3:9e:c0:bf:82:21:59:d2:5a:45:65:bb:a6:
29:a8:b9:ea:8d:b5:a3:ee:e1:49:4c:f2:45:96:03:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BC:69:0C:4D:28:1C:B6:20:9A:F6:13:06:A2:7A:69:F1:EB:92:5D
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zrxpDE0oHLYgmvYTBqJ6afHrkl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.18.0/24
82.163.0.0/24
89.28.234.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ad:44:85:72:87:96:85:1d:f8:d1:9b:ab:de:5f:81:b3:67:
4f:02:54:ac:69:80:07:4f:af:d9:c2:a1:72:67:6b:f5:0f:f0:
c8:5f:22:aa:58:d6:38:7a:72:36:d6:59:40:2b:93:c2:87:85:
aa:8c:9e:c9:32:93:84:10:93:34:c0:91:39:00:88:aa:eb:10:
19:8f:e9:80:8e:55:8c:db:ef:f1:bd:03:20:6d:44:06:b7:ad:
21:d3:f6:01:c5:c0:65:71:d4:7d:bf:73:27:8b:c0:d0:23:d7:
e0:c3:78:37:a8:20:8e:da:c9:92:3f:8f:99:8e:f1:95:75:3f:
e3:dd:a5:95:ea:3f:6c:7b:31:26:a4:0b:9c:7f:68:b6:cb:b2:
4b:69:86:86:47:c6:cc:bc:52:97:a9:40:a7:e4:9c:da:21:25:
b4:0f:9e:63:c6:b5:0c:40:ef:18:aa:70:9a:4d:64:91:43:d9:
57:aa:39:83:da:d6:4b:08:a1:24:49:67:fd:a9:19:69:f5:cf:
47:d1:05:37:17:93:e1:1a:f9:d3:9b:f4:d2:e2:11:8c:cc:0a:
95:52:72:0e:a2:dd:f7:b8:1b:1e:74:3c:0b:e2:08:11:67:85:
0b:57:d4:c3:6f:5b:73:39:8f:e6:78:8b:78:b4:ab:81:ec:7b:
ab:a2:4b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:48 2026 by rpki-client