Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2MScCluBusZy3IStpYfkshEvnkI.roa
File: 2MScCluBusZy3IStpYfkshEvnkI.roa (raw, json)
Hash identifier: sK4dklyfeOPFvgdtvw6BdKYqV5L5h8aphaLwXMdI5Ys=
Subject key identifier: D8:C4:9C:0A:5B:81:BA:C6:72:DC:84:AD:A5:87:E4:B2:11:2F:9E:42
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FA7E38DF754D5748FD266A1345B3E13AF
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2MScCluBusZy3IStpYfkshEvnkI.roa
Signing time: Tue 28 Jul 2026 08:42:15 +0000
ROA not before: Tue 28 Jul 2026 08:42:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 81.5.161.0/24 maxlen: 24
81.168.107.0/24 maxlen: 24
82.152.60.0/24 maxlen: 24
82.152.63.0/24 maxlen: 24
82.152.69.0/24 maxlen: 24
82.152.220.0/24 maxlen: 24
82.152.223.0/24 maxlen: 24
82.153.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:e3:8d:f7:54:d5:74:8f:d2:66:a1:34:5b:3e:13:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 28 08:42:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8c49c0a5b81bac672dc84ada587e4b2112f9e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:6b:66:16:35:46:69:37:10:cf:f2:82:db:
31:21:ed:b0:04:cd:4e:e5:76:08:2d:1e:24:8c:c6:
fb:fe:4a:f3:1d:d6:b0:7d:e5:78:7e:d8:fa:b7:a1:
a9:5a:22:4c:28:ed:15:3d:8f:04:9e:d2:12:23:4e:
e9:a3:68:f9:31:61:ba:c6:72:c5:98:f2:e4:47:bb:
01:76:62:7c:d9:af:e9:76:18:32:f0:d1:b8:f3:2a:
76:fd:5d:d6:fc:a1:32:71:ae:6b:40:e1:97:6f:56:
c2:3e:19:af:06:58:63:62:bb:77:07:a4:18:09:d4:
7e:4c:89:e1:e8:1f:83:8f:da:60:d4:9a:c4:ac:6c:
35:39:9e:01:af:07:c6:9f:50:29:07:21:c7:44:13:
e6:f3:ba:9e:f1:51:89:85:da:d9:59:23:25:b1:b5:
53:1d:07:ac:85:c1:94:18:44:cd:04:f1:e0:a4:4e:
1f:3d:11:58:b3:98:53:98:b1:7f:57:f0:3e:77:5c:
f4:a5:17:98:ff:f8:2b:62:76:c7:c2:45:6e:ce:33:
39:f7:d2:1a:77:5c:3c:82:66:16:83:74:58:27:08:
23:42:e1:b1:8c:5e:b5:de:f3:1c:a4:49:e6:ea:b2:
2d:8c:2c:17:53:00:53:fc:07:7a:fc:7e:3b:e6:2b:
19:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C4:9C:0A:5B:81:BA:C6:72:DC:84:AD:A5:87:E4:B2:11:2F:9E:42
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2MScCluBusZy3IStpYfkshEvnkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.161.0/24
81.168.107.0/24
82.152.60.0/24
82.152.63.0/24
82.152.69.0/24
82.152.220.0/24
82.152.223.0/24
82.153.234.0/24
Signature Algorithm: sha256WithRSAEncryption
57:65:dd:ba:59:c3:28:88:11:10:4c:53:b1:e3:82:6b:7e:b4:
dc:0b:d6:4c:a9:5f:2b:e7:68:83:2f:1c:45:38:db:a5:58:9b:
62:f5:ed:4b:e1:22:16:d6:8e:d3:73:a3:47:c3:5a:1a:ed:09:
15:36:da:1b:ee:9f:95:5e:b3:fb:f5:f0:e6:39:26:70:bb:5c:
b6:f4:55:45:a2:db:fc:9a:a6:f7:f6:94:38:3c:ba:b6:5b:0d:
c4:a5:67:71:74:f8:f3:25:da:eb:8f:0b:4c:cb:29:a2:47:78:
7d:03:a2:1d:06:20:0c:9f:eb:d2:c3:0f:bb:33:52:fd:0e:4a:
24:c7:d7:ef:b9:2b:fb:51:45:3d:1d:4f:f6:64:cf:03:c9:2b:
f0:59:f5:b7:09:5e:dc:7e:33:d2:56:f7:7d:80:33:39:03:4e:
8d:83:00:21:4c:8c:46:c4:b9:7b:b4:89:9f:21:38:a8:7f:5b:
14:54:1d:be:2a:ab:f9:9e:86:01:2a:74:2f:7c:0d:87:bc:45:
9a:d4:a8:45:95:ee:19:32:86:2f:3e:9e:35:43:44:35:d0:eb:
50:2f:1e:d6:9b:97:0b:92:79:5e:87:51:ae:00:b6:03:ae:ab:
fd:72:bf:9e:0a:48:a7:8a:83:42:3b:f3:80:5e:2e:50:b4:74:
d2:67:22:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:39:21 2026 by rpki-client