Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2Ys4OkTqcYKJsqlYFplehqlNd7E.roa
File: 2Ys4OkTqcYKJsqlYFplehqlNd7E.roa (raw, json)
Hash identifier: r1puYxJ2GiiDUp1Ce1C7IK8m9OYL1hV/g+moXzVbHCg=
Subject key identifier: D9:8B:38:3A:44:EA:71:82:89:B2:A9:58:16:99:5E:86:A9:4D:77:B1
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FA7E38CEFBAA065B708F88A8A5D6D2509
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2Ys4OkTqcYKJsqlYFplehqlNd7E.roa
Signing time: Tue 28 Jul 2026 08:42:15 +0000
ROA not before: Tue 28 Jul 2026 08:42:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 81.5.160.0/24 maxlen: 24
81.5.161.0/24 maxlen: 24
81.168.107.0/24 maxlen: 24
82.152.60.0/24 maxlen: 24
82.152.63.0/24 maxlen: 24
82.152.69.0/24 maxlen: 24
82.152.220.0/24 maxlen: 24
82.152.223.0/24 maxlen: 24
82.153.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:e3:8c:ef:ba:a0:65:b7:08:f8:8a:8a:5d:6d:25:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 28 08:42:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d98b383a44ea718289b2a95816995e86a94d77b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:ab:34:be:75:34:e9:40:1e:45:a3:8d:33:
86:3d:cf:fa:c9:04:78:bc:bd:fc:4d:c1:47:b6:13:
4c:d3:36:05:a8:b3:f8:22:19:35:12:a8:e0:48:ff:
7e:ce:b5:8b:fa:48:7e:2f:cb:2f:a1:be:c5:c5:50:
e3:c7:14:79:be:ea:97:54:c7:80:ad:0d:03:b4:6b:
ee:2e:ca:5f:ce:9d:66:a7:9a:e8:3f:7b:89:f0:1d:
02:dd:13:ad:88:65:48:5f:27:3c:e6:4a:73:06:3c:
7c:72:ee:5c:96:62:cb:ff:5b:e3:e9:bd:dc:1e:f8:
2e:49:56:09:2e:6e:e0:6a:ff:01:8e:93:b0:6e:73:
b9:24:eb:3f:fb:9d:80:34:33:13:5a:68:b2:fb:bb:
80:ba:df:58:f5:1d:73:44:4a:7a:60:80:79:49:e5:
9e:49:ca:86:00:e0:04:f0:5a:c1:a6:08:94:25:26:
5e:2d:b2:f2:31:08:81:09:d8:8e:1e:8f:0e:89:0d:
a2:70:6e:47:b3:f3:62:b7:5a:4b:b3:e8:c0:3d:98:
5d:bb:0b:f8:4a:00:35:44:8c:9c:91:79:2f:a0:90:
eb:ef:75:9a:57:ba:9c:a0:27:0e:0d:ec:8e:14:ec:
b1:9d:3f:1f:72:a4:7a:31:bd:04:12:15:38:76:62:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8B:38:3A:44:EA:71:82:89:B2:A9:58:16:99:5E:86:A9:4D:77:B1
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2Ys4OkTqcYKJsqlYFplehqlNd7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.160.0/23
81.168.107.0/24
82.152.60.0/24
82.152.63.0/24
82.152.69.0/24
82.152.220.0/24
82.152.223.0/24
82.153.234.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:86:9b:2f:ed:e2:bd:95:ca:c6:dc:de:bf:91:ca:d9:92:31:
84:69:03:7e:0b:f3:d6:b1:0a:ed:2a:37:90:13:e4:5c:af:41:
04:a5:ee:1d:07:29:0c:8d:97:7c:d6:a7:b9:e8:e0:04:e6:46:
f2:7f:ac:9b:52:b2:44:0b:67:3c:a9:fb:13:76:b5:d6:b4:46:
f1:1f:bc:d4:02:d2:d6:8c:e2:7d:a7:56:6e:35:0d:78:cc:aa:
c1:97:4c:46:c7:6e:75:2f:f1:e2:35:ee:a8:9c:c3:c2:c5:3e:
11:f3:4e:05:f2:2c:d1:2c:d7:9b:3a:15:c8:6f:77:fc:ea:e1:
90:6b:c3:51:7c:81:d0:f0:ac:83:18:b2:99:6d:19:78:b7:0c:
74:70:92:f8:46:13:1d:4e:d3:b6:c3:14:f4:b5:36:29:ac:40:
10:31:27:03:78:09:3e:63:4f:2b:e7:06:2a:ff:db:57:46:03:
df:3c:4b:66:30:14:f7:b8:82:21:5c:60:86:f4:2f:71:20:84:
21:7d:25:1f:2c:d5:b1:65:1f:e5:d1:a3:47:db:3c:e5:cd:ee:
0a:4e:54:e2:9b:a1:70:33:fc:c2:ae:b5:ec:e8:77:5e:bc:36:
d8:75:ba:f1:87:5c:4a:00:ad:89:f3:fd:4c:1f:32:46:6c:ca:
29:5f:7b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:39:25 2026 by rpki-client