Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EAtmTb6eY_Kh2tpY1eemuNk2IcQ.roa
File: EAtmTb6eY_Kh2tpY1eemuNk2IcQ.roa (raw, json)
Hash identifier: NSsEtqc2H33tFzBReIZM9F4DY1jFzuk4PDPeusHpqg4=
Subject key identifier: 10:0B:66:4D:BE:9E:63:F2:A1:DA:DA:58:D5:E7:A6:B8:D9:36:21:C4
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0AE1FB5CAE97763B6D73C37C8F4410E7B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EAtmTb6eY_Kh2tpY1eemuNk2IcQ.roa
Signing time: Thu 17 Sep 2026 06:48:28 +0000
ROA not before: Thu 17 Sep 2026 06:48:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 81.168.58.0/24 maxlen: 24
81.168.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:1f:b5:ca:e9:77:63:b6:d7:3c:37:c8:f4:41:0e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 17 06:48:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=100b664dbe9e63f2a1dada58d5e7a6b8d93621c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:9e:9d:bc:77:1c:0b:db:47:55:24:dc:56:
85:7e:4c:ac:c1:9b:e4:35:26:2e:e3:c8:c5:8c:ac:
45:35:f0:ca:ea:55:da:88:0f:f5:0a:cd:f2:24:dc:
ce:1b:56:74:14:58:89:12:65:d2:26:ab:4c:89:bc:
b4:89:f9:a4:9d:01:85:e8:05:85:90:46:96:99:ee:
1d:2e:bf:0b:1f:fe:c6:c5:9a:df:6d:1d:65:a7:40:
98:8b:91:67:a5:ce:43:12:05:52:56:94:49:18:47:
84:bc:de:f4:35:99:af:90:e6:4a:0b:38:f2:70:f5:
5c:34:bb:d4:36:a2:d4:34:04:18:a2:7e:1a:5d:f7:
fb:69:78:3f:af:ae:d4:b1:f8:f2:60:f0:9f:94:1e:
4f:44:48:62:46:52:5f:e0:77:24:88:18:a6:c6:30:
c8:1d:90:45:23:a8:c6:a6:7d:02:65:5a:84:68:a4:
7e:e2:44:9e:ce:40:94:be:b4:0a:f3:17:1f:bd:1c:
e5:16:81:2e:b2:4c:63:c3:02:ba:e6:ef:81:63:17:
7d:11:83:86:c6:9e:72:06:06:32:83:25:89:b7:9a:
44:90:e9:f9:92:51:9b:86:37:93:f4:bf:44:cd:05:
76:f5:a6:c5:d9:b3:63:45:62:ea:70:79:6f:65:38:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0B:66:4D:BE:9E:63:F2:A1:DA:DA:58:D5:E7:A6:B8:D9:36:21:C4
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EAtmTb6eY_Kh2tpY1eemuNk2IcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.58.0/24
81.168.109.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:61:b4:a4:6e:08:d1:e6:ba:45:73:ce:4b:9b:3a:6f:52:3c:
ab:1e:b7:aa:4d:08:9e:19:44:b5:30:af:3c:17:a4:59:d2:82:
22:04:c8:4f:b4:fc:5b:6b:46:8a:0f:95:4f:9d:4a:88:d5:79:
9e:a4:eb:96:a5:64:11:ae:33:31:5e:76:b5:06:30:39:28:7b:
11:77:8d:af:20:79:f1:4e:f2:17:43:1e:55:d5:c9:12:3e:26:
f8:8b:c4:3f:9d:cc:98:43:a1:94:75:43:63:96:31:3d:8f:43:
e4:eb:18:ff:4a:e8:6a:59:a1:17:42:71:58:da:4d:a4:13:b5:
42:71:36:a2:65:39:6e:f3:86:ec:e2:ab:53:69:d5:f6:57:4a:
fb:e3:eb:e4:85:64:d1:c0:97:10:d7:da:59:5a:78:49:5f:f5:
d6:f2:68:6c:65:24:3d:dc:c0:94:2e:7a:ae:af:6b:1c:cc:e4:
03:69:94:ac:59:08:29:70:77:51:41:d6:20:c4:6b:ec:43:d4:
c0:a3:ae:34:46:20:1d:96:b6:07:08:72:a7:a9:37:67:cd:ba:
c8:0f:8f:03:b8:5f:b7:50:44:67:ab:49:ac:93:f2:9e:df:22:
ae:b8:95:23:f0:94:7e:81:e0:08:e8:9e:a9:b0:96:ea:d7:a3:
46:97:b6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:32 2026 by rpki-client