Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pIb6mrJIwAXUG6nM0M6VweJu_Gk.roa
File: pIb6mrJIwAXUG6nM0M6VweJu_Gk.roa (raw, json)
Hash identifier: p6XHY1BGgyn1hx7Ox2l8PPRi63SysJqZE69GHcMtQPw=
Subject key identifier: A4:86:FA:9A:B2:48:C0:05:D4:1B:A9:CC:D0:CE:95:C1:E2:6E:FC:69
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FA27048FD958395CD9554C4006ADCB828
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pIb6mrJIwAXUG6nM0M6VweJu_Gk.roa
Signing time: Mon 27 Jul 2026 07:18:15 +0000
ROA not before: Mon 27 Jul 2026 07:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 213.210.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:70:48:fd:95:83:95:cd:95:54:c4:00:6a:dc:b8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 27 07:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a486fa9ab248c005d41ba9ccd0ce95c1e26efc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1d:53:71:c3:54:06:af:7b:ec:4a:66:06:a2:
c3:ac:c5:50:f6:74:0f:72:4f:ec:d4:5e:da:07:13:
2e:fe:c2:88:78:da:59:06:4d:e3:50:f4:65:da:7f:
23:de:d0:4a:96:19:e3:81:d2:18:d9:6d:d4:a5:64:
32:f8:f2:36:a8:14:76:db:63:08:b2:e6:0b:7f:32:
56:43:9a:c9:77:ed:71:de:e5:0a:3d:6f:24:31:2f:
bd:3a:11:02:23:37:e2:9d:54:bd:87:22:b7:a3:7e:
92:24:66:c5:f4:d1:ae:23:dc:c8:38:df:19:49:9e:
18:a4:a7:e3:22:c7:88:46:c3:23:36:6d:b3:32:79:
c7:d7:13:7e:8b:21:f2:45:7b:94:cf:d9:12:a9:31:
cd:5f:43:a8:7b:9d:ea:59:81:43:ff:a7:c9:28:9f:
9d:dd:14:9c:5b:34:42:b6:b9:34:b4:89:c6:9c:da:
0f:bf:75:41:7d:4e:c7:b0:49:09:c5:28:88:a4:a5:
09:99:48:c2:e2:3f:0e:21:39:c4:87:6e:a6:aa:2f:
a0:0a:a0:13:e6:94:fa:5e:26:b7:63:7b:54:cc:ac:
1c:ff:30:f3:22:62:f1:04:74:d5:7c:59:14:c9:46:
de:24:3e:da:79:d4:8b:e8:a2:7d:00:b5:05:6b:55:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:86:FA:9A:B2:48:C0:05:D4:1B:A9:CC:D0:CE:95:C1:E2:6E:FC:69
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pIb6mrJIwAXUG6nM0M6VweJu_Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.24.0/24
Signature Algorithm: sha256WithRSAEncryption
22:00:7e:17:6a:f1:9e:e8:c4:0f:20:db:54:73:64:82:7c:8b:
66:3e:7c:7c:82:53:80:18:08:19:b1:c0:a6:b2:b7:5a:93:de:
2b:5e:ab:ad:df:b1:15:0c:38:bd:d4:85:07:e3:b9:77:53:b3:
f4:a6:27:27:09:ea:fa:b1:31:49:49:b7:c6:5d:9e:18:85:ae:
84:6d:ce:a1:f5:4e:0d:a4:58:70:7e:d3:b4:40:8c:1d:02:44:
39:78:d0:23:a2:04:b4:ff:9e:74:74:2f:29:17:0f:03:c5:a9:
2c:3d:d0:27:a8:6a:95:90:25:9b:07:57:42:fc:4d:ac:3d:7c:
f8:2e:66:13:36:89:d4:54:26:ce:a2:6b:e4:1f:42:a8:23:61:
0e:3a:9e:1e:dc:88:a3:53:db:37:63:c5:f4:75:81:58:e9:6b:
85:79:f7:fd:83:c2:12:8e:4f:fd:64:25:9d:41:c8:8d:9b:45:
d1:8e:01:85:63:e7:9c:5e:83:d0:07:5d:09:c9:e5:9d:ee:2e:
fb:f0:a8:b6:86:36:d2:3c:7e:46:1b:40:93:61:e6:b0:93:1e:
b7:5e:50:11:71:11:8e:d2:28:c0:50:75:09:39:1a:72:35:0f:
4e:0e:27:8a:67:63:9f:9d:9c:f8:d1:b8:f2:fb:98:e6:1e:34:
22:ea:5f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:40:16 2026 by rpki-client