Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dmfBWYVfWlPOblq2mZ7vOQFJo-s.roa
File: dmfBWYVfWlPOblq2mZ7vOQFJo-s.roa (raw, json)
Hash identifier: Y7jjtUSDXbhH+0L1jWNyqjxTTqPrkrkH06iCoV1TJto=
Subject key identifier: 76:67:C1:59:85:5F:5A:53:CE:6E:5A:B6:99:9E:EF:39:01:49:A3:EB
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A12FA66FB6F1601E7D990F694C80DFEBC4
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dmfBWYVfWlPOblq2mZ7vOQFJo-s.roa
Signing time: Mon 12 Oct 2026 10:26:39 +0000
ROA not before: Mon 12 Oct 2026 10:26:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402899
IP address blocks: 82.152.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:a6:6f:b6:f1:60:1e:7d:99:0f:69:4c:80:df:eb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 12 10:26:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7667c159855f5a53ce6e5ab6999eef390149a3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:dc:e7:c1:82:7a:50:91:1d:a0:64:fc:b4:
5d:d4:d6:e8:ea:a7:40:a8:6a:4c:40:51:e2:ff:c3:
9a:e2:d2:1d:d8:1b:03:24:f9:df:ab:5a:30:01:b4:
08:4e:16:7e:91:06:bf:8a:92:05:d2:1a:73:27:a4:
ea:f1:58:64:79:79:55:e4:24:e9:8a:36:b9:c3:66:
4b:95:82:94:09:4b:50:35:fe:f0:57:4b:37:5e:f8:
5e:6c:cd:bb:18:67:fa:97:93:94:6c:b6:42:ff:2b:
73:8b:a1:d8:3d:50:db:bc:bf:94:d6:56:85:b8:d1:
99:22:c6:8b:3f:19:65:db:e9:98:0d:23:33:e8:3e:
5d:8e:f2:80:fa:c0:ba:4a:66:58:79:31:bf:3c:bc:
f7:9a:a4:6f:d2:7a:71:9a:46:54:c6:50:7f:45:49:
40:c0:14:27:91:5b:0f:b2:f3:0d:81:93:0c:64:51:
e5:f4:e1:23:3f:cd:07:be:b3:14:75:6e:7d:d7:6b:
c5:ca:45:36:50:f1:ee:7d:35:45:3f:d2:f5:8c:d3:
1a:c6:b9:7b:97:61:47:ab:ed:81:10:df:b5:7e:27:
5f:77:70:28:76:30:b5:86:de:32:40:d7:e1:9e:fd:
02:94:45:ed:74:48:ed:d6:0f:67:e8:33:d9:df:3a:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:67:C1:59:85:5F:5A:53:CE:6E:5A:B6:99:9E:EF:39:01:49:A3:EB
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dmfBWYVfWlPOblq2mZ7vOQFJo-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.6.0/24
Signature Algorithm: sha256WithRSAEncryption
46:70:db:ad:ec:51:84:83:be:24:05:e8:af:a8:57:bf:c7:c1:
26:89:db:60:b3:77:61:b6:77:10:b6:15:10:ea:71:34:d8:9a:
14:2d:dc:d2:c6:de:85:2b:89:8d:c1:76:3b:17:15:2b:64:ee:
73:43:6b:3c:7a:c6:d5:c9:94:7f:6f:eb:97:b8:ed:bd:b5:28:
53:a3:e3:02:08:6c:e7:b9:d4:2b:21:26:26:8c:b8:36:7c:b6:
23:f5:a7:1e:eb:e5:54:f0:96:73:0b:d3:67:13:0b:5d:a5:cf:
e1:78:e8:fb:b8:05:bc:e3:4e:53:92:d9:85:d8:05:05:97:50:
1c:a6:f6:f9:aa:02:45:82:ac:e4:2b:8e:35:1d:55:98:d9:4d:
f7:ab:2c:25:5c:93:f1:3f:e0:d2:f5:50:cd:6c:bc:1d:d1:c5:
cb:b0:29:04:41:5e:37:52:4d:5e:5c:4f:60:23:10:6b:f8:16:
cb:8d:fc:93:d3:30:5d:44:6b:5f:ec:ba:cd:29:df:56:79:5f:
31:02:6b:85:dd:fd:7e:54:91:f4:20:b6:88:30:2d:f3:73:10:
7c:57:b4:74:1c:6b:e0:01:43:9e:0d:b5:6b:64:d0:2e:30:50:
4f:9b:ff:1b:75:18:2a:fa:30:ef:94:10:5f:80:8c:c6:21:83:
2a:08:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:01:17 2026 by rpki-client