Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/82B8Dem1-lLkGGxQYnU7OPsqeL4.roa
File: 82B8Dem1-lLkGGxQYnU7OPsqeL4.roa (raw, json)
Hash identifier: CfKXVlbjL1CLw0f1Lif0YcqnlYTMZ1v89VeemsEB7n4=
Subject key identifier: F3:60:7C:0D:E9:B5:FA:52:E4:18:6C:50:62:75:3B:38:FB:2A:78:BE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0AA2FB384397DF1CB5FED4D0FCB2796C1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/82B8Dem1-lLkGGxQYnU7OPsqeL4.roa
Signing time: Wed 16 Sep 2026 12:27:27 +0000
ROA not before: Wed 16 Sep 2026 12:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205089
IP address blocks: 153.76.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:2f:b3:84:39:7d:f1:cb:5f:ed:4d:0f:cb:27:96:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 16 12:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3607c0de9b5fa52e4186c5062753b38fb2a78be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:8b:eb:2b:78:cc:1c:85:2b:db:4d:fd:03:
33:2e:ce:f0:4b:1b:97:3e:01:91:b8:81:92:35:6b:
d0:b4:88:c6:b7:88:e1:18:75:de:7c:90:3c:28:57:
c9:2c:76:a2:ed:3b:1b:2b:f1:7b:94:89:2a:93:0c:
7d:65:57:36:92:0c:de:5b:93:72:1c:28:e9:8d:37:
16:50:70:b7:9e:b5:3e:96:b1:0d:48:b7:4a:c2:81:
27:02:48:47:04:56:d4:12:d6:44:2f:21:bd:e4:3c:
fb:fd:62:5e:9d:1f:22:62:93:14:b2:aa:3a:b3:21:
dc:36:8d:ea:f6:38:e3:73:64:16:96:71:f3:90:e2:
f5:db:b9:ef:97:20:df:f9:9d:0d:1f:55:d4:16:09:
60:3c:87:82:14:7b:36:12:50:bd:4e:83:40:63:08:
f5:8c:c2:91:7d:0a:1c:ae:30:9f:ff:06:f6:3c:31:
78:a0:1a:15:41:6e:5b:f8:be:fb:e9:b2:03:33:19:
27:00:24:9c:e8:57:e6:73:5f:85:f5:39:8b:af:34:
3f:2d:31:8a:61:ef:9c:e7:73:5d:66:20:33:5e:27:
38:f1:47:ad:1a:36:5f:d6:bb:16:40:a3:e2:d3:51:
d6:61:e3:65:e3:9c:70:1e:36:28:35:88:15:8e:08:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:60:7C:0D:E9:B5:FA:52:E4:18:6C:50:62:75:3B:38:FB:2A:78:BE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/82B8Dem1-lLkGGxQYnU7OPsqeL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.190.0/24
Signature Algorithm: sha256WithRSAEncryption
35:20:f3:a2:c9:89:d4:2d:23:c2:e9:cd:f1:ff:93:53:18:67:
83:49:98:e9:76:77:38:ef:06:1e:a5:73:5f:b4:86:71:ef:4d:
3a:6e:0c:ed:f1:ba:5d:33:07:48:d1:cf:46:cb:0f:e8:90:ea:
51:f7:6d:ad:08:7b:8a:4b:c4:4b:9c:62:ae:10:dd:7d:3f:5d:
2a:0f:38:16:b9:95:a3:5a:ad:fe:8b:54:f2:7e:5e:39:aa:20:
69:cc:00:9d:72:df:86:5d:2e:ff:9c:fd:2a:bf:40:32:67:5a:
81:4c:5f:72:4b:ae:22:61:6c:ac:72:66:a8:6a:ff:3d:16:57:
4a:b0:7f:3a:7f:5c:74:e3:39:53:0a:ae:d2:66:d3:eb:2d:e7:
83:54:b7:9a:5e:06:2f:60:b9:c1:13:b8:a5:f3:cc:6c:13:0a:
c1:00:39:b1:44:c1:a1:03:c5:ae:93:e7:96:22:f4:37:66:0b:
15:dd:e2:cf:46:b4:97:9b:7e:ec:9a:0a:e9:05:b1:9b:5d:ee:
44:56:70:e5:93:0c:c7:3c:bb:ad:a4:5d:9c:67:de:96:c6:d7:
d4:01:4e:0f:e1:ff:d0:c0:42:82:c5:8d:5d:63:d3:d7:b2:db:
25:42:c6:55:bb:89:39:5d:d2:e3:eb:d9:3c:ef:8f:e4:ad:c4:
a0:0e:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:33:38 2026 by rpki-client