Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/022aDICrhxDgYpkUG_fEbYasfgM.roa
File: 022aDICrhxDgYpkUG_fEbYasfgM.roa (raw, json)
Hash identifier: XhrfMIeewqPTa72jE8ZN8tf0bH0HFRxspy8uV3+1mg0=
Subject key identifier: D3:6D:9A:0C:80:AB:87:10:E0:62:99:14:1B:F7:C4:6D:86:AC:7E:03
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368ABDEB1FBC39D92C55BE4DA767FD3
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/022aDICrhxDgYpkUG_fEbYasfgM.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9318
IP address blocks: 79.99.76.0/24 maxlen: 24
109.176.10.0/24 maxlen: 24
217.144.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ab:de:b1:fb:c3:9d:92:c5:5b:e4:da:76:7f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d36d9a0c80ab8710e06299141bf7c46d86ac7e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:cd:76:17:5a:aa:7f:85:1d:b4:e5:11:2d:
33:41:60:2b:05:e8:73:0b:a0:d2:e4:31:28:5d:fd:
99:99:bf:dc:85:e6:c0:f8:2e:99:bf:ff:40:ce:41:
31:93:7a:10:56:9f:e4:74:64:67:7f:66:ff:d0:af:
a1:6f:87:33:c6:c4:33:99:2b:b0:b1:5c:a3:b1:0f:
b1:d7:93:32:0a:01:ea:95:4d:c2:cd:dd:bd:96:b4:
f0:c9:bd:1c:45:32:54:c1:e0:13:20:6f:ad:f5:e6:
65:fd:e5:ba:ae:c8:dc:7c:b2:c6:81:28:f0:44:3b:
ef:8c:f5:1c:f5:ba:dc:fe:60:d5:b1:b0:fb:40:c1:
1c:37:f1:b4:4d:69:6c:0a:21:57:fd:44:39:84:f0:
ed:6a:db:87:ad:6f:eb:c8:0f:23:07:82:ea:dd:f9:
47:61:2b:a1:d5:df:d2:18:01:54:60:8c:dd:6d:20:
ba:9f:63:71:54:0a:fb:87:67:12:31:95:37:ba:0c:
81:32:4a:4c:70:93:74:8d:1b:6c:1f:ba:0c:c3:90:
af:57:ed:e6:21:0a:82:0b:8f:ed:25:b7:af:66:22:
ff:7f:4c:d2:1a:ec:92:6e:22:07:3a:7c:35:23:67:
6f:7d:cf:21:b5:6c:53:be:13:89:5b:eb:d1:93:01:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6D:9A:0C:80:AB:87:10:E0:62:99:14:1B:F7:C4:6D:86:AC:7E:03
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/022aDICrhxDgYpkUG_fEbYasfgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.76.0/24
109.176.10.0/24
217.144.158.0/24
Signature Algorithm: sha256WithRSAEncryption
39:88:4c:bd:4f:d2:9a:6a:59:67:eb:aa:cc:6b:00:65:7a:14:
17:44:58:74:98:b0:56:36:d0:cc:e3:41:54:ad:cc:e5:df:42:
31:2c:d3:c8:34:03:34:dc:0a:02:37:e2:1b:1d:e3:73:9e:9e:
af:7f:90:20:59:eb:c4:34:2c:5d:46:bc:b4:b8:7c:b2:db:9d:
fc:dc:12:63:59:30:57:35:cc:5a:b6:ca:77:2e:0f:76:f4:d6:
e8:73:a5:63:ce:5a:7b:db:d6:10:6a:c6:f9:d3:5b:10:ee:6e:
ac:1e:70:d8:65:f9:2d:5e:3e:9e:58:98:c2:1c:ed:9f:23:79:
2a:fb:f8:47:ea:96:bd:02:2f:9d:dc:99:3e:48:87:82:a0:11:
fa:f8:19:2f:86:a3:81:cd:bd:c5:7b:95:27:fb:41:48:fc:fe:
ff:df:06:d3:a0:31:8a:95:64:e4:0f:f8:f2:b2:a3:1b:79:48:
96:bd:ac:76:78:92:a7:2a:f3:20:f2:64:22:4b:76:2d:e2:97:
44:1e:95:91:ea:d8:d0:cf:0c:0d:91:94:65:6b:a6:54:f1:d8:
05:f3:37:b2:b9:d4:1c:b4:3c:0c:c9:e9:a6:7c:b2:c2:be:7a:
d1:b9:39:4b:d4:60:a6:84:a1:db:7a:74:1e:04:f1:63:7b:44:
b1:96:88:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:18:12 2026 by rpki-client