Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0DzJK4Mq3ELcRib6i6Hxk03bgIY.roa
File: 0DzJK4Mq3ELcRib6i6Hxk03bgIY.roa (raw, json)
Hash identifier: P7QAs7TdXH4Kby6osML+DvUznFUV4xwWnB3kbZfphRw=
Subject key identifier: D0:3C:C9:2B:83:2A:DC:42:DC:46:26:FA:8B:A1:F1:93:4D:DB:80:86
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368A6390A52EAB704520BEB41795E00
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0DzJK4Mq3ELcRib6i6Hxk03bgIY.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 82.153.33.0/24 maxlen: 24
82.153.85.0/24 maxlen: 24
82.153.88.0/24 maxlen: 24
82.153.179.0/24 maxlen: 24
82.153.181.0/24 maxlen: 24
82.153.190.0/24 maxlen: 24
82.153.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a6:39:0a:52:ea:b7:04:52:0b:eb:41:79:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d03cc92b832adc42dc4626fa8ba1f1934ddb8086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:e5:e9:71:13:ac:28:67:d3:2c:c6:55:b2:
02:d3:c8:a0:5c:62:8b:d4:63:43:72:54:61:4b:39:
9a:32:a4:d6:62:9e:8c:96:37:b7:66:52:96:5d:dc:
52:01:d2:28:03:62:38:22:73:53:c8:4f:eb:99:0a:
33:53:83:ca:47:c2:28:cc:72:f2:7f:ae:42:e2:c2:
da:72:df:ff:87:a2:79:fb:7d:02:9f:69:bc:27:d0:
38:26:60:dd:cc:25:72:56:b5:0a:19:81:5f:9c:30:
45:76:e7:13:a2:d0:9e:79:b8:48:ce:08:83:93:00:
94:c9:87:c3:d1:50:16:02:d1:93:41:c0:28:dd:c0:
e3:1e:36:58:ff:cb:51:3a:ed:70:3d:e3:de:7b:17:
38:84:d6:aa:86:89:e1:49:7f:9b:23:7b:16:89:2b:
e0:16:4f:7c:9c:43:cc:92:94:a6:b0:3c:dd:46:51:
da:75:14:93:ce:da:0d:88:d9:59:92:35:fc:ee:1b:
67:74:05:ff:96:9b:60:51:cb:72:f5:e2:6f:37:b5:
5c:62:00:ad:31:2c:d1:4c:39:cd:54:00:8c:12:a4:
d0:c7:4b:8c:7b:ad:94:07:1e:21:3f:75:6a:f8:74:
dc:38:e7:b8:cf:eb:7d:2d:42:0e:35:74:aa:45:b3:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3C:C9:2B:83:2A:DC:42:DC:46:26:FA:8B:A1:F1:93:4D:DB:80:86
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0DzJK4Mq3ELcRib6i6Hxk03bgIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.33.0/24
82.153.85.0/24
82.153.88.0/24
82.153.179.0/24
82.153.181.0/24
82.153.190.0/24
82.153.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:aa:0a:9e:2b:be:55:39:e0:1f:81:89:8d:2a:14:09:6c:5b:
32:24:35:a5:f3:5f:fa:2c:37:32:44:3f:23:7d:23:a5:3a:9e:
fc:df:bd:6e:1b:ff:b4:ee:e5:2e:c1:be:9e:8f:43:5c:c9:36:
69:62:76:d9:5f:35:29:b4:6d:e5:e3:b7:ad:5a:70:df:cf:8f:
bc:c5:d9:07:27:00:e7:c6:e2:bd:99:2b:e2:71:ae:c3:97:35:
19:1a:58:5c:cf:93:bb:14:87:a2:6d:82:56:df:75:a1:fe:15:
cc:6a:02:5c:0f:c7:08:3c:ce:48:23:16:0a:1c:ad:b5:97:38:
93:0e:1a:09:81:a2:ee:93:f2:12:78:9e:4f:35:d3:3e:2e:68:
e8:a0:a2:ae:68:43:63:f2:08:31:d1:a3:4f:43:4f:1a:84:31:
57:8a:ad:4c:8b:01:08:67:a6:7a:a8:e9:da:6a:e5:b2:ad:3e:
a6:04:0c:b1:c1:ed:4f:11:a8:6d:30:f6:59:2c:7a:6e:d0:09:
7c:79:8d:8f:61:be:7b:64:b2:80:5e:d5:27:0c:75:ce:30:4c:
09:82:d8:66:b5:14:3f:12:c1:5a:3e:8d:84:72:2e:01:3f:8e:
a3:46:49:c1:9c:aa:b8:53:b2:97:14:f6:91:fe:c9:2e:24:60:
c3:f1:7e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:20:29 2026 by rpki-client