Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0E8mdpf_XZS7DYDVlI62Eb2qudA.roa
File: 0E8mdpf_XZS7DYDVlI62Eb2qudA.roa (raw, json)
Hash identifier: 8xZvUQkpsc3/qo/8igElQwJ/suL6HEhVkaO2GzhfU7I=
Subject key identifier: D0:4F:26:76:97:FF:5D:94:BB:0D:80:D5:94:8E:B6:11:BD:AA:B9:D0
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FDBE4CBF0BA2ECD0961C79FABDD646ED8
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0E8mdpf_XZS7DYDVlI62Eb2qudA.roa
Signing time: Fri 07 Aug 2026 11:03:52 +0000
ROA not before: Fri 07 Aug 2026 11:03:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60982
IP address blocks: 82.152.132.0/24 maxlen: 24
82.152.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:e4:cb:f0:ba:2e:cd:09:61:c7:9f:ab:dd:64:6e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 7 11:03:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d04f267697ff5d94bb0d80d5948eb611bdaab9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ea:e2:d5:61:86:06:52:e3:a3:4f:76:ab:b2:
01:36:e1:e8:32:fa:0f:2c:cd:6d:d1:fb:f1:86:4c:
0b:a5:73:7b:92:ea:1e:f0:e9:bd:8d:da:ce:6c:57:
3b:87:c0:61:78:bb:f7:32:02:06:9a:48:06:8d:92:
7a:57:98:e7:9d:6b:30:d7:22:f8:d4:5e:04:89:5c:
3b:2e:47:5e:d5:a2:45:34:86:a8:55:61:e4:93:53:
6f:90:cf:58:e2:95:0c:7c:9f:d4:7b:7b:23:b6:84:
37:62:b0:92:bc:7e:3f:04:a8:0f:9c:ea:fd:6e:06:
fd:28:9c:34:92:53:12:a8:09:e1:fa:7b:44:c9:ef:
81:dd:f0:86:29:ee:ce:46:6f:49:b4:0b:54:53:9f:
aa:91:6a:d2:40:22:38:88:e0:75:7c:f9:ea:39:44:
d8:d5:52:1b:96:d2:f2:0e:61:78:1d:ba:08:92:4f:
eb:f4:a1:af:88:e6:8c:f1:49:91:71:4b:2f:b7:94:
fa:dc:75:b2:e7:a8:ec:ad:6c:36:bf:d9:21:67:f8:
fb:9e:4d:ef:4c:51:fa:81:43:ea:3a:ab:d6:9b:25:
04:6d:d2:df:2b:7d:5d:9b:92:72:55:28:3f:ee:da:
fa:0f:fb:3b:5c:8b:9c:b1:0d:9b:4b:12:e2:70:bc:
63:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4F:26:76:97:FF:5D:94:BB:0D:80:D5:94:8E:B6:11:BD:AA:B9:D0
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0E8mdpf_XZS7DYDVlI62Eb2qudA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.132.0/24
82.152.141.0/24
Signature Algorithm: sha256WithRSAEncryption
17:99:e1:a1:1d:d7:ab:de:f0:41:0c:44:23:cd:67:dc:47:91:
d4:1a:98:ec:94:72:2c:50:e3:53:00:0e:d4:4e:76:64:e8:75:
e6:0c:cf:43:6b:53:f5:b9:4b:ac:65:e4:3a:3f:ba:4d:c7:d3:
31:11:63:a0:b5:8b:34:c7:21:1e:ff:79:09:6e:05:88:53:c4:
e6:69:1b:9c:d6:5e:61:d6:45:4c:fa:cf:cc:91:12:af:77:74:
b7:78:e7:7e:b6:c4:5b:6d:85:da:9c:04:9c:eb:ba:a6:c5:c7:
f8:d5:e7:e3:3b:45:47:7d:f1:be:cd:96:31:3c:d2:d8:7b:4c:
2a:3e:a2:d3:77:e5:b7:70:47:73:a9:2b:73:ff:2a:6a:3f:ee:
83:b2:e4:7a:af:9f:35:17:5c:e0:e4:54:48:f3:8b:b7:eb:85:
95:34:fe:28:26:7c:44:ac:1d:87:e9:a4:2b:8b:0d:0f:91:c5:
19:90:9a:ce:c4:69:f6:20:c6:03:59:a6:1e:95:ed:0d:8b:e8:
7c:70:ca:b0:f3:28:75:42:bb:36:c5:1c:df:02:d6:05:a4:54:
bb:e1:c5:57:06:b0:fe:be:fb:16:0b:3b:57:e2:97:de:d5:07:
fe:38:d3:13:4f:dd:74:8e:2d:4d:5f:6a:64:5e:5a:e9:d8:41:
dd:5c:11:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:31 2026 by rpki-client