Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0XRGbbuXCMZaVR3EHGy3JSkbZ5w.roa
File: 0XRGbbuXCMZaVR3EHGy3JSkbZ5w.roa (raw, json)
Hash identifier: XYjJ4YSgANzwmvhyZdGRoQn7ealDeYFat7FwK6+KI9o=
Subject key identifier: D1:74:46:6D:BB:97:08:C6:5A:55:1D:C4:1C:6C:B7:25:29:1B:67:9C
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368F01FF56F8E7F36610AA92170DF4E
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0XRGbbuXCMZaVR3EHGy3JSkbZ5w.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210734
IP address blocks: 82.153.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f0:1f:f5:6f:8e:7f:36:61:0a:a9:21:70:df:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d174466dbb9708c65a551dc41c6cb725291b679c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:99:b4:8e:f6:22:da:74:47:3f:03:a9:c2:
c2:5b:fe:71:4a:90:77:cf:7c:78:e3:fa:c9:00:36:
51:aa:42:9b:d6:e2:35:7c:98:15:b3:0b:3d:0a:bc:
91:71:4b:c8:68:13:1e:33:82:c2:ea:8d:95:e8:b0:
a7:9c:7c:57:03:f1:e1:1e:47:56:41:2e:fd:6e:1a:
82:60:7a:19:3e:12:04:47:bf:4b:d3:33:c4:8b:92:
92:1e:f4:96:f4:e1:45:9e:23:e9:03:f9:df:7a:c4:
ea:2c:fb:35:a7:43:ed:84:33:d1:19:c6:6d:a2:30:
51:7c:45:88:38:03:87:f2:d1:ec:14:72:0b:18:a7:
a9:eb:78:7c:11:77:ab:8e:f6:fd:4f:56:87:dd:26:
f7:ee:13:92:2c:79:6f:dd:25:3f:ba:dd:3e:f0:82:
5d:ba:6d:36:0b:31:a0:3e:ed:0c:01:ed:d6:3d:7d:
27:58:d8:72:ae:71:f3:31:2d:79:d0:e0:70:a9:f1:
b1:d8:a7:dd:38:02:99:4c:0d:a0:1e:3e:b2:48:99:
5a:16:a7:da:e4:6e:67:f7:02:c6:0e:da:c2:55:c6:
fd:22:8b:56:79:0b:4f:25:a0:df:05:87:4f:16:15:
46:68:c9:17:fe:30:71:10:7c:1b:94:9c:62:dd:52:
62:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:46:6D:BB:97:08:C6:5A:55:1D:C4:1C:6C:B7:25:29:1B:67:9C
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0XRGbbuXCMZaVR3EHGy3JSkbZ5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.50.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:49:2b:6d:eb:51:24:93:a0:91:31:a1:7d:af:54:83:91:37:
0e:e9:c5:4b:e5:07:19:8c:17:3f:fd:8c:09:84:de:5a:fb:08:
19:8b:7a:4e:93:af:4c:6f:45:5d:5c:f9:92:71:17:af:ae:ff:
3c:bb:63:6c:10:46:64:bf:1f:47:50:71:96:f3:c3:0d:a1:7e:
0e:5e:62:4e:af:d5:95:fc:62:de:8b:5f:a0:46:8d:9d:12:79:
0e:66:12:f9:66:6d:0d:64:53:23:14:f2:cd:71:c0:c3:ca:b9:
26:bd:19:76:b8:91:e4:cf:da:5f:ca:42:c6:89:2c:ab:62:18:
6b:af:11:e1:e1:e8:5a:9a:b5:23:c7:89:3c:f0:69:18:6c:3e:
d5:23:5a:51:d1:bb:9c:10:20:e7:55:b1:a9:eb:3f:15:fc:ac:
24:95:03:2c:f0:72:5c:85:4c:e7:1c:85:ec:fd:d9:ce:0d:80:
e3:77:b7:b5:34:16:76:32:b1:00:31:20:d6:20:8a:c1:a8:eb:
95:54:67:65:75:17:5c:0f:92:f8:6b:eb:85:d1:a2:23:aa:ca:
7b:38:4f:0c:27:86:1f:2b:d2:46:7c:1a:82:48:bc:7d:62:a8:
2d:ab:59:90:72:5e:6c:0f:5c:c5:d1:c1:c3:64:b8:6a:cf:67:
1c:47:5e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:16:52 2026 by rpki-client