Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0Zn2yg3p6fG5-PwSOYG6zNyLL8Y.roa
File: 0Zn2yg3p6fG5-PwSOYG6zNyLL8Y.roa (raw, json)
Hash identifier: tUDo9mfczWqOtfmAzeyWTTWMHQ0djh5iMpjfu/T/AMA=
Subject key identifier: D1:99:F6:CA:0D:E9:E9:F1:B9:F8:FC:12:39:81:BA:CC:DC:8B:2F:C6
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A01A299905065B933C68DD8A0E4E3A61DB
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0Zn2yg3p6fG5-PwSOYG6zNyLL8Y.roa
Signing time: Wed 19 Aug 2026 13:15:28 +0000
ROA not before: Wed 19 Aug 2026 13:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 82.152.220.0/24 maxlen: 24
82.152.223.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:29:99:05:06:5b:93:3c:68:dd:8a:0e:4e:3a:61:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 19 13:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d199f6ca0de9e9f1b9f8fc123981baccdc8b2fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:80:91:60:00:d8:96:ae:1a:d6:cf:32:0e:
f4:70:3f:6a:e9:25:c9:38:78:e3:64:57:b3:98:c1:
57:9e:ec:1a:7e:98:65:b3:1e:a4:e2:a5:35:b6:11:
95:81:1c:c7:f1:38:99:3e:67:98:c2:33:f8:a6:9a:
2f:b0:39:c7:14:85:73:1f:61:de:7b:c3:5e:34:5b:
a3:1a:75:0c:f7:a8:43:c4:f0:ba:f9:33:5c:bb:44:
27:1e:86:c8:20:cb:44:08:57:09:e2:be:a5:60:b0:
4f:b0:70:15:c8:23:ae:97:88:02:df:22:63:04:85:
22:08:e3:6f:f8:64:78:5e:ca:d2:77:b1:d7:83:3e:
20:96:4e:32:86:59:06:7a:59:e0:6b:8d:ff:34:b9:
cf:f7:90:cb:54:4e:de:36:ff:14:7b:ec:0f:31:f1:
da:27:9b:2d:5d:af:37:a0:56:f8:5e:17:0b:ec:57:
be:78:53:93:e8:c9:a5:99:8a:ca:d3:55:7b:11:1d:
85:04:0c:a0:79:7b:4e:8b:66:4a:7c:50:38:92:81:
cb:f6:d1:d8:30:5d:2f:e9:d5:3f:c2:97:28:4b:08:
56:e2:95:47:32:55:c1:f2:11:c6:ed:a5:44:86:a8:
8d:9a:6a:5b:53:af:a5:da:5b:15:06:77:ad:1c:4c:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:99:F6:CA:0D:E9:E9:F1:B9:F8:FC:12:39:81:BA:CC:DC:8B:2F:C6
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0Zn2yg3p6fG5-PwSOYG6zNyLL8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.220.0/24
82.152.223.0/24
213.130.137.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e6:9a:92:96:a6:3d:09:a3:90:f2:b5:0b:f1:42:7b:05:e7:
6e:42:84:87:f3:77:fe:21:1c:f9:b6:47:0d:74:3b:c1:44:19:
cd:f4:cc:4a:26:bd:1c:ec:c9:f4:7a:18:5a:c7:bf:d9:2e:0e:
2e:c3:9c:26:b3:e2:2e:8b:a2:6d:50:6b:72:d4:ba:3d:81:ab:
87:29:3a:0a:7a:6d:61:e0:5d:84:9e:82:a8:82:98:ef:f6:2a:
0d:83:8c:10:bb:c4:25:0e:41:18:cf:f1:fc:9f:03:c3:4c:03:
63:38:f5:de:bf:14:11:e2:4b:b2:d8:b2:32:89:c3:31:8d:6f:
ab:1a:cb:8d:7c:7b:69:c3:85:b1:03:e9:06:d6:13:1b:4a:aa:
3e:fc:c6:6d:3c:c1:ab:b2:b0:b9:7b:2a:54:ff:a0:51:37:9e:
76:14:b7:f9:ac:7a:d9:69:23:c4:47:b4:b0:8a:bf:97:07:40:
67:c1:c7:04:4d:b2:14:67:02:1f:ef:f6:ca:f9:53:55:2a:6f:
8b:85:9c:01:06:6a:3c:7a:0f:25:25:a1:f7:73:65:b4:19:d2:
29:29:09:ca:e0:7f:22:1f:b6:3d:06:dc:fe:18:cc:2a:63:b9:
ee:4f:4f:bc:cc:51:d8:06:d4:5f:8c:e6:71:71:d0:5d:c3:3e:
b5:79:ee:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:30 2026 by rpki-client