Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1wRDfiztwXIGsHzgzNzgmexLFZ8.roa
File: 1wRDfiztwXIGsHzgzNzgmexLFZ8.roa (raw, json)
Hash identifier: Fg/0XzGMT7B3WLuDa7JEVjQR7InbO9F2iJdWtxubLME=
Subject key identifier: D7:04:43:7E:2C:ED:C1:72:06:B0:7C:E0:CC:DC:E0:99:EC:4B:15:9F
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368C45315DECB4053DD6961149E871C
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1wRDfiztwXIGsHzgzNzgmexLFZ8.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 82.153.246.0/24 maxlen: 24
109.176.21.0/24 maxlen: 24
109.176.206.0/24 maxlen: 24
213.218.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c4:53:15:de:cb:40:53:dd:69:61:14:9e:87:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d704437e2cedc17206b07ce0ccdce099ec4b159f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:84:28:94:8b:f6:5b:01:a7:ff:74:43:fa:da:
17:44:5a:81:7e:7f:5c:69:31:43:e7:04:11:d8:fa:
c9:44:e0:53:97:5b:8c:b9:ea:f7:ab:d0:8a:70:e2:
1a:1d:8e:68:d6:d4:c6:9e:7f:44:35:86:ce:bb:82:
d9:13:c5:fe:92:95:0f:05:08:fb:ca:2a:65:e6:6f:
de:c1:72:a1:70:fd:87:97:48:35:cf:a9:0c:0e:ae:
32:99:89:d3:cb:2b:bc:31:0d:0f:f1:51:75:65:c5:
60:0e:40:82:2b:36:48:ef:8e:91:4c:19:1c:d8:b9:
a1:04:11:4d:8e:23:dc:09:2f:69:61:11:47:cf:c5:
52:c0:fd:cc:70:a1:1e:5e:c0:1f:2a:ad:f1:d0:a2:
f3:85:7d:77:92:79:da:3e:3d:2d:fc:36:06:66:85:
7a:03:c3:6d:52:b9:39:b0:25:2a:a9:2d:94:6e:a3:
48:0f:d4:7a:0c:cc:71:ed:c2:a6:e9:68:f9:ab:11:
17:cc:36:9c:2f:0e:5a:22:7d:53:ae:3d:03:a2:25:
ff:8a:d5:48:c9:78:9c:7f:24:ab:20:0b:42:d9:2c:
78:7b:78:7e:bc:43:d0:9c:46:4c:8e:1a:43:50:49:
0e:44:81:53:f9:ce:a4:9e:41:29:5a:7a:e0:37:e9:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:04:43:7E:2C:ED:C1:72:06:B0:7C:E0:CC:DC:E0:99:EC:4B:15:9F
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1wRDfiztwXIGsHzgzNzgmexLFZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.246.0/24
109.176.21.0/24
109.176.206.0/24
213.218.243.0/24
Signature Algorithm: sha256WithRSAEncryption
01:03:87:1f:fa:f8:bd:83:2c:7d:cf:9d:25:92:c8:20:e3:6d:
44:69:d8:17:27:27:12:7d:3f:0d:a3:e3:1b:cc:42:99:5e:cf:
75:7c:9a:c1:3d:c5:21:36:5f:bb:08:01:2a:ae:79:ce:1e:cf:
66:c5:b0:8b:f4:68:65:36:c4:40:3b:15:33:bc:b7:00:2a:93:
ba:c4:88:a6:a8:0d:9a:8a:53:a2:38:2d:71:6f:3e:20:f0:8d:
c0:2f:ad:e1:3b:84:22:22:76:09:85:c9:40:e8:e3:27:2b:76:
09:d3:fa:72:41:95:80:70:26:07:6f:5d:0b:2c:6c:f2:0e:17:
5e:c6:44:ec:af:3f:9f:da:46:45:c9:37:ee:0d:66:2d:d4:a1:
7e:2e:bb:e3:e5:04:96:8c:99:8d:41:ed:9b:7d:9a:75:24:02:
71:00:76:a3:2d:14:e1:4c:fe:aa:28:1d:14:e4:fa:9c:da:18:
1c:00:d7:9d:87:c0:a9:c2:32:ea:93:ea:e5:a2:c1:99:46:91:
87:7f:01:f8:48:93:a6:a6:cf:2e:9a:b1:e0:df:2d:33:3d:ac:
bb:9b:db:1c:b5:c9:1e:07:93:e2:fc:74:80:36:49:ae:3c:53:
e1:06:49:43:50:6a:dc:2e:da:3d:98:2a:24:21:46:de:d8:43:
be:d1:aa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:13 2026 by rpki-client