Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2BHY-dQAFFhYTKsnUjuaH1MMcbs.roa
File: 2BHY-dQAFFhYTKsnUjuaH1MMcbs.roa (raw, json)
Hash identifier: /yIuqe8x+C4x/jPbMwPgVNpcG0dEU+MWlQ5yTq6rJ/E=
Subject key identifier: D8:11:D8:F9:D4:00:14:58:58:4C:AB:27:52:3B:9A:1F:53:0C:71:BB
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F27358E1BB89F6FEDFAFBC0AA313C9881
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2BHY-dQAFFhYTKsnUjuaH1MMcbs.roa
Signing time: Fri 03 Jul 2026 09:00:48 +0000
ROA not before: Fri 03 Jul 2026 09:00:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 82.153.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:35:8e:1b:b8:9f:6f:ed:fa:fb:c0:aa:31:3c:98:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 3 09:00:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d811d8f9d4001458584cab27523b9a1f530c71bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:f2:d5:85:be:c7:ed:72:d1:f5:9a:73:80:
fd:53:20:80:ec:ba:b6:e0:69:08:07:14:a9:49:30:
bc:8f:4d:b3:ab:8d:75:f3:cd:c2:07:07:f5:28:19:
67:b3:8b:e3:25:ec:8b:81:cc:59:39:08:e4:94:e4:
9a:15:4d:76:d8:54:8b:5e:d3:12:fd:72:fa:00:23:
12:dd:22:df:f5:76:2b:42:46:30:4f:b4:b1:6c:b5:
93:e3:10:31:bf:8f:51:07:2b:93:97:3d:60:fd:f9:
76:d8:5f:da:6b:f5:0d:de:94:4a:67:e0:ec:3f:d7:
fd:50:72:50:de:88:a5:6a:ae:3a:08:a9:16:b5:01:
a5:62:34:8e:71:3b:a8:92:84:7f:8b:d2:d0:dd:22:
3a:51:dd:c5:bc:83:71:c5:97:1f:f8:f8:92:cf:71:
a5:08:2e:77:b2:aa:42:9d:e7:ad:74:c3:90:df:c5:
9d:93:fb:ec:62:dc:0b:7e:d1:5c:59:54:c7:21:96:
e2:17:e1:d3:7a:65:c2:a9:f8:98:32:5c:3d:2b:89:
ae:46:8e:20:aa:fc:97:4f:d8:dc:d3:65:44:9a:14:
57:f7:45:5f:6b:20:d3:22:59:d7:e6:58:d9:70:41:
2d:03:68:92:80:21:25:9c:31:fd:d6:95:4c:e6:97:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:11:D8:F9:D4:00:14:58:58:4C:AB:27:52:3B:9A:1F:53:0C:71:BB
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2BHY-dQAFFhYTKsnUjuaH1MMcbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.36.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5c:a2:02:8c:16:5b:1e:88:50:91:ed:2c:11:74:ea:4c:1b:
11:10:a8:4b:23:26:01:92:b2:df:97:09:ff:3c:e8:36:8e:bc:
62:75:00:06:52:35:39:96:dd:90:cc:37:67:ee:4b:05:62:bc:
5d:4a:82:42:ef:65:96:15:21:9a:51:e2:a0:79:18:4a:40:d9:
42:17:79:20:24:f5:07:68:ad:35:82:74:df:b1:25:ab:15:27:
af:92:01:4d:10:0d:0c:c0:50:31:c9:4b:3d:aa:af:5f:ed:16:
a6:e8:92:22:88:c9:07:03:6c:6b:54:4b:65:f4:22:b0:ad:67:
36:1d:b2:7d:ef:6b:24:ee:47:9f:4d:a0:e8:df:b7:fb:46:2d:
0d:28:c0:a5:f2:e4:a5:58:f9:e8:a0:b7:1c:35:e0:a4:dc:cd:
c7:e5:de:ce:0d:0f:d1:b3:72:ce:95:8f:50:85:d0:60:03:2f:
4b:35:d2:48:88:03:ae:a7:f7:2e:44:6c:32:0c:80:ef:c3:52:
1a:6f:2d:ed:be:1c:bd:3d:14:62:c0:5e:3e:29:15:e4:06:21:
8a:3a:71:49:48:82:a8:34:d5:06:58:d7:fc:d2:31:33:26:4e:
8a:54:1d:b6:0a:44:04:76:98:3d:b1:18:b7:7d:50:2e:02:0e:
a5:0a:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:22 2026 by rpki-client