Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2l0Gu7cR5GnWdb3TTVQk6zhYZZk.roa
File: 2l0Gu7cR5GnWdb3TTVQk6zhYZZk.roa (raw, json)
Hash identifier: Hc9kyJzoDOEGIk0y4oLl8kbmpYpXRtM0w6C0i8aBijw=
Subject key identifier: DA:5D:06:BB:B7:11:E4:69:D6:75:BD:D3:4D:54:24:EB:38:58:65:99
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A12EFC2832E69AD9E9FF1DB954A2B273DC
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2l0Gu7cR5GnWdb3TTVQk6zhYZZk.roa
Signing time: Mon 12 Oct 2026 07:20:39 +0000
ROA not before: Mon 12 Oct 2026 07:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 82.153.115.0/24 maxlen: 24
213.210.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:fc:28:32:e6:9a:d9:e9:ff:1d:b9:54:a2:b2:73:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 12 07:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da5d06bbb711e469d675bdd34d5424eb38586599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:22:0d:22:ed:de:19:b6:9d:30:33:67:87:
21:3d:8f:be:27:4b:59:2f:83:fc:eb:6b:f1:63:81:
a9:68:b1:3b:d3:51:e9:bc:69:1c:9f:77:c8:59:97:
98:9c:22:a7:6e:70:f7:81:69:9a:50:df:52:fe:2d:
83:c5:a5:4a:1d:ad:eb:9a:ac:93:cd:59:b0:a8:09:
cc:52:cc:db:99:87:92:25:f5:68:b3:d1:94:01:19:
a9:28:37:e6:49:55:b8:f2:f7:53:d9:17:b1:60:a4:
7f:11:52:18:75:5b:f0:90:ca:1a:90:98:8f:40:c5:
4f:d6:e1:36:c6:88:fc:6d:dc:37:fb:95:47:c6:cb:
cd:ba:cb:6a:a1:eb:a8:3f:f8:c2:88:df:26:c1:93:
3c:df:7c:90:a2:32:98:73:6a:f8:b1:74:82:6f:32:
4a:a5:95:16:66:9b:73:7e:91:48:3b:50:6c:95:6d:
e6:35:eb:22:e2:18:ec:b7:42:9c:27:b2:d5:9b:52:
53:ea:69:46:38:c9:09:2c:ca:84:25:4d:99:57:eb:
75:0d:6b:6a:79:80:bb:d9:a9:f1:eb:a8:5e:c7:54:
a5:35:1b:f3:86:52:36:d4:39:e6:35:dc:b4:6c:d4:
94:f7:a5:37:23:7a:28:48:16:e1:8c:0c:d2:dc:06:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5D:06:BB:B7:11:E4:69:D6:75:BD:D3:4D:54:24:EB:38:58:65:99
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2l0Gu7cR5GnWdb3TTVQk6zhYZZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.115.0/24
213.210.53.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3a:c9:9a:58:aa:b3:46:cc:83:c4:7f:0b:eb:a8:3d:40:05:
53:1e:86:5e:3b:2c:c4:83:7a:4c:f5:96:70:0c:86:98:22:4c:
b2:38:d2:91:ce:76:da:ca:0b:84:82:93:c7:f1:a0:c0:f5:b7:
ef:19:8d:e9:43:6d:a0:10:39:d0:4b:87:91:ca:df:e8:62:b2:
58:aa:81:d4:22:c1:ec:28:b3:c1:d8:bd:aa:a2:e2:69:9e:48:
d9:59:26:d8:8e:76:e0:f3:76:3e:df:18:36:f6:bd:23:b0:15:
f1:67:c1:23:7a:8b:52:65:bb:73:a9:2b:12:a2:1e:63:d4:c0:
e8:e1:b9:86:72:16:f3:4a:f8:90:e3:8d:2a:df:45:38:3c:d3:
f8:c0:62:a0:d4:cd:9c:7e:4a:70:c3:11:a2:ea:39:a8:f1:df:
a1:0d:4a:36:70:bc:fd:f4:38:c8:a0:92:71:ce:b7:93:fa:3f:
9e:c2:5f:6f:c3:0d:04:96:6c:b3:b4:1f:3d:be:bd:0c:41:d3:
6e:e1:6c:61:5d:29:27:07:e2:e0:09:99:e1:58:0b:63:8d:f9:
c5:f0:e0:fe:4d:fc:6d:d3:09:e9:c5:75:b3:be:60:02:9a:3e:
11:00:fe:48:fc:f9:4f:5a:25:cc:d2:f5:0e:26:85:c1:5f:fb:
61:1f:b8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:47:37 2026 by rpki-client