Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6DkKAjqe_jZqhOxgxwDwUlKAxzI.roa
File: 6DkKAjqe_jZqhOxgxwDwUlKAxzI.roa (raw, json)
Hash identifier: GDapDofX6gb++saNpoefAfqW5l2sQdFU89co/6+kjrk=
Subject key identifier: E8:39:0A:02:3A:9E:FE:36:6A:84:EC:60:C7:00:F0:52:52:80:C7:32
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368CFD16752F072339E0A590F9E93BB
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6DkKAjqe_jZqhOxgxwDwUlKAxzI.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152672
IP address blocks: 82.152.129.0/24 maxlen: 24
82.153.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cf:d1:67:52:f0:72:33:9e:0a:59:0f:9e:93:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8390a023a9efe366a84ec60c700f0525280c732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:27:dc:91:30:02:0b:68:37:0b:ae:ed:2e:
1b:54:f6:67:09:4f:c4:69:69:85:8f:fb:6c:7e:de:
0f:0d:99:c6:ce:60:8f:af:9f:11:97:c6:99:e3:32:
70:55:30:d9:75:c8:3f:55:97:6d:73:2f:d8:b7:b6:
79:e2:f2:24:2d:bc:d3:f8:a5:b0:c0:d5:07:d9:85:
20:5a:e3:34:bf:a6:82:52:bd:e6:98:e6:f9:be:6c:
28:b6:59:02:de:2e:89:9d:40:21:2d:c3:5c:52:b4:
22:51:02:52:01:8d:89:b3:fd:a8:b4:35:ad:00:71:
24:24:35:2f:39:bf:cd:60:15:6f:89:3d:30:04:d4:
80:ec:d3:e9:12:b0:8f:18:74:ed:d9:82:4d:54:71:
fd:93:52:56:15:fd:78:e5:af:e6:17:e0:51:8b:10:
5f:cb:f6:25:7c:06:e5:d0:20:b4:a0:df:a3:24:5f:
ca:d3:f4:20:35:84:dd:9e:76:56:78:d3:a5:3c:77:
e6:3d:3e:bb:dd:b3:fa:d9:1f:e4:1f:51:49:bc:2b:
a5:f3:fe:60:aa:61:81:76:46:6c:a2:73:9a:8e:cd:
5b:14:c3:47:cd:2f:bc:01:4a:f4:0c:cf:39:a4:3c:
81:b9:ec:97:f8:75:57:22:e4:d5:e2:21:6f:e7:01:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:39:0A:02:3A:9E:FE:36:6A:84:EC:60:C7:00:F0:52:52:80:C7:32
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6DkKAjqe_jZqhOxgxwDwUlKAxzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.129.0/24
82.153.216.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:0c:12:bb:56:b9:02:97:4b:92:5a:01:68:f0:90:a9:27:18:
51:c7:8e:69:d6:07:8f:fd:ed:17:c1:a8:e9:70:da:5c:1a:7a:
33:e8:83:b5:51:4d:03:98:55:0a:2e:83:69:53:cc:3d:06:a4:
eb:f4:4b:79:52:b2:12:54:d9:7d:64:b4:e0:22:a9:d0:92:5d:
40:d6:f8:9e:8a:79:ee:bb:51:bc:6f:9c:dc:36:7e:f0:30:ce:
ca:d3:79:52:cc:62:ce:e3:5b:3a:66:97:ce:72:db:2f:4b:4c:
6b:c3:9c:b0:d5:33:60:4f:23:27:bb:b1:ff:7f:08:00:4b:e0:
ca:b2:15:5d:14:87:60:07:88:71:d3:95:6d:6c:97:eb:de:b2:
b4:71:8f:b2:70:df:48:11:02:47:3b:84:97:f1:bd:39:e6:e1:
7a:dc:fb:77:3e:05:86:91:f4:6a:60:99:af:34:b4:bd:2b:7e:
d5:11:7e:d4:be:2c:1e:c8:05:4d:aa:e2:5b:c9:35:fe:42:87:
09:7f:b3:de:76:98:57:65:7a:79:cb:fe:ac:36:6f:c4:b7:d0:
e9:b9:77:d7:d0:b4:a5:87:7f:97:f6:25:02:f4:4e:1c:40:72:
93:84:b7:7b:4c:00:01:3c:d3:5b:11:96:df:d1:3e:49:a2:c9:
1e:39:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:53 2026 by rpki-client