Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/78AgRQIhuyAgwc2ICHMrpBOPIA4.roa
File: 78AgRQIhuyAgwc2ICHMrpBOPIA4.roa (raw, json)
Hash identifier: AqdCMDY37QPHcf0dBXdJywt3277UxB17JISV4+xerjI=
Subject key identifier: EF:C0:20:45:02:21:BB:20:20:C1:CD:88:08:73:2B:A4:13:8F:20:0E
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FCBFE6B1E7476BB9B3837FCD52AB2D3CD
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/78AgRQIhuyAgwc2ICHMrpBOPIA4.roa
Signing time: Tue 04 Aug 2026 08:57:56 +0000
ROA not before: Tue 04 Aug 2026 08:57:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272547
IP address blocks: 82.152.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:fe:6b:1e:74:76:bb:9b:38:37:fc:d5:2a:b2:d3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 4 08:57:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efc020450221bb2020c1cd8808732ba4138f200e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:ab:38:bc:53:17:7f:58:8a:41:38:12:e9:
68:b6:59:a1:9d:b5:fe:6a:d5:1f:58:39:22:de:c5:
5e:93:6e:1c:71:b7:4e:23:cd:7c:bc:3e:18:d0:da:
55:fc:38:3f:de:e4:37:29:6f:a1:ae:22:d2:62:f2:
76:24:fe:71:9d:2c:11:57:45:6b:09:e7:43:77:df:
fb:4d:96:e9:69:4f:03:d6:d0:59:db:6d:b7:ef:bc:
52:49:4c:60:27:80:38:65:0c:93:e5:f7:47:09:f7:
e6:bf:78:e8:65:e8:42:4f:8f:57:c4:c4:2d:c8:fc:
95:a9:52:06:bf:46:22:83:63:90:82:c5:4f:e3:5a:
70:13:9b:d3:be:83:5d:50:81:e6:e7:aa:73:f9:db:
e1:35:7c:b5:e7:d5:21:4c:84:58:0e:64:ba:6e:cb:
71:eb:1f:bb:b1:2c:d1:1e:f6:7d:9b:e6:bb:c2:f8:
81:e7:4b:01:bb:84:59:e9:cd:fe:65:eb:82:06:f8:
5e:73:bb:22:39:67:70:43:93:ef:4b:87:80:a6:27:
9b:4c:78:2e:38:78:5a:f2:ee:4b:13:84:84:78:5f:
c8:4a:9e:38:93:1b:8f:6a:c3:c9:81:08:12:46:01:
0b:7f:03:9f:98:9c:5a:68:8f:34:86:f7:70:1c:1a:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C0:20:45:02:21:BB:20:20:C1:CD:88:08:73:2B:A4:13:8F:20:0E
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/78AgRQIhuyAgwc2ICHMrpBOPIA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.174.0/23
Signature Algorithm: sha256WithRSAEncryption
03:83:36:80:c3:65:8b:dc:08:c2:e9:e5:ff:e2:b0:b3:17:36:
5e:7b:2b:83:23:52:a7:11:ec:26:87:34:f0:8b:b0:65:31:a7:
bd:92:74:9a:9b:a8:9e:0e:7d:a2:9e:44:59:04:54:5a:65:60:
64:b0:71:9b:75:41:6e:f4:80:04:f6:d2:33:86:92:6b:7c:3d:
f2:4a:6b:43:ed:37:47:13:d2:74:16:e9:8c:da:db:33:5c:6a:
d2:3f:38:fc:7b:02:f6:8b:22:ca:bb:a6:eb:23:91:d7:39:e7:
93:87:c7:cd:38:63:a3:cb:1c:f9:c0:6c:35:41:97:86:94:d4:
a6:c1:79:cd:4c:02:21:93:6e:75:a7:f3:42:ff:07:50:03:07:
69:47:00:7b:22:0f:d5:58:a4:44:ae:c4:ed:45:10:0f:18:d4:
93:15:e0:0e:8e:26:fd:1e:1f:3d:99:2e:1d:c6:d9:c9:d1:b7:
46:92:31:92:57:0f:03:5a:d7:1d:cc:8f:ca:9a:41:bf:bb:6f:
26:ff:b8:d2:a9:7a:fa:00:de:90:fe:ee:ee:7c:d7:f5:68:49:
c1:e1:e8:45:4a:cb:e9:f5:bb:8a:3f:b0:94:40:64:00:3b:51:
9c:c5:84:3c:72:d7:97:72:6e:c3:de:29:8a:83:f0:00:c0:36:
59:cf:f1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:27 2026 by rpki-client