Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7cR0VWfQ8OCzohuUeYyxR9I_KFg.roa
File: 7cR0VWfQ8OCzohuUeYyxR9I_KFg.roa (raw, json)
Hash identifier: qyGU5nDwtO1/DDF6/LJWzd4wN6fEhOOZ5HLeAouZIdM=
Subject key identifier: ED:C4:74:55:67:D0:F0:E0:B3:A2:1B:94:79:8C:B1:47:D2:3F:28:58
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2369088C74A37FB9FD061B7E84AA6264
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7cR0VWfQ8OCzohuUeYyxR9I_KFg.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214453
IP address blocks: 82.153.0.0/24 maxlen: 24
217.145.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:08:8c:74:a3:7f:b9:fd:06:1b:7e:84:aa:62:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edc4745567d0f0e0b3a21b94798cb147d23f2858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:6b:c9:f4:76:b6:18:c3:6a:55:c2:a2:cd:
32:bc:9e:5f:59:60:14:dc:2a:78:fe:40:44:d7:55:
67:ca:7f:e1:af:4a:cf:09:e8:92:8b:51:07:e1:46:
7a:43:30:8f:b1:f7:22:77:8a:9b:83:23:80:70:73:
11:0d:a1:d5:6c:15:3d:ae:ae:06:a6:ea:3f:27:ea:
81:52:36:b0:59:fc:b0:0d:e7:c5:e9:29:93:44:d7:
dc:2c:43:d6:da:aa:0a:ae:70:f2:93:01:49:f4:0a:
ed:6d:d1:32:c7:8e:aa:eb:0f:c5:8a:ec:bb:fa:b3:
f2:8d:8f:9d:e9:cb:d5:b6:79:b4:a0:27:51:1b:c8:
8f:62:1d:e9:68:2c:bb:94:e3:15:b5:ec:3e:c8:b4:
20:23:2b:c6:59:ae:67:67:2e:62:7f:a0:a0:c6:43:
73:92:19:ae:1b:77:a6:47:02:9d:b2:32:77:d4:0e:
1a:d9:01:f6:2a:b2:24:26:cd:94:fd:cc:6b:66:10:
d4:ee:de:0e:f0:8d:8a:7e:15:b7:03:a0:48:04:87:
b0:3a:16:11:fd:2d:bb:2c:38:89:26:e3:46:7f:62:
0f:8f:cb:02:5e:ef:9d:bb:42:bb:1c:d5:43:b7:99:
d8:4b:cc:c9:47:e0:46:f8:e9:52:dc:8e:7c:9d:2b:
fc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C4:74:55:67:D0:F0:E0:B3:A2:1B:94:79:8C:B1:47:D2:3F:28:58
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7cR0VWfQ8OCzohuUeYyxR9I_KFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.0.0/24
217.145.68.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:40:98:a4:35:33:dc:aa:87:9d:d4:32:c9:f8:74:6b:a8:41:
a1:9b:41:68:8c:6a:4c:ef:88:66:f7:f7:42:4a:41:cd:af:c6:
71:0b:6b:c2:6e:d5:2a:6e:53:7a:00:cb:56:c6:e7:cd:75:d4:
a4:d4:b0:dd:c0:b6:60:8c:dc:34:9a:72:29:c8:08:c0:78:05:
78:23:88:be:7f:a5:45:bd:30:f5:a2:d0:87:2c:26:1a:12:46:
b4:93:e3:ac:fc:6d:05:76:35:d1:2b:36:57:87:1a:06:de:3c:
eb:a0:ce:34:91:b5:4c:2d:df:2d:d7:75:6e:e8:a7:dc:1b:6c:
df:0b:b2:64:26:3a:1e:7c:e9:74:ed:07:10:27:ac:40:c0:22:
cd:33:e9:bd:fb:06:8f:3c:7f:f7:ee:3c:0f:7f:71:62:87:e1:
f0:65:f7:dc:37:32:f1:87:20:89:75:00:31:02:84:c9:4a:bb:
62:8f:db:0d:64:f5:0e:a8:27:47:53:3b:bd:0e:5b:d1:c6:9d:
60:c6:ab:66:6f:b9:2c:a1:5c:39:a0:90:91:0e:9f:19:8a:ea:
a0:20:a0:cc:8e:f4:13:39:b9:11:b8:47:4c:70:6a:ff:c3:6b:
09:2b:d6:44:f6:6a:2a:8f:b1:e5:69:e9:b7:91:c3:80:f8:18:
e3:09:6d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:14 2026 by rpki-client