Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7d13OAaPLqEOw0kbaUcIx3csSyY.roa
File: 7d13OAaPLqEOw0kbaUcIx3csSyY.roa (raw, json)
Hash identifier: XClN0pD032nDrRM4G4fZIfJy5xVQZYihf3pPMz/4BUc=
Subject key identifier: ED:DD:77:38:06:8F:2E:A1:0E:C3:49:1B:69:47:08:C7:77:2C:4B:26
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FFA009F318B09D93CE0BE1F2C967F2C43
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7d13OAaPLqEOw0kbaUcIx3csSyY.roa
Signing time: Thu 13 Aug 2026 07:22:52 +0000
ROA not before: Thu 13 Aug 2026 07:22:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 82.153.117.0/24 maxlen: 24
82.153.127.0/24 maxlen: 24
82.153.208.0/22 maxlen: 22
89.213.58.0/24 maxlen: 24
89.213.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:00:9f:31:8b:09:d9:3c:e0:be:1f:2c:96:7f:2c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 13 07:22:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eddd7738068f2ea10ec3491b694708c7772c4b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:47:53:be:20:54:c0:68:3a:c9:04:2a:b6:
ab:c3:24:5e:65:d4:8c:7e:0c:12:b2:89:d5:47:f1:
96:2c:66:d0:48:d6:a5:77:2c:89:a9:9d:82:5e:de:
bb:fe:88:d3:90:aa:18:00:8e:29:a2:91:63:d6:dc:
64:13:01:71:1b:3b:33:f1:fa:6b:12:55:0a:97:f6:
bd:88:8c:c8:be:87:9b:06:bf:d9:79:0b:6c:f2:a1:
2b:07:02:5a:47:c2:dd:27:a6:ff:93:7b:a5:13:45:
61:aa:8a:b3:c2:2e:3b:ff:3d:4e:c4:0f:f6:4c:9f:
75:30:8e:8e:78:d1:e0:b2:7b:3b:a3:8a:7a:2e:fc:
5d:42:9e:17:1b:d5:76:9b:a6:41:bc:3b:7a:53:88:
48:9a:a4:7d:10:77:28:ba:13:75:d4:09:51:50:b5:
ba:5e:4c:0e:07:fd:68:27:f3:e1:93:b8:96:96:54:
92:80:63:01:c7:ec:0c:70:dc:d6:69:69:74:6f:bd:
d6:8b:7c:21:72:9e:ff:95:a1:27:fb:e4:d6:9c:f6:
b0:ae:61:54:e7:64:26:0b:5d:a2:44:2d:59:13:2c:
7a:c7:19:fe:be:dc:01:84:1c:d9:fb:2e:b5:30:af:
a0:a2:f1:bc:ec:33:da:f8:db:93:44:20:e1:ef:97:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DD:77:38:06:8F:2E:A1:0E:C3:49:1B:69:47:08:C7:77:2C:4B:26
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7d13OAaPLqEOw0kbaUcIx3csSyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.117.0/24
82.153.127.0/24
82.153.208.0/22
89.213.58.0/24
89.213.228.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:28:ff:ad:f2:4c:0b:b7:9e:16:36:57:96:1f:89:3b:41:e4:
8c:5a:a8:bd:e2:af:26:ac:a4:52:53:2e:e1:b4:68:14:b0:29:
18:e7:af:95:22:8a:7e:e5:b1:24:1e:df:bd:57:06:2f:ec:cb:
ba:2a:00:06:84:ce:2d:34:69:98:2c:21:fb:e2:d4:9f:44:99:
ab:51:e7:41:a9:f9:4e:a2:81:6e:b1:8a:cd:90:3a:1c:9e:c6:
66:23:f6:4c:9a:a6:9d:8b:f2:1f:28:5b:4b:3a:8d:9c:29:db:
93:08:e6:1f:42:e5:b9:f1:60:31:4d:f4:a3:c9:46:c6:36:20:
f6:bc:7a:a9:16:fb:c2:ec:29:3b:d2:e1:7e:de:4a:0f:c9:e2:
a2:ce:55:0f:51:5a:41:0e:d8:fc:74:b1:e9:c1:eb:92:a2:a1:
d4:71:8e:2e:71:f0:58:f2:c9:45:35:e1:fd:ba:01:7c:2b:eb:
bf:dc:27:78:fc:6e:cf:68:b6:4e:d1:f5:5e:7e:95:47:46:38:
f7:73:61:46:fa:3c:1a:86:18:89:7a:34:a6:9a:92:20:1a:b5:
0b:91:db:92:3e:b4:ad:b9:a8:e9:8f:45:8b:7f:17:ac:33:37:
9b:23:29:c9:74:8f:56:69:f1:c0:9c:b6:47:77:c7:f1:bd:d9:
74:cd:00:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:22 2026 by rpki-client