Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BLR7UD_xAYxWke5I3U9oREkfHaU.roa
File: BLR7UD_xAYxWke5I3U9oREkfHaU.roa (raw, json)
Hash identifier: i6FuZFLyMr833Jfz4HbLBScfd+xM0mTuwxT3byoqwMQ=
Subject key identifier: 04:B4:7B:50:3F:F1:01:8C:56:91:EE:48:DD:4F:68:44:49:1F:1D:A5
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2369095488D3C7AB1518CA0DE8DFA8C4
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BLR7UD_xAYxWke5I3U9oREkfHaU.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 82.153.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:09:54:88:d3:c7:ab:15:18:ca:0d:e8:df:a8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04b47b503ff1018c5691ee48dd4f6844491f1da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:76:aa:10:42:6c:ea:ea:56:4f:d5:ba:06:
21:21:0d:87:38:4a:24:8e:e9:34:2b:ec:07:28:d3:
64:ed:84:4a:98:87:75:6e:fa:3b:24:a8:ae:4d:30:
96:b5:09:23:b4:9a:c7:f1:cb:fc:0f:7e:c4:33:cc:
09:96:95:e2:bd:10:10:64:1a:34:89:d8:ec:28:b3:
17:4a:07:bf:04:21:25:e8:9c:12:ac:60:23:04:2a:
af:0e:bf:b7:05:ae:53:85:92:a5:0c:51:8d:ad:0a:
87:c4:39:d4:32:56:9d:e3:d9:49:b6:bc:d5:d1:cd:
59:53:2c:69:e9:ec:92:a1:94:99:1a:2a:0f:a5:fc:
d7:0d:d6:a4:20:7c:00:8a:2b:c3:2e:24:87:82:c5:
0f:f2:37:e3:63:77:0f:ee:c8:2c:91:40:32:a0:2a:
cf:ce:41:e3:21:63:4c:9c:b3:d5:e9:61:70:e1:ad:
e9:38:96:84:e8:18:7a:15:21:1e:07:e1:2d:27:a2:
99:ad:a5:b4:cf:1c:46:88:be:ee:e7:61:35:2b:4d:
41:20:95:ba:d9:b8:b9:0e:af:4b:47:57:f8:a4:30:
61:bd:3b:1a:2e:ca:1c:b1:15:ed:89:43:4a:13:cc:
57:9b:b2:04:ab:6f:c9:2e:a8:9a:91:ac:3d:60:47:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:7B:50:3F:F1:01:8C:56:91:EE:48:DD:4F:68:44:49:1F:1D:A5
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BLR7UD_xAYxWke5I3U9oREkfHaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.218.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b2:d4:1a:ac:c2:55:68:23:d9:cc:d1:5c:fa:42:85:d2:ab:
e5:b8:39:0a:08:f5:17:64:e5:74:17:c6:5a:08:33:03:53:27:
d6:0a:50:68:2d:21:81:63:82:81:09:c3:06:a3:bc:bf:03:71:
86:64:29:e9:4a:f1:7b:38:de:8f:26:5c:51:2d:74:b8:24:e9:
aa:64:6a:0d:06:7f:54:fd:42:fa:81:19:42:a7:a2:18:19:d3:
ba:49:92:7e:fc:95:2c:f3:90:e0:b6:01:fa:43:e1:cb:35:a9:
75:b4:5a:15:29:11:4c:9f:b1:16:72:d6:d3:7d:c1:b0:6e:34:
07:75:5b:73:3a:d3:e8:cd:d2:5d:7c:5c:4b:3f:70:4d:14:40:
bf:35:bd:7b:7d:95:69:09:30:8c:d1:87:db:9b:45:1a:d2:5a:
fa:a6:6c:d1:44:62:e7:1a:b0:81:f2:a1:3e:7a:75:15:ab:fb:
3d:8c:13:5d:e5:1f:13:33:72:fc:d1:f4:c0:47:ad:20:5d:70:
e4:7f:e4:4d:0d:01:1f:02:5b:9d:75:9d:2b:82:d8:3b:b4:e1:
6e:0a:50:84:56:95:1a:b0:ea:2e:78:cf:79:69:df:2c:44:08:
16:19:d5:a4:9b:c3:57:cb:49:ba:df:a5:8e:37:cd:de:c4:e5:
7a:f6:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:18:12 2026 by rpki-client