Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C8558HdME48o4iLJ8nJXTeG6J0g.roa
File: C8558HdME48o4iLJ8nJXTeG6J0g.roa (raw, json)
Hash identifier: gBAeWCeysSVrmRibchYCDbP8wGKUynaFBH39naYmEDM=
Subject key identifier: 0B:CE:79:F0:77:4C:13:8F:28:E2:22:C9:F2:72:57:4D:E1:BA:27:48
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A01422F03886A681C59ACBA82FDD0A486C
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C8558HdME48o4iLJ8nJXTeG6J0g.roa
Signing time: Tue 18 Aug 2026 09:10:29 +0000
ROA not before: Tue 18 Aug 2026 09:10:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63099
IP address blocks: 82.153.57.0/24 maxlen: 24
82.153.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:22:f0:38:86:a6:81:c5:9a:cb:a8:2f:dd:0a:48:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 18 09:10:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bce79f0774c138f28e222c9f272574de1ba2748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:11:ee:c2:6d:70:1b:80:52:96:16:4e:3d:
7f:c0:c9:e0:93:bb:58:50:6f:e6:8d:73:d5:55:cc:
58:46:4c:b6:54:13:e6:8a:84:af:ac:fd:d3:b4:2d:
24:d6:e5:25:7c:86:70:20:04:77:0d:e6:47:40:17:
9e:d7:d8:4e:1a:54:a8:30:cb:f0:e5:02:36:81:40:
3e:63:4c:08:d6:72:ab:1f:53:9d:3f:81:3c:dd:62:
63:93:b1:27:6a:2a:2e:44:32:90:d9:d8:d6:4e:a0:
05:10:e3:7f:09:f6:fa:9b:8d:06:6e:2f:46:44:dd:
a9:81:45:2f:88:0d:2b:a6:0e:79:42:0f:58:fc:f0:
e8:7e:c9:e3:70:29:f3:e9:4b:87:0a:c5:72:93:88:
e2:d3:aa:0b:72:b0:a1:90:98:5a:8e:d9:12:5d:64:
2b:b8:87:cb:37:24:12:6f:15:52:55:8d:73:5c:16:
b4:85:e9:57:16:76:15:08:79:ee:12:84:88:b1:4e:
98:06:46:9d:cd:6e:92:52:78:79:cc:32:8a:f5:bf:
dd:c0:ac:b5:e2:cc:bd:92:d9:57:f7:01:cf:7d:35:
49:9c:9d:33:27:51:fd:fd:da:20:a6:ff:cb:02:70:
49:86:e0:8d:a8:77:9f:e7:c9:44:ee:73:06:66:c8:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CE:79:F0:77:4C:13:8F:28:E2:22:C9:F2:72:57:4D:E1:BA:27:48
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C8558HdME48o4iLJ8nJXTeG6J0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.57.0/24
82.153.185.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c0:67:5a:02:24:cc:7f:05:ba:70:d1:a1:57:4f:b9:6f:9f:
07:0b:69:e6:7f:f1:90:9d:98:a2:f0:76:07:63:c6:08:ed:bf:
c7:96:d2:dc:d9:31:14:e8:c5:cd:e3:01:06:34:b6:77:77:38:
2d:8d:1f:8f:39:1a:a4:17:33:2f:20:a1:8e:e0:e7:45:b0:51:
00:bc:db:cf:15:10:74:f8:fc:3c:ff:73:06:53:89:a6:c1:3a:
d6:3a:b6:44:2b:34:ab:f6:d3:36:5b:e9:45:d0:77:c2:90:d9:
ec:c2:a4:73:02:07:85:a9:5a:92:b1:13:01:fb:8b:14:88:04:
20:7a:08:27:1e:1c:ee:27:bd:59:78:54:13:03:c9:cd:aa:21:
53:12:ed:14:d1:e3:15:62:a4:12:bf:e0:84:52:ab:5c:e0:21:
d3:01:e0:99:9c:6c:8b:3b:3e:94:ec:84:61:92:6c:b0:d3:a7:
76:da:09:4f:0c:5d:86:2f:6d:78:ad:0e:02:a6:3a:39:80:3f:
85:77:c5:0d:b2:71:6f:01:e3:e6:c5:83:55:b8:c3:14:d2:3b:
96:1e:ef:07:33:db:2f:27:da:6c:56:a0:4d:1f:92:ef:80:f7:
e6:2c:46:93:eb:6d:d0:68:af:7a:f0:e2:a1:f7:69:25:a1:24:
06:2a:15:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:41:02 2026 by rpki-client