Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DB4A3202rMEIkrVlsj_S6vBl4h8.roa
File: DB4A3202rMEIkrVlsj_S6vBl4h8.roa (raw, json)
Hash identifier: GEuV+R0Odj4pelMWwQL7MxnmAYzWK7FYwL+d7tFRXd8=
Subject key identifier: 0C:1E:00:DF:6D:36:AC:C1:08:92:B5:65:B2:3F:D2:EA:F0:65:E2:1F
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC68699AFBC869341155B4379ACABDC95
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DB4A3202rMEIkrVlsj_S6vBl4h8.roa
Signing time: Mon 03 Aug 2026 07:28:57 +0000
ROA not before: Mon 03 Aug 2026 07:28:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215865
IP address blocks: 82.153.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:86:99:af:bc:86:93:41:15:5b:43:79:ac:ab:dc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 07:28:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c1e00df6d36acc10892b565b23fd2eaf065e21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:4c:a1:2e:9c:ba:e0:6e:db:57:4a:2c:7d:
03:32:a4:ec:ab:bf:ef:20:fc:d0:91:f9:3b:e4:42:
08:07:02:60:60:ae:2c:ca:29:e0:c2:fc:48:bb:4a:
cd:31:cc:c1:b7:e6:ee:be:d1:cc:c2:88:f6:75:7e:
8e:f0:0f:52:2a:6a:88:73:48:82:5e:5c:50:e3:b9:
1d:2c:bf:a5:d3:47:33:2a:ca:67:8e:6f:04:cc:a4:
cd:0e:07:de:8f:d8:9b:a3:32:d2:35:bb:26:f2:3a:
2e:dd:9d:78:75:20:a0:96:df:51:65:da:fd:39:b9:
fa:65:9d:e4:ec:a2:49:da:f8:97:09:e5:cd:d5:5e:
5a:b5:a8:ce:ae:77:3d:2b:91:58:c2:0b:aa:a8:c1:
ce:5d:7a:02:e7:86:56:b0:77:06:be:49:00:f1:a1:
a8:95:56:97:f8:54:fc:aa:e7:9b:d4:72:27:be:3c:
60:18:1e:cb:09:df:34:df:5d:b9:68:44:29:35:00:
a1:51:5d:78:11:7b:53:0e:22:df:06:ac:5f:91:c2:
f3:27:db:e8:57:fb:79:df:18:66:96:7c:e1:d4:c4:
47:db:95:aa:92:2f:9d:37:69:e7:72:44:6b:84:ff:
e6:98:e6:a0:3b:3f:fa:57:4f:f6:01:e0:a4:a0:94:
a4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1E:00:DF:6D:36:AC:C1:08:92:B5:65:B2:3F:D2:EA:F0:65:E2:1F
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DB4A3202rMEIkrVlsj_S6vBl4h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.147.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:72:31:a1:60:85:90:f5:9e:03:6c:9e:21:7e:7b:76:14:b0:
93:bc:45:88:d1:42:43:0a:d8:fd:2b:7d:62:49:26:69:8f:9a:
58:58:2c:3b:e5:db:df:fa:53:44:95:1b:cf:92:35:03:81:3b:
30:a9:18:83:64:2e:9d:39:cc:8a:1b:47:34:67:51:cb:4c:a7:
93:06:1f:37:b7:8d:7e:14:c5:36:d7:77:d5:e3:3c:4b:98:f9:
66:b7:fe:f4:58:8d:06:ae:cc:5d:07:df:6d:d4:d3:2a:ba:59:
64:0a:fb:ae:3e:76:82:57:76:10:4c:6e:56:c2:3a:6e:39:49:
55:73:e4:0a:85:25:2a:ca:20:ad:a9:40:b6:de:e7:14:89:dc:
79:b7:95:3b:19:48:42:2d:66:c4:d0:5e:d4:de:07:93:9b:5d:
71:a4:98:32:f0:09:9d:49:eb:2d:48:5a:19:c0:88:8d:b3:1f:
bc:66:5c:74:ee:0a:07:76:dc:f6:74:08:37:52:6d:87:41:1b:
7e:a1:dc:e7:5a:e8:a0:81:1d:0f:21:1e:9a:0b:3c:b9:e3:98:
59:2d:e8:09:4c:5f:91:32:ac:6c:4e:b3:c9:66:be:9a:13:8a:
ee:d8:7a:d9:60:63:4c:f6:f6:a6:13:7a:42:e0:30:6d:eb:f1:
6e:fc:e1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:28 2026 by rpki-client