Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DeGmXcuCOfgINlX5iKbFyuNaUoQ.roa
File: DeGmXcuCOfgINlX5iKbFyuNaUoQ.roa (raw, json)
Hash identifier: edsh4zYqwcHCEWh0MFx/VmJRNY0+4/bAWkUNAMlicKA=
Subject key identifier: 0D:E1:A6:5D:CB:82:39:F8:08:36:55:F9:88:A6:C5:CA:E3:5A:52:84
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23691CB859E360342F3DCF271F6A5568
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DeGmXcuCOfgINlX5iKbFyuNaUoQ.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 77.93.142.0/24 maxlen: 24
82.153.55.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1c:b8:59:e3:60:34:2f:3d:cf:27:1f:6a:55:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0de1a65dcb8239f8083655f988a6c5cae35a5284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:01:8a:be:41:2a:10:22:58:ef:ba:b6:54:
25:67:a4:69:b2:b4:c1:72:3f:78:28:fd:24:d9:df:
25:98:a7:26:c3:e9:07:a1:0e:5a:42:4b:d0:1c:e7:
ab:e2:1d:ce:37:2d:20:9e:c4:2f:4d:fb:b6:ff:09:
2b:cb:b4:b5:03:75:15:f5:17:e4:4e:fa:12:47:74:
72:0c:7c:23:9c:cd:08:cc:03:c0:3a:70:fb:20:6e:
96:81:c6:ac:9a:a4:ad:f8:bf:a6:eb:35:62:66:8b:
2d:ee:30:3a:d4:65:6b:73:d0:2e:5d:32:ad:c4:2d:
c3:c6:db:ab:11:9a:f8:3d:cd:cf:2b:24:e6:0b:5d:
03:c9:59:a1:2a:82:cc:fe:3f:9a:c0:55:8f:6b:23:
33:c9:b9:63:ee:ef:66:a8:c8:33:0f:b5:95:13:f3:
aa:aa:7e:85:6c:b4:b5:4d:91:3f:ff:de:85:3a:87:
0c:24:8c:d3:71:b7:c1:29:d1:0d:9d:a6:72:8a:e6:
99:3d:ed:21:12:7a:51:8b:b7:12:a8:5b:e7:d5:3a:
3c:8d:c2:e5:c1:0b:9f:01:ea:09:41:97:40:c7:08:
65:3c:21:b5:30:cb:b1:ed:40:cd:ee:26:99:81:c1:
80:34:f5:04:13:ec:77:2f:83:ff:35:fa:fe:69:0b:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E1:A6:5D:CB:82:39:F8:08:36:55:F9:88:A6:C5:CA:E3:5A:52:84
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DeGmXcuCOfgINlX5iKbFyuNaUoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.142.0/24
82.153.55.0/24
89.213.146.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e4:e7:b1:0a:6e:26:64:06:b3:8c:8f:a8:e2:38:25:b5:56:
d1:d6:7f:00:cb:de:7a:52:46:b6:ce:a3:fc:c2:79:a8:51:dc:
18:7a:21:1b:1f:88:ba:3e:3a:fd:35:1d:b4:58:91:b3:9c:98:
0f:84:70:0c:19:19:36:4c:9e:66:c9:bd:5c:a4:47:d6:05:db:
45:05:bc:ec:a9:91:87:4a:47:d3:b2:81:be:9d:d0:99:4a:8a:
64:df:f6:f9:c1:bc:9d:5b:e7:ab:cf:7d:55:9b:ed:13:69:76:
aa:fb:8f:f0:ef:d3:79:d1:cd:e5:bf:e5:d9:f5:81:4a:c8:20:
67:fc:76:a1:1a:87:e5:b8:d6:c6:9f:84:a0:36:d5:f3:2b:65:
5b:e4:6f:d0:07:04:fe:ea:4c:bc:b8:e7:f9:c9:74:e2:26:db:
b7:58:e3:73:d2:ed:28:7b:d6:99:57:18:d4:a4:42:74:d2:45:
1a:15:54:53:5c:84:8d:15:a9:81:0d:c3:50:3e:bc:aa:1a:f0:
3c:18:2b:0a:a6:5a:b8:a4:01:93:89:99:ef:3a:4a:30:3e:f0:
6d:5c:72:9b:b8:bb:d9:54:b8:a5:b7:64:8e:00:0b:e2:8b:38:
4a:75:0e:ec:97:45:a2:ad:13:ae:77:75:b9:12:fc:2e:42:b4:
7a:48:aa:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:21 2026 by rpki-client