Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E6Q6DxmuwwTRDgYUz0fKQWBxBx0.roa
File: E6Q6DxmuwwTRDgYUz0fKQWBxBx0.roa (raw, json)
Hash identifier: w5B28kDnxwNa+WkU9upxT8IVDcN3dpAv8wYH8KS2VTY=
Subject key identifier: 13:A4:3A:0F:19:AE:C3:04:D1:0E:06:14:CF:47:CA:41:60:71:07:1D
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368B5E59D975EA38DF4D0965FF127DC
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E6Q6DxmuwwTRDgYUz0fKQWBxBx0.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 82.153.110.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b5:e5:9d:97:5e:a3:8d:f4:d0:96:5f:f1:27:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13a43a0f19aec304d10e0614cf47ca416071071d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:0d:4d:e5:87:37:de:3f:65:0c:ca:72:47:
aa:a6:94:91:08:e9:c9:05:64:c6:84:92:32:95:2a:
91:2c:5b:fd:6f:d9:dd:33:85:c1:70:4d:8f:92:65:
f6:03:3e:e2:0f:0a:dc:37:91:30:e8:ed:69:95:cb:
81:b6:2c:f6:1f:33:23:6a:84:f2:1b:04:f2:cd:fe:
0e:92:0d:5a:61:6f:8c:97:75:79:11:5c:9b:7b:d6:
04:34:11:52:82:ad:fa:46:b5:f8:83:9e:22:bd:aa:
57:e1:b6:e9:e9:5c:66:5f:45:b8:93:67:9a:50:ed:
2e:62:d2:76:28:54:e4:b4:0d:ea:90:56:ca:eb:6a:
7f:67:4f:d8:85:23:8d:64:df:55:dc:9b:45:93:9b:
a8:fb:05:2f:43:d0:9c:6a:ca:d6:56:2c:1b:59:31:
41:e4:2d:bf:b6:e5:90:88:fb:23:59:e0:e5:b4:5b:
b3:e0:c0:67:db:3f:c0:75:e9:fc:53:07:dd:e9:b7:
b0:76:e8:1f:85:4d:57:27:f9:7c:5a:90:59:56:7b:
2f:3a:58:7b:89:85:88:6a:85:3a:c7:c7:a8:55:76:
4a:1e:e6:80:43:ce:d0:c7:53:54:ae:ba:56:3a:43:
c2:d8:fe:71:e1:15:f2:f5:b3:32:eb:df:6e:88:74:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A4:3A:0F:19:AE:C3:04:D1:0E:06:14:CF:47:CA:41:60:71:07:1D
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E6Q6DxmuwwTRDgYUz0fKQWBxBx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.110.0/24
89.213.7.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0c:f4:3d:a2:55:ed:48:63:5e:db:d9:32:5d:c1:55:80:ba:
6e:36:dc:5f:2f:b4:06:7b:3a:27:11:c0:85:1f:83:1f:9e:41:
fd:67:13:21:20:fe:74:a0:7b:01:6a:7f:77:65:ad:0b:81:0c:
69:65:0f:cd:a2:e6:57:68:fd:ac:7a:31:a4:f9:bb:21:7d:5c:
16:05:92:0f:62:86:6f:41:92:16:79:aa:6c:5e:d7:2b:88:4a:
18:1e:a6:cf:ef:37:0e:69:02:10:98:a5:69:69:bf:c8:ff:06:
57:c9:cd:70:46:25:0d:bd:3e:f2:8f:96:17:26:9b:48:c4:2c:
8d:f5:35:b2:7c:a2:0d:7f:f9:b2:c3:73:f4:1b:bd:cd:e7:27:
85:eb:4b:86:4a:08:6b:c6:05:44:4a:f7:a8:d9:9f:e4:ce:d6:
9a:ea:fa:5a:bd:dd:cb:b7:3b:05:b2:22:00:34:c4:1f:39:25:
57:8e:43:ae:63:a8:91:e6:48:f8:83:e3:d9:c3:67:e9:d9:91:
a3:e5:83:71:72:5a:17:4f:83:59:88:17:62:e3:b9:be:bc:eb:
6b:c7:18:0e:a3:42:0b:b6:9b:8e:ee:32:7c:f4:b4:08:ec:95:
61:1b:74:06:0c:d8:7c:13:37:2c:7c:1e:8f:3b:25:7d:bc:b2:
65:b9:66:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:22:55 2026 by rpki-client