Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Fda8ftaKASS5eDLHkB9HacbacaM.roa
File: Fda8ftaKASS5eDLHkB9HacbacaM.roa (raw, json)
Hash identifier: hBNg6A7s4pVwZ9qCoZmK8dLivB7ktJ2kHuc6SlMGgaY=
Subject key identifier: 15:D6:BC:7E:D6:8A:01:24:B9:78:32:C7:90:1F:47:69:C6:DA:71:A3
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F4B26898C9BD5B48599D2C8CEE360F1D3
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Fda8ftaKASS5eDLHkB9HacbacaM.roa
Signing time: Fri 10 Jul 2026 08:30:44 +0000
ROA not before: Fri 10 Jul 2026 08:30:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 82.153.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:26:89:8c:9b:d5:b4:85:99:d2:c8:ce:e3:60:f1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 10 08:30:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15d6bc7ed68a0124b97832c7901f4769c6da71a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:e5:b9:4c:3f:20:f0:34:c7:d9:94:5a:e7:
63:af:a0:8b:21:64:28:b1:e3:42:58:da:87:f9:dc:
7a:98:b4:60:f7:4f:4b:56:c8:27:35:b6:bd:d7:19:
8e:a5:90:3c:06:92:58:06:52:08:b4:a3:bd:43:ce:
d5:67:cb:df:6d:63:56:cc:6a:ce:50:92:be:38:b1:
1e:83:c6:e6:08:bf:a1:f7:97:60:8c:63:ae:e7:d3:
ea:15:8e:ed:79:b5:0a:95:c0:10:fe:be:49:1b:b8:
15:e8:9b:bb:73:d6:87:25:7d:4e:57:a3:f5:b0:0b:
da:5b:00:26:29:de:78:6c:aa:b1:86:27:ca:fe:51:
5c:a3:aa:05:d2:ee:12:43:bf:95:6a:aa:21:70:07:
70:34:8f:6e:de:4c:d0:fe:70:78:de:50:3f:ff:51:
ef:cc:6e:09:db:8f:ef:75:66:f0:14:16:6f:e6:fc:
a5:f7:6e:f2:95:7f:2c:43:16:15:c6:46:93:dc:0a:
2c:8a:c4:b1:8f:dd:64:8b:ce:c6:6e:58:ec:d5:ce:
08:85:24:e4:6a:73:49:89:1f:d9:29:61:d5:24:a2:
0a:ce:c0:34:b3:b7:cf:cc:bc:2f:db:68:61:8f:a6:
dc:9e:79:8c:73:2e:91:d7:f9:f9:62:ec:ce:0c:47:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D6:BC:7E:D6:8A:01:24:B9:78:32:C7:90:1F:47:69:C6:DA:71:A3
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Fda8ftaKASS5eDLHkB9HacbacaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.36.0/24
Signature Algorithm: sha256WithRSAEncryption
31:cd:d8:1c:cd:74:67:40:e3:4c:cc:3e:79:24:c0:3a:68:eb:
e4:fb:c8:0f:4a:fe:15:74:f7:33:61:b6:f9:6d:7e:61:26:17:
6a:43:70:6f:25:27:1a:31:4e:fa:c2:04:57:fb:29:97:c7:ec:
63:cf:0b:18:6d:01:a4:c7:eb:5a:04:95:f8:93:f5:9c:f3:51:
53:c7:d6:7f:f5:ec:9d:6c:28:07:d8:6c:06:2d:ae:89:40:8c:
cc:2d:73:06:94:ee:b8:3c:07:66:8a:79:13:ec:c6:3a:51:9e:
97:e1:96:9a:0a:fa:a1:b1:72:b8:f0:21:07:3b:cb:db:4a:ee:
c8:4a:97:90:a3:78:b7:47:51:0d:00:43:e9:c3:24:79:96:78:
6c:fe:1f:8a:f1:c1:64:f2:6a:3c:31:46:2a:00:ab:e3:d8:d9:
1f:63:b6:94:5e:c8:48:2c:f8:ab:6d:91:89:ce:7c:21:0d:06:
a8:ba:28:f4:69:42:96:6c:78:88:de:e4:97:6c:da:02:cc:8b:
c8:eb:a8:43:1d:e0:0b:b0:a0:b8:01:7c:51:18:f7:fb:88:71:
1e:ab:52:67:ff:5b:df:03:db:c2:5c:42:76:b6:90:91:df:fd:
a4:52:73:e6:a0:6c:87:4b:ca:d6:63:2e:60:b4:85:a9:a2:0b:
e6:78:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:24 2026 by rpki-client