Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Hrj28dSOm0r6U27IXg4Zwc-_-hc.roa
File: Hrj28dSOm0r6U27IXg4Zwc-_-hc.roa (raw, json)
Hash identifier: oLZeCjj3h+RLmAJnmiYhmVx8S08pD7guXntBB5WIJkM=
Subject key identifier: 1E:B8:F6:F1:D4:8E:9B:4A:FA:53:6E:C8:5E:0E:19:C1:CF:BF:FA:17
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FF0EB2F8C5E74686520F3C09DEB683CF9
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Hrj28dSOm0r6U27IXg4Zwc-_-hc.roa
Signing time: Tue 11 Aug 2026 13:02:52 +0000
ROA not before: Tue 11 Aug 2026 13:02:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141968
IP address blocks: 82.153.126.0/24 maxlen: 24
82.153.226.0/24 maxlen: 24
109.176.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:eb:2f:8c:5e:74:68:65:20:f3:c0:9d:eb:68:3c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 11 13:02:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eb8f6f1d48e9b4afa536ec85e0e19c1cfbffa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:3e:ca:57:43:90:42:73:5f:d8:9f:36:41:
e1:8f:d6:38:00:ac:86:a0:d8:06:d2:09:74:eb:1e:
90:fe:2d:ae:81:fc:23:ad:44:fd:40:e7:f6:88:2a:
f6:af:e4:af:cf:59:13:cd:06:75:1c:4f:fe:fb:a9:
b0:2a:92:44:bd:57:29:db:ab:1c:36:9b:9a:7a:80:
8a:34:5e:57:e9:2f:90:40:ab:5c:dd:b0:e9:d9:cb:
a1:6d:7b:79:cd:cb:de:f5:68:de:a2:17:3f:94:ea:
43:60:d7:08:a8:02:58:1a:45:c7:50:1c:fb:20:12:
24:6e:b9:f1:bc:e9:79:a5:94:b1:eb:d0:1f:7a:c0:
88:70:a9:84:42:76:b8:14:69:7f:5a:05:49:21:42:
ef:ab:df:b3:39:01:0d:0a:22:6a:93:95:f7:65:ad:
34:55:82:a4:fb:91:e0:e1:59:40:64:eb:91:2e:e5:
94:d1:e3:8c:db:dc:75:2c:ca:68:9b:35:7c:73:bf:
67:d1:fc:33:4d:82:a4:68:4f:22:cc:80:33:13:4c:
bb:47:c7:93:00:b2:04:98:81:75:eb:14:6d:f9:7b:
bb:13:42:e3:d4:00:5c:f8:78:8a:b9:a9:b0:25:ac:
93:04:37:a6:2d:82:3a:0a:fe:9e:35:2b:b0:3d:4f:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B8:F6:F1:D4:8E:9B:4A:FA:53:6E:C8:5E:0E:19:C1:CF:BF:FA:17
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Hrj28dSOm0r6U27IXg4Zwc-_-hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.126.0/24
82.153.226.0/24
109.176.17.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:dc:d2:46:85:c7:52:88:6c:1e:66:d8:8b:15:69:9d:b8:fb:
e7:6b:34:59:86:76:1f:02:db:a1:2d:86:79:21:76:b1:5a:dc:
4b:4b:56:dd:1a:2e:3f:3f:8d:04:00:3c:66:42:18:24:4b:a7:
52:1e:3b:96:02:60:4b:7c:a6:03:e5:0a:15:f4:07:ca:1f:e3:
86:03:42:e1:4a:57:4f:73:5f:e4:aa:c3:33:3b:69:e1:de:0a:
8d:be:97:d1:32:49:0b:71:a4:1f:3f:8e:05:0b:dd:17:bd:c7:
f5:6a:0a:9e:56:c6:0f:75:ca:db:0e:e4:9c:03:60:64:0e:63:
41:63:4c:b3:2f:ae:52:79:a5:98:cd:3a:43:52:06:18:b4:e2:
0d:df:df:fa:cb:e5:48:79:11:5b:47:ce:2c:b5:32:7e:ee:6f:
bc:4a:a2:e1:a7:52:42:5f:e3:e9:a3:13:c7:16:13:42:64:0e:
15:e0:cd:4a:8b:ed:de:2b:de:ff:ad:32:79:1f:95:85:3d:1f:
1f:85:0f:26:95:2b:26:41:a3:b0:36:68:f6:8b:2c:3d:b3:49:
85:3a:a6:08:9d:ff:48:9e:82:be:24:e4:27:2e:28:3e:ae:5f:
e0:62:2f:d3:95:62:97:7f:5e:88:5b:2b:b0:d9:8d:35:e1:87:
d7:84:66:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:00 2026 by rpki-client