Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JnJGyweVDhWKgweMJwECzUA-1ow.roa
File: JnJGyweVDhWKgweMJwECzUA-1ow.roa (raw, json)
Hash identifier: DimJ/T4dpzhGyaKrqDz2lD1Ij0gNvyF448L+NvwH60M=
Subject key identifier: 26:72:46:CB:07:95:0E:15:8A:83:07:8C:27:01:02:CD:40:3E:D6:8C
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A01071308659C988231D3873441ED62442
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JnJGyweVDhWKgweMJwECzUA-1ow.roa
Signing time: Mon 17 Aug 2026 15:57:28 +0000
ROA not before: Mon 17 Aug 2026 15:57:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149573
IP address blocks: 82.153.123.0/24 maxlen: 24
217.145.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:71:30:86:59:c9:88:23:1d:38:73:44:1e:d6:24:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 17 15:57:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=267246cb07950e158a83078c270102cd403ed68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:9e:4e:42:1a:05:a6:fc:7c:cf:75:e4:40:
f7:09:a3:06:1c:96:f3:1e:41:f7:52:6e:a2:e6:a1:
f9:52:b1:a0:89:55:e4:cf:b0:9b:4a:14:11:d6:f2:
20:64:44:0b:14:d0:ca:94:8c:34:14:a1:a5:68:95:
e3:32:f5:64:64:36:50:a0:b0:2f:dd:38:e6:0d:95:
9f:37:3f:3c:46:70:1e:bf:e7:58:48:cd:83:6c:19:
63:a5:bc:56:ca:b0:ee:95:03:ea:cd:82:8e:38:25:
1b:ef:e0:33:ad:e6:e3:b1:70:da:33:e6:95:40:32:
ab:b3:f7:39:32:93:c0:58:2c:ba:0d:e7:d7:33:00:
91:f7:8b:96:5e:71:86:5e:96:d9:3c:57:0f:1a:05:
c4:ff:d3:20:8a:1e:c4:c1:1e:bc:56:09:94:1a:91:
bc:52:18:a8:f9:af:e3:03:42:a9:68:7d:c4:51:49:
31:8c:00:be:ec:5f:77:cc:28:46:03:9e:0c:e8:77:
ae:b9:04:7c:1b:e3:6d:5d:5b:43:bb:57:78:97:0d:
87:9d:aa:3a:5b:d5:55:9e:ac:28:02:c6:5f:86:47:
7d:3c:ad:e9:00:45:0e:59:0b:6f:96:f4:66:90:0c:
24:ce:a8:71:c6:8f:92:61:b5:88:f0:c7:aa:f8:19:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:72:46:CB:07:95:0E:15:8A:83:07:8C:27:01:02:CD:40:3E:D6:8C
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JnJGyweVDhWKgweMJwECzUA-1ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.123.0/24
217.145.69.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4e:65:72:b7:30:61:45:70:d7:f5:90:8d:42:7d:03:8c:ca:
6f:66:5d:fe:5d:7c:1f:50:6a:52:95:2e:c4:75:b2:09:dd:c4:
8f:e6:a4:47:46:22:cd:1d:e3:d7:cd:0c:62:de:bd:8f:9b:71:
4f:19:bb:bb:09:3c:61:83:f8:4e:ed:32:4a:30:3c:15:18:f0:
b7:33:19:9f:cb:83:cf:e6:46:81:15:a5:d0:3c:58:1e:67:2d:
20:e7:1e:8e:63:3d:40:04:5f:11:0d:30:c0:01:b6:65:b6:83:
e0:fb:5a:d6:9c:5e:22:14:72:40:32:34:50:8b:10:ff:1b:5b:
43:ee:68:82:e9:e6:ed:d9:b0:02:9a:98:52:bf:70:5e:5e:7f:
78:50:30:d5:c2:0e:fa:40:07:76:bc:eb:97:3a:30:02:a7:96:
ac:a8:64:c0:4d:ef:76:81:40:4e:1f:23:01:17:5e:8c:80:88:
24:e4:e0:b2:18:ef:c3:fa:b4:ef:e2:8e:7f:be:8a:e6:a0:85:
5f:a2:7f:30:6e:b6:cd:84:9e:30:55:56:9b:96:af:56:d7:83:
a4:56:5d:72:3e:82:16:ce:05:5a:b2:c3:36:e2:33:53:af:36:
5b:55:2f:84:f6:a4:dd:cd:a9:f6:bc:5a:97:b9:70:21:f5:f1:
36:cc:d9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:48 2026 by rpki-client