Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LbKLzU2Gr6_B7XxLnsDMhje6Q84.roa
File: LbKLzU2Gr6_B7XxLnsDMhje6Q84.roa (raw, json)
Hash identifier: pPJKQTQI8tl4ZA9wzW9FpXu161jsVGe26Oo2fRFAo1M=
Subject key identifier: 2D:B2:8B:CD:4D:86:AF:AF:C1:ED:7C:4B:9E:C0:CC:86:37:BA:43:CE
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368D0A534980D2A7414F252E9CDA5C4
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LbKLzU2Gr6_B7XxLnsDMhje6Q84.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153383
IP address blocks: 82.163.24.0/24 maxlen: 24
82.163.25.0/24 maxlen: 24
82.163.26.0/24 maxlen: 24
82.163.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d0:a5:34:98:0d:2a:74:14:f2:52:e9:cd:a5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2db28bcd4d86afafc1ed7c4b9ec0cc8637ba43ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:33:d8:41:e5:f0:54:7d:c4:39:6c:2d:26:76:
fa:1e:fc:ba:78:30:c2:b3:7e:2a:4d:f9:26:e6:3a:
83:3b:7d:f0:26:1d:ea:10:05:c9:43:fb:05:8e:82:
2c:21:5a:e5:7d:9a:37:fc:88:9b:a0:d1:1e:39:ee:
19:8e:4f:e1:98:85:ce:ff:02:71:ed:91:af:b1:29:
45:e4:74:92:fe:17:71:b9:4b:80:8e:1e:d5:94:b7:
e5:93:54:58:7c:7a:6b:37:02:c5:49:2b:9a:11:c3:
7e:45:f0:aa:1f:50:12:4f:ad:83:8e:9d:59:1e:47:
57:8b:a4:94:20:bf:04:16:a4:93:a5:50:12:12:c4:
45:18:96:00:59:88:bf:08:4b:ed:bf:67:49:56:aa:
93:77:84:a5:43:f8:da:1a:8e:66:1d:20:69:6b:f7:
94:16:21:be:a3:09:a8:62:0c:4b:cc:a0:18:53:99:
d9:32:0a:18:03:74:72:70:76:40:c9:75:06:fd:f4:
db:bf:7c:83:bb:7c:3f:c5:9f:67:1d:7b:fb:4d:85:
76:ec:85:36:8a:b5:70:07:0b:8d:76:89:e3:1d:5d:
29:34:6e:73:bd:26:a6:5d:f1:4d:c6:f5:82:fd:b3:
a2:dc:ca:77:63:21:60:c3:d4:a9:d5:e4:ee:c1:12:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B2:8B:CD:4D:86:AF:AF:C1:ED:7C:4B:9E:C0:CC:86:37:BA:43:CE
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LbKLzU2Gr6_B7XxLnsDMhje6Q84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.24.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:87:95:09:40:b4:41:70:f7:ea:7b:9a:b5:73:24:18:01:42:
e8:72:cf:85:9c:e2:39:6f:80:ab:15:19:83:00:b4:a3:03:ba:
20:59:9f:5a:bd:77:c5:19:59:07:b9:9c:15:c9:ac:88:1a:18:
5a:f1:8f:e4:46:d7:2a:d8:33:69:9d:97:f9:48:1e:7d:78:cf:
98:d4:db:6b:25:dc:19:7f:cc:d4:19:12:68:f4:e9:00:44:d9:
4e:66:ec:34:d6:c4:2c:63:60:77:1f:a5:8b:4c:33:2e:58:ad:
8f:d6:28:ee:a9:b9:bf:39:66:c2:b4:92:5b:67:a4:b2:52:2c:
fe:84:b4:94:61:c4:23:37:59:08:95:61:80:6e:6e:4d:c3:b9:
e9:6b:25:e9:d7:fa:e3:8a:5b:3c:68:3c:26:dc:f7:b2:d6:3f:
d6:15:c1:4b:45:4d:0a:cc:29:bf:e4:a9:ee:a6:83:a8:96:6c:
0e:5f:09:a9:a4:ff:bf:15:49:89:81:39:0e:d0:f4:99:ae:95:
6c:45:4c:07:c7:47:9a:9d:a8:3a:ff:0a:8a:00:e5:b3:c6:bb:
39:92:b8:8d:5e:87:60:34:58:c6:e1:bc:49:2c:9f:5f:9f:75:
3b:4f:3e:91:a4:14:b5:fe:b9:93:82:8d:36:af:21:bd:58:37:
b4:17:50:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:38 2026 by rpki-client