Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ODCsTNFd2-BeaAoyHNf-Q-8CzcY.roa
File: ODCsTNFd2-BeaAoyHNf-Q-8CzcY.roa (raw, json)
Hash identifier: xzzFGHrkdHVp+RsgQS92tDgYMPv/M1IVUzqmuY/BNOU=
Subject key identifier: 38:30:AC:4C:D1:5D:DB:E0:5E:68:0A:32:1C:D7:FE:43:EF:02:CD:C6
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FB75E941656205D43B86C6C504EFCD327
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ODCsTNFd2-BeaAoyHNf-Q-8CzcY.roa
Signing time: Fri 31 Jul 2026 08:50:56 +0000
ROA not before: Fri 31 Jul 2026 08:50:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 82.163.16.0/24 maxlen: 24
109.176.134.0/24 maxlen: 24
213.218.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:5e:94:16:56:20:5d:43:b8:6c:6c:50:4e:fc:d3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 31 08:50:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3830ac4cd15ddbe05e680a321cd7fe43ef02cdc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:98:8f:b1:d4:fa:41:c9:40:77:fc:2d:58:
bd:98:96:36:b2:64:d5:ab:e4:3d:68:23:9d:4a:a3:
35:ed:ea:9a:c6:d4:b7:07:65:52:25:16:d4:0c:66:
26:d3:5f:de:23:19:cc:b4:7a:49:ce:80:4d:50:8c:
d8:0d:cf:8f:98:18:84:44:a1:f0:be:d5:c9:34:cb:
3b:ec:a9:05:a9:00:93:17:3d:f1:11:ef:8a:01:2c:
d1:a0:3e:7a:89:99:6f:34:01:d7:76:8e:39:75:01:
e4:31:b7:80:ab:2d:db:ea:92:fe:8d:90:98:89:51:
12:4a:26:4a:43:97:b4:84:cf:2c:27:06:94:b1:c8:
86:32:49:19:97:0f:0d:f6:c9:93:3e:46:9e:b0:03:
f0:8e:54:d3:64:02:5c:17:ad:4b:d9:9b:88:03:6a:
88:12:06:01:a5:28:55:d0:91:42:be:ac:d5:dd:8c:
73:99:43:4c:87:1e:b2:d1:9e:12:1f:52:89:94:9f:
0e:4c:42:ad:43:f3:00:dd:c2:26:2f:2b:d8:75:e6:
f4:6d:fd:5d:66:80:83:ca:64:f1:0c:5d:2e:3d:4b:
8c:ff:6d:26:d1:83:d6:d1:21:94:d3:66:bc:69:75:
c5:f3:b2:bd:2d:85:47:c3:1a:ad:85:b5:8a:3c:bd:
53:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:30:AC:4C:D1:5D:DB:E0:5E:68:0A:32:1C:D7:FE:43:EF:02:CD:C6
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ODCsTNFd2-BeaAoyHNf-Q-8CzcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.16.0/24
109.176.134.0/24
213.218.216.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:df:aa:4c:f2:1b:08:f0:c5:9e:c2:23:79:29:95:53:a3:1b:
54:2b:dc:a5:a2:b5:f5:23:63:f5:d8:6b:17:05:3b:67:db:0e:
35:d6:41:6f:23:7e:ce:26:f4:df:d6:ee:b4:09:f2:e5:a1:19:
cc:e6:1d:d8:74:15:03:3a:bc:1c:16:36:7c:3f:8a:c0:9e:73:
a5:18:12:d9:05:c3:b1:5b:48:ea:b1:51:6b:ff:dd:03:64:51:
7d:0b:cd:e1:38:54:0e:88:a6:ca:f0:7d:da:de:3e:ce:58:f8:
46:1d:5b:c9:8b:e4:62:5a:10:16:8e:67:bd:e7:f1:c5:e2:46:
9d:4f:b3:6c:88:a1:04:b7:77:c5:40:96:f6:67:15:e8:1a:cf:
b4:ad:4b:2a:97:bc:bb:42:19:94:d4:28:0c:f2:9a:b0:b8:9c:
b0:bf:dd:67:3c:01:8f:3c:6d:10:85:df:33:e3:03:a0:21:c6:
50:4e:87:14:13:38:9f:1f:b4:86:64:4a:58:1e:c5:f7:3d:71:
e5:f2:84:fd:e9:83:d3:69:e8:04:3e:d8:bf:c5:07:b7:af:77:
e3:03:32:f6:28:bc:52:66:29:70:36:5e:06:17:f8:af:01:64:
84:20:8d:51:6a:8c:a9:3f:ab:d3:0c:9c:c4:9e:d1:46:f3:6f:
cb:b4:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:32 2026 by rpki-client