Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PFpszEJR6_dAfq37bIZD3jqlRhU.roa
File: PFpszEJR6_dAfq37bIZD3jqlRhU.roa (raw, json)
Hash identifier: 8hy86YXh8JgxMjb4J7YWL+OP4xV6QFqsPs46yLwhWo0=
Subject key identifier: 3C:5A:6C:CC:42:51:EB:F7:40:7E:AD:FB:6C:86:43:DE:3A:A5:46:15
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FB360D38F94F85583EF82238D365E7458
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PFpszEJR6_dAfq37bIZD3jqlRhU.roa
Signing time: Thu 30 Jul 2026 14:14:54 +0000
ROA not before: Thu 30 Jul 2026 14:14:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213460
IP address blocks: 82.153.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 08:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:60:d3:8f:94:f8:55:83:ef:82:23:8d:36:5e:74:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 30 14:14:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c5a6ccc4251ebf7407eadfb6c8643de3aa54615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:9a:ba:dc:f2:49:7e:ab:33:76:18:22:67:
6d:91:59:4f:3f:bd:d9:63:47:45:29:14:c8:df:bb:
24:46:8d:dc:62:8e:39:25:29:be:6b:a5:31:99:b3:
a2:ab:b3:8d:ca:e6:14:a8:23:6c:9c:80:18:58:21:
04:d6:a5:f7:d7:27:48:68:3d:3a:7b:87:dd:27:d1:
0c:d9:02:1f:2a:34:b4:90:6b:8f:8b:00:a6:21:24:
57:e7:6e:56:fc:d3:83:5b:e3:d9:52:fd:d2:d1:ea:
ae:2e:56:11:18:b8:f2:c3:3b:ee:5f:97:e2:2f:78:
b8:e1:b1:44:5c:fa:39:2e:b3:d0:0f:f8:e4:a4:f3:
cd:98:e0:fd:58:51:a5:48:26:d3:18:75:68:b1:92:
2e:8e:89:f9:ba:52:c2:8f:2d:d4:10:ea:f7:0f:14:
a2:63:61:59:60:f0:5c:34:8e:49:9d:77:da:75:20:
e3:c0:b7:8e:3b:64:17:98:85:9c:f8:eb:73:16:63:
02:6a:75:77:99:09:b5:c8:d1:69:58:8f:73:cf:03:
45:ca:9f:4f:67:47:d3:c0:e8:13:35:95:60:64:5e:
af:ee:2e:4c:3f:88:f9:26:22:71:62:ef:b3:08:9a:
cd:c2:96:43:ca:a8:62:76:1d:06:3e:fb:bf:40:99:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5A:6C:CC:42:51:EB:F7:40:7E:AD:FB:6C:86:43:DE:3A:A5:46:15
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PFpszEJR6_dAfq37bIZD3jqlRhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.220.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ad:94:71:7f:fc:b5:a9:79:84:34:48:7e:ba:62:f6:be:a8:
19:7c:de:50:50:06:30:6b:4f:5c:1b:60:32:4a:68:86:a4:a3:
4b:35:2e:38:ae:8b:c0:33:9a:c5:b5:e2:9f:21:83:a8:5d:8d:
90:bd:43:3b:22:cb:6b:bc:b8:de:b6:2b:2c:6f:22:02:82:0c:
e0:78:ca:43:d9:6d:63:b8:60:cc:f1:c8:50:96:43:43:ee:85:
35:70:9c:e6:21:41:86:11:93:61:88:61:79:7f:9c:56:d3:f3:
db:ed:08:73:e1:c8:a3:f6:85:c9:00:5a:b9:cb:14:5a:98:c6:
d9:d7:f3:66:25:ca:19:be:58:a6:99:9d:ac:76:fe:bb:df:a8:
8e:84:f4:06:47:73:06:36:bd:48:66:f9:84:47:73:88:25:6f:
79:b5:7e:5f:68:bc:74:5b:dc:0b:71:69:77:53:09:2b:7e:0d:
b6:0c:6a:9f:5a:4f:68:a1:cb:d7:18:9c:b0:fb:9c:ee:8f:3a:
ce:90:44:6e:81:14:02:e7:6b:48:36:45:9b:f2:19:86:d7:25:
8c:c0:e3:ec:3a:ef:f1:c2:d1:28:50:89:74:07:44:d3:5d:f6:
0f:34:4d:db:98:d3:82:c5:c2:61:5c:a5:69:0c:56:12:9e:1d:
c2:e4:de:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 14:14:13 2026 by rpki-client