Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Qh-PkOJ2SpxVXvA-XyAyqy3DNxg.roa
File: Qh-PkOJ2SpxVXvA-XyAyqy3DNxg.roa (raw, json)
Hash identifier: 81Gz7nFOjnqpQAg7qKUt/aTt21Kgq+DWY1HhE9W9MkY=
Subject key identifier: 42:1F:8F:90:E2:76:4A:9C:55:5E:F0:3E:5F:20:32:AB:2D:C3:37:18
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FFF69727DF07C804CE9CE33858619837F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Qh-PkOJ2SpxVXvA-XyAyqy3DNxg.roa
Signing time: Fri 14 Aug 2026 08:35:28 +0000
ROA not before: Fri 14 Aug 2026 08:35:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218991
IP address blocks: 82.153.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:69:72:7d:f0:7c:80:4c:e9:ce:33:85:86:19:83:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 14 08:35:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=421f8f90e2764a9c555ef03e5f2032ab2dc33718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:91:9d:4e:59:c4:01:60:7e:e8:ba:1e:2e:
e1:ca:e5:48:5e:21:31:e6:c5:46:6c:5c:0e:50:ed:
60:d1:f8:7e:7b:15:8a:82:bb:8f:e2:1e:c0:95:de:
bd:27:c2:60:f7:a0:f9:32:c3:90:85:a7:70:81:86:
c0:36:dc:44:c6:e5:e1:65:c5:de:9e:9c:9b:6b:bd:
09:0d:70:e3:6b:dc:68:ff:0f:d7:40:58:ce:2d:13:
7d:5d:0d:64:73:cf:cd:98:59:c3:29:1b:f3:7f:fc:
f5:2a:1b:f5:d8:90:6f:10:b3:8c:9f:45:a3:21:2e:
5b:21:2c:c9:5e:b1:1b:c7:16:8f:13:c8:4b:6c:d8:
6a:9e:5e:ed:10:7c:eb:41:64:46:42:9b:14:8d:65:
f3:64:31:26:c6:84:a7:4d:7a:af:2d:51:b8:19:3e:
17:2d:a8:1a:72:53:c2:79:ba:cd:72:24:a8:c8:0e:
55:79:9c:34:81:2a:4d:07:a5:a2:0c:b2:13:57:60:
84:2e:d2:73:8e:5e:36:17:84:18:1c:6f:96:bd:d2:
3a:6b:a3:12:79:7d:e2:8b:73:6f:a7:85:7c:bd:60:
b0:47:05:6a:97:c9:0a:af:23:e9:0e:ca:5d:52:80:
0e:96:ef:28:b1:a2:b7:76:62:c4:28:23:01:fb:32:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:8F:90:E2:76:4A:9C:55:5E:F0:3E:5F:20:32:AB:2D:C3:37:18
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Qh-PkOJ2SpxVXvA-XyAyqy3DNxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.36.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7e:a2:4a:87:94:07:b7:0f:66:c0:8a:47:d7:92:a3:fd:ea:
6b:d0:d8:c4:57:32:1c:ca:fd:68:ba:6c:ba:11:b8:c4:a2:59:
5d:32:8d:23:5d:b5:01:20:08:20:8e:3d:1c:bb:f1:3b:13:18:
23:be:e0:70:6c:8e:3b:e0:dc:e8:26:04:9a:5e:a5:ce:40:d5:
30:1e:84:b7:21:83:86:96:ce:57:d9:03:4d:ee:1b:6c:b7:5a:
93:cf:78:9f:c0:21:77:58:4b:d0:24:d4:15:5f:e5:39:a5:49:
ef:52:81:10:17:8c:9d:18:d5:64:6d:14:d3:e9:e7:76:2c:d7:
f5:66:d1:29:57:b0:30:87:46:28:96:ff:34:92:b2:cd:0a:81:
8f:8c:68:1d:45:9b:a3:bf:38:8e:3a:7e:12:04:aa:b2:cc:bd:
a6:8d:2d:91:36:63:dd:9a:3d:f1:25:e9:c3:a1:73:c7:c7:d4:
74:07:68:93:f7:eb:9b:8a:96:d6:7f:7a:77:d0:d2:c5:81:6d:
17:cb:cb:97:62:36:06:4d:36:a0:39:2a:c4:2f:81:32:0e:ca:
ea:26:6d:aa:4e:64:27:b5:13:13:9f:87:8e:7c:cf:5b:3a:9a:
52:f6:3e:7e:19:49:0e:d4:1f:7f:34:2a:dc:56:f3:57:3f:88:
c8:5d:88:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:29 2026 by rpki-client