Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R-JIbniuofsHofITNQxWh0k-UJo.roa
File: R-JIbniuofsHofITNQxWh0k-UJo.roa (raw, json)
Hash identifier: +vzdg1nnv3W5rmYjQjR6EoBYHpBFqSQd2pyhzfm29hQ=
Subject key identifier: 47:E2:48:6E:78:AE:A1:FB:07:A1:F2:13:35:0C:56:87:49:3E:50:9A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368FFDFDFE8AAC6F126DE703D319283
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R-JIbniuofsHofITNQxWh0k-UJo.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213476
IP address blocks: 82.163.0.0/24 maxlen: 24
89.28.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ff:df:df:e8:aa:c6:f1:26:de:70:3d:31:92:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47e2486e78aea1fb07a1f213350c5687493e509a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:01:a6:0c:6d:0e:1d:ec:f6:c5:86:f7:b2:
7a:53:c8:eb:df:eb:6a:92:c9:d0:a1:ed:9e:7a:eb:
6f:96:20:ea:72:ef:36:2c:fb:c5:94:2b:75:84:71:
ac:5c:ff:eb:31:a5:63:a2:8a:31:55:41:22:47:cd:
9c:12:d2:87:bd:77:b8:7d:40:d8:42:a5:a1:15:62:
bb:f7:93:53:aa:f0:33:7e:6f:ab:cd:80:30:56:70:
d7:1f:59:d0:d0:c6:38:a6:c7:45:0d:b8:f0:70:8a:
b1:d4:e3:3d:10:8b:78:a6:25:46:1d:b3:ed:2a:2d:
0c:81:31:07:06:00:09:b6:b4:5d:bf:15:d0:53:34:
ee:18:f6:74:48:c4:f1:72:bf:34:13:fc:73:a5:fd:
20:c9:6e:f5:3d:33:27:b6:b3:46:b0:ac:45:f4:a9:
f5:58:93:4f:38:96:43:84:97:54:6c:9e:aa:0e:65:
fa:cb:1f:cd:9f:9f:a1:17:c0:4b:59:51:f3:94:69:
a3:a0:49:48:04:43:fa:3d:7f:67:d9:8c:74:1e:56:
35:3b:4e:60:63:8c:db:13:72:ce:35:fc:c6:0b:f2:
23:f9:50:d3:51:2a:4e:74:fe:a8:5d:6e:02:25:df:
3f:89:97:f5:c9:77:84:99:36:5c:8b:ad:7e:80:0f:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E2:48:6E:78:AE:A1:FB:07:A1:F2:13:35:0C:56:87:49:3E:50:9A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R-JIbniuofsHofITNQxWh0k-UJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.0.0/24
89.28.234.0/24
Signature Algorithm: sha256WithRSAEncryption
60:fe:f2:84:85:de:ac:c2:98:9a:e5:15:61:a2:f5:f9:e0:ae:
1a:01:c1:10:06:c7:18:8e:1e:b2:90:82:6a:48:7d:b3:90:48:
06:1d:33:24:64:56:5a:0a:de:eb:d1:a4:25:04:4d:9f:7d:6c:
56:f5:64:ac:5f:3e:fb:c2:3b:bc:62:e6:7c:c0:34:c8:cd:8d:
b5:a2:c2:d9:db:5c:64:22:a4:23:88:5c:43:b0:06:67:af:51:
5f:4d:a3:8f:b4:e9:bf:8a:32:2e:17:96:47:53:d5:c6:05:06:
a8:9c:f7:46:95:53:78:cd:15:2e:cb:f1:21:ac:6f:5e:ec:1a:
03:d5:9a:de:fa:2a:79:a3:ab:ba:3e:88:ff:0b:64:8e:b2:63:
1c:31:68:6e:5b:91:38:72:4c:0d:88:d1:fe:fc:12:6e:6b:01:
d1:bf:71:71:8b:7a:69:60:3a:29:7d:6c:e5:08:8d:f7:a7:6d:
36:99:22:b3:2a:78:8d:5b:af:32:de:56:fa:6c:54:3f:41:d3:
bd:10:06:c6:90:e6:6b:15:42:79:5e:1a:f9:ba:cd:70:f2:e6:
73:28:2e:19:a1:9e:8c:5a:03:88:36:45:6f:9c:5e:3a:26:87:
29:69:1c:14:20:0d:14:59:62:19:88:73:ed:27:f7:51:77:d7:
f8:84:98:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:52 2026 by rpki-client