Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R22ZGS3tA_VXh1Pb84t9w9v-wvg.roa
File: R22ZGS3tA_VXh1Pb84t9w9v-wvg.roa (raw, json)
Hash identifier: CChSE0mjV6mCpC+Y1ec/vebxuhDwhuN+r4hsU1pzv90=
Subject key identifier: 47:6D:99:19:2D:ED:03:F5:57:87:53:DB:F3:8B:7D:C3:DB:FE:C2:F8
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FD60935193CA2DDA52C447E8DD2338B5B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R22ZGS3tA_VXh1Pb84t9w9v-wvg.roa
Signing time: Thu 06 Aug 2026 07:45:55 +0000
ROA not before: Thu 06 Aug 2026 07:45:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139642
IP address blocks: 82.152.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:09:35:19:3c:a2:dd:a5:2c:44:7e:8d:d2:33:8b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 6 07:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=476d99192ded03f5578753dbf38b7dc3dbfec2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:f4:44:5b:d2:30:e7:23:3f:ac:40:ba:ac:
5a:6b:a1:de:81:75:90:49:4a:ac:76:d8:dc:a3:22:
b1:5e:3d:cf:b8:69:c4:91:37:d9:e9:4b:d3:e2:02:
01:07:47:1e:95:d2:60:f9:fb:f4:07:c3:a9:31:d1:
22:e6:81:c7:2e:34:53:e4:43:d7:4e:6b:d9:f0:c9:
c0:17:1d:82:3b:36:34:30:7b:43:3a:60:bc:e9:50:
31:c0:39:68:17:74:29:88:63:bc:6d:b6:79:12:29:
aa:3c:db:08:7d:24:51:56:3f:d9:ca:54:d9:31:59:
20:39:c1:78:4d:51:99:c6:af:1c:e4:d5:96:49:22:
fe:29:1e:cf:c2:d5:ef:51:e1:84:bc:7f:51:6c:5f:
5b:96:c3:33:a9:58:1b:0c:ff:86:ac:ed:99:f5:7b:
16:5c:fb:ac:06:bb:47:dc:0b:cf:85:09:27:b3:fc:
0b:21:0d:ae:2d:39:c3:dc:8e:f8:16:44:2b:2b:47:
57:79:77:93:51:e3:15:25:3f:77:90:96:31:ac:d4:
89:c1:42:ef:11:7c:47:6a:96:93:df:22:92:c4:72:
f0:14:dc:3b:b2:d8:0b:be:08:95:80:6e:1f:d9:22:
48:9c:80:67:0e:d3:e6:e3:ff:82:39:7f:9d:df:c7:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6D:99:19:2D:ED:03:F5:57:87:53:DB:F3:8B:7D:C3:DB:FE:C2:F8
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/R22ZGS3tA_VXh1Pb84t9w9v-wvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.6.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7b:04:54:d9:36:d4:00:84:80:ec:b4:1d:79:b1:79:2c:6d:
56:ae:94:0a:8a:f8:cb:f8:69:3f:37:4d:bf:fa:18:6f:8d:38:
76:fc:cc:e3:0d:09:2b:b5:37:ec:6a:b4:82:4e:51:05:c8:20:
85:1e:56:0c:6a:f2:06:e5:1a:6c:36:2b:20:46:7a:04:aa:83:
8d:f9:ed:7d:f3:d8:27:d0:c9:b7:82:82:21:44:28:1f:a7:1b:
5e:68:32:ec:5c:38:65:6f:79:8a:c3:2f:20:93:ad:7f:aa:10:
e3:e8:8c:59:c3:e3:7f:91:f5:8b:3b:9e:6b:42:99:b9:e3:dc:
2f:86:d6:7d:8a:e2:63:96:eb:15:66:2a:1f:0f:03:3b:a3:6a:
24:04:4d:97:c2:46:a0:0c:80:c5:73:53:2b:c4:ad:44:c5:09:
43:f0:84:c4:60:41:58:21:ed:83:69:54:6b:8c:fe:11:77:d9:
69:c4:38:50:c4:7c:95:04:94:5e:d6:13:22:72:80:80:7a:d0:
e2:d5:f2:5e:ca:3f:18:45:71:98:99:8c:27:23:a0:46:37:2f:
66:1d:89:b7:19:11:01:74:37:7f:2b:e9:28:ba:ff:a1:b5:8c:
fc:aa:c7:fd:46:4a:6a:3e:18:46:cb:ee:b4:b7:f2:01:8c:24:
a6:03:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:24 2026 by rpki-client