Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RQCgP3ZVhjnYDhqoLbWMJn04PY0.roa
File: RQCgP3ZVhjnYDhqoLbWMJn04PY0.roa (raw, json)
Hash identifier: meICp+ZVOqJzU2bVDZnxGMTO0Nm2eaJ+0UrJFeIVtQQ=
Subject key identifier: 45:00:A0:3F:76:55:86:39:D8:0E:1A:A8:2D:B5:8C:26:7D:38:3D:8D
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368CA4E3E5A599103B27235BA900D6B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RQCgP3ZVhjnYDhqoLbWMJn04PY0.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 82.152.117.0/24 maxlen: 24
217.145.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ca:4e:3e:5a:59:91:03:b2:72:35:ba:90:0d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4500a03f76558639d80e1aa82db58c267d383d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:8c:e5:39:47:30:7b:29:d1:95:71:bd:d3:
82:f0:1a:3e:6f:a7:45:f2:44:d2:25:1d:51:47:15:
05:4d:99:cb:bf:7b:d2:dd:94:c6:7e:5a:62:1d:e5:
88:90:7c:b7:32:64:79:59:68:5a:fa:2b:71:8c:4f:
2a:35:f4:b1:d7:ab:8b:aa:80:a7:13:84:fa:c4:0b:
4f:2b:3d:e9:01:1a:c2:8d:e5:81:c8:de:e8:12:98:
86:da:cc:e4:a2:1c:5f:a6:a9:42:b1:ac:1d:dc:e3:
ae:a3:a1:b8:21:21:06:6f:8d:1f:7a:57:6c:50:5e:
a2:c7:55:eb:09:f0:be:c5:91:0b:f9:ab:90:ca:d4:
9e:c3:03:db:64:97:e9:2d:64:ed:25:ee:9c:0e:2f:
1e:3b:32:53:66:63:d0:e4:46:0f:38:27:fb:ec:14:
a4:ef:01:46:2b:0c:70:80:e1:a8:91:44:6d:0b:6e:
9f:92:26:b4:ed:8e:76:77:a6:bb:3e:17:66:51:8c:
19:e3:f6:e9:fc:e4:95:62:c9:8d:88:8f:d9:00:8d:
5c:73:4b:c4:40:7d:a7:ba:35:1e:e0:b4:cb:63:47:
c4:d2:3c:07:ed:0e:95:b3:3f:b5:b6:4b:71:41:80:
88:b5:1b:43:7f:3e:6c:35:55:3f:4a:16:f5:65:e8:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:00:A0:3F:76:55:86:39:D8:0E:1A:A8:2D:B5:8C:26:7D:38:3D:8D
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RQCgP3ZVhjnYDhqoLbWMJn04PY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.117.0/24
217.145.74.0/24
Signature Algorithm: sha256WithRSAEncryption
33:cb:60:ef:c0:b9:0d:7f:45:0e:f6:b5:61:95:68:3f:2d:c5:
c3:9a:03:b6:24:4c:59:51:dd:5d:bb:5b:c9:90:5a:3e:a7:a0:
7d:14:fc:13:f4:34:64:b7:3a:05:14:3b:ca:cc:3c:3d:52:43:
66:d0:bc:ad:6d:fe:28:32:25:c2:bf:99:0d:ab:0b:e8:b6:06:
a2:7a:42:38:61:36:be:04:f2:f4:3e:a7:72:f1:a9:70:a9:be:
1d:0e:3a:8a:78:11:be:e0:2a:fd:40:f5:09:43:ff:a0:34:99:
0f:e8:da:a4:22:c6:0d:db:22:ff:5e:c2:36:2f:16:68:31:1a:
08:24:36:56:d1:de:d8:f5:7f:f8:81:c6:35:37:eb:1c:38:d1:
4f:63:26:c8:ec:bc:e1:c4:14:f0:ae:6d:30:09:e3:df:76:c1:
32:56:ba:91:f1:df:c2:20:3f:32:c9:4c:d6:e0:4f:80:ac:1d:
b4:bf:af:a5:0e:ef:45:da:ff:62:c8:7b:6d:c4:22:10:87:60:
53:81:72:a7:b2:d1:b3:88:c1:c2:fd:23:be:1d:35:78:54:c8:
a3:ba:db:45:8a:69:7e:7c:3f:66:e4:db:83:b1:ff:7f:dd:65:
21:ef:7e:b8:dc:4f:5a:02:f6:7c:fd:d8:b4:42:49:aa:6e:9d:
b6:4a:34:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:21 2026 by rpki-client