Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RQHx0ipLRU0SG-bMK-_DvsRNR4A.roa
File: RQHx0ipLRU0SG-bMK-_DvsRNR4A.roa (raw, json)
Hash identifier: e7d50/rrtKypWdYI+1+Ygrdw03Xo5BDKNvg6KlRXq3I=
Subject key identifier: 45:01:F1:D2:2A:4B:45:4D:12:1B:E6:CC:2B:EF:C3:BE:C4:4D:47:80
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F236923BCEE6C48BF72B73AB1E73B714B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RQHx0ipLRU0SG-bMK-_DvsRNR4A.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401479
IP address blocks: 77.93.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:23:bc:ee:6c:48:bf:72:b7:3a:b1:e7:3b:71:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4501f1d22a4b454d121be6cc2befc3bec44d4780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:61:90:69:02:21:2e:63:50:34:b9:d3:82:
8f:e3:c5:a4:b1:a1:4b:3e:72:1c:ee:7c:f1:47:20:
52:e6:14:fc:f4:6d:01:d5:ca:20:5a:5b:be:5c:19:
a1:a3:bd:b1:56:d6:c8:7c:bc:14:90:c1:2b:69:0a:
34:19:52:5a:7a:3e:9e:4a:d3:12:fc:ae:6c:f1:27:
cb:b9:82:e1:25:75:2f:29:4e:24:34:e7:44:7b:f8:
64:94:41:33:80:f2:cf:de:f3:12:44:64:08:23:80:
47:3a:ef:14:06:70:2f:c5:1a:bd:49:19:3e:6f:45:
e8:a3:f8:bd:a1:7d:59:52:73:72:97:a2:a5:e4:ce:
e2:9c:c4:cc:76:7c:dc:07:43:98:5a:1e:15:4b:aa:
ba:58:fc:97:f5:96:07:5f:98:dd:62:0a:e1:7b:87:
97:a7:01:f9:12:3b:a4:4a:5f:81:c4:19:02:23:36:
ae:7d:61:da:1e:41:0b:e6:60:94:73:b5:99:cd:e3:
ce:02:ee:66:c6:fb:3f:48:9e:d5:be:81:4f:23:16:
d1:ef:d0:41:60:4f:2a:49:82:f3:55:d7:e5:bb:cc:
08:e5:64:cb:45:c9:27:e4:2c:4b:e5:6c:6d:19:bb:
ec:61:37:e0:42:a4:c4:4d:cc:31:ff:16:b0:17:6e:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:01:F1:D2:2A:4B:45:4D:12:1B:E6:CC:2B:EF:C3:BE:C4:4D:47:80
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RQHx0ipLRU0SG-bMK-_DvsRNR4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.152.0/22
Signature Algorithm: sha256WithRSAEncryption
30:de:ff:3f:ee:2a:fa:75:08:d4:bd:f0:be:dd:21:50:0a:46:
93:36:66:d5:f4:6f:1e:42:c3:0d:ee:9a:59:0f:62:2c:07:5f:
75:9b:23:bc:7e:4d:e0:5a:db:ec:87:c1:19:c7:27:f5:ce:27:
6f:0a:ab:96:e8:78:be:06:53:d2:6d:af:4a:fb:8e:78:5c:ea:
59:6d:6f:6c:cd:b2:d8:dd:5c:cc:6d:7e:c4:24:d3:4d:ca:15:
77:cb:7b:28:88:01:86:31:dc:5e:3c:70:2f:33:a2:9a:e6:cb:
11:fe:5d:43:f6:8c:83:b8:39:7f:55:6d:0f:84:ca:5f:41:73:
fd:25:f2:7d:f5:26:24:c9:4b:8d:7f:47:b9:54:dd:97:0f:72:
38:cc:b5:74:59:21:ef:cf:f3:f6:e4:7b:49:7a:3d:43:06:05:
a1:91:fc:8d:4b:62:58:e5:6f:44:8a:ee:8d:e6:81:07:7e:43:
4b:71:91:6a:b5:65:70:44:56:8d:dd:23:90:0c:2d:54:3a:03:
bc:ee:fb:2a:93:e6:af:34:bf:00:ea:d1:e4:56:80:48:50:e4:
88:43:36:54:5f:fd:29:ca:cd:97:09:25:3c:65:9f:bd:03:46:
76:99:77:e7:ac:a0:07:52:77:ee:96:70:0d:41:1d:05:45:a4:
8c:48:76:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:02 2026 by rpki-client