Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/X-_JiVm2EFiucYeyxM3FKO2cbA0.roa
File: X-_JiVm2EFiucYeyxM3FKO2cbA0.roa (raw, json)
Hash identifier: tq4+atyRURp6PG5Q1xD1rkpzuA3+CefPoSjhAo2IgZ8=
Subject key identifier: 5F:EF:C9:89:59:B6:10:58:AE:71:87:B2:C4:CD:C5:28:ED:9C:6C:0D
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC68696C4D7F7627345D2DD7B711062A7
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/X-_JiVm2EFiucYeyxM3FKO2cbA0.roa
Signing time: Mon 03 Aug 2026 07:28:56 +0000
ROA not before: Mon 03 Aug 2026 07:28:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205781
IP address blocks: 82.153.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:86:96:c4:d7:f7:62:73:45:d2:dd:7b:71:10:62:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 07:28:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fefc98959b61058ae7187b2c4cdc528ed9c6c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:3f:45:f2:ec:34:75:16:7d:dd:ea:ea:a5:
00:6b:53:2c:e2:f9:05:48:85:38:cf:53:f1:76:de:
81:92:5f:42:74:f9:f1:24:b3:15:9c:d5:30:7c:69:
1e:d2:63:00:18:e5:0e:1c:02:c7:dc:27:3a:cb:46:
34:6d:e4:7e:3b:69:d5:1e:b6:8f:05:b1:87:81:fe:
47:fd:45:aa:2a:62:39:11:6c:6e:2a:36:c1:17:e9:
ed:01:60:71:ea:e8:1e:eb:47:72:c2:ca:30:c6:75:
5a:62:9c:5a:4c:ba:0d:82:c6:dc:43:15:5d:d9:2b:
07:39:1a:b0:6e:da:0e:70:cd:c6:28:6c:36:eb:08:
71:55:33:e1:2c:09:24:e2:90:28:18:3c:1a:c5:86:
37:c4:f2:57:0e:f7:7b:de:cf:a0:ed:8e:7a:0a:ac:
64:84:ab:09:74:39:b8:0b:ce:1c:a6:64:f5:3c:cd:
40:0d:73:3c:43:3a:e7:5d:c6:60:59:4d:c3:e2:f9:
c4:18:c0:96:04:a0:4c:2d:61:7e:7a:92:50:55:da:
b0:1f:34:ff:16:d9:d4:f2:1c:18:f5:de:0f:ad:4f:
af:d5:0c:39:d6:77:94:5a:50:86:c6:7f:36:59:66:
4c:85:46:de:bd:34:20:6e:fb:4e:34:a9:de:35:43:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EF:C9:89:59:B6:10:58:AE:71:87:B2:C4:CD:C5:28:ED:9C:6C:0D
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/X-_JiVm2EFiucYeyxM3FKO2cbA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7f:a5:31:d8:6e:f8:7d:40:c0:92:1b:4c:b5:fd:55:13:a0:
83:61:6e:85:22:88:63:73:63:7d:cc:43:1f:0f:24:5a:7b:0d:
3b:e8:ea:a6:be:7d:40:ac:85:bf:9e:26:e4:a2:9c:74:38:e6:
dd:7a:1f:6c:1e:a0:b4:94:30:17:e0:b0:bd:4c:b7:d0:6d:43:
3e:74:7b:11:0b:d3:d2:c9:56:fb:96:08:f3:34:8f:8a:ad:8c:
19:1f:84:02:29:57:72:da:6c:3e:a6:c3:4d:58:6b:56:a6:5e:
51:51:ff:31:0e:3c:f0:3c:77:a5:75:ff:2e:33:56:a3:59:ef:
0b:c5:b2:6d:11:2a:81:80:6e:79:76:98:77:66:89:1b:6d:78:
1b:c4:bf:d7:fb:29:b4:8b:89:20:d4:fa:0a:c0:f7:3b:d5:ad:
19:ac:89:fc:e8:10:af:0b:57:f2:a1:d6:df:e9:ea:ff:48:97:
1f:6f:db:71:c3:94:16:b6:82:07:a3:50:f8:98:79:2f:b2:82:
fe:74:a1:a2:86:a8:df:34:94:33:43:c3:ae:46:14:b1:14:fc:
3e:38:89:20:2a:f4:74:2b:e7:44:fb:2f:2e:17:1e:74:d8:d5:
85:b3:51:5b:ef:e0:9a:ad:0f:c5:97:24:c6:d2:ce:f8:24:7c:
ef:ec:66:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:28 2026 by rpki-client