Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YIPOsTAToNJsBy2XwJLw1PLZsSo.roa
File: YIPOsTAToNJsBy2XwJLw1PLZsSo.roa (raw, json)
Hash identifier: O95j4DS8eXlclqW/nfqzN2izteYLXOCcP7ss0ezDlwQ=
Subject key identifier: 60:83:CE:B1:30:13:A0:D2:6C:07:2D:97:C0:92:F0:D4:F2:D9:B1:2A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368E0A31800775427102B3BAC3655C2
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YIPOsTAToNJsBy2XwJLw1PLZsSo.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202662
IP address blocks: 82.152.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e0:a3:18:00:77:54:27:10:2b:3b:ac:36:55:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6083ceb13013a0d26c072d97c092f0d4f2d9b12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:0a:ab:cc:46:29:65:8e:87:53:64:46:83:
07:f2:7d:50:51:2f:89:9a:f4:d8:22:19:49:b7:df:
5f:36:5b:93:e9:0a:80:b9:72:d3:48:3f:47:71:91:
7d:5e:c9:95:50:9d:f3:d8:d7:6e:54:dc:61:59:de:
08:1d:49:cd:50:9c:9c:ae:5b:4b:68:79:f9:71:57:
8c:0f:f7:b1:98:be:5e:0a:9c:62:36:d8:13:82:ae:
e6:0d:0f:65:3c:8a:b1:90:f7:86:6d:da:94:10:f1:
ab:09:6a:52:ba:e3:ac:56:bd:3f:d4:d5:ee:19:36:
e8:16:11:32:9d:e5:b5:8d:1d:d7:63:88:15:df:bd:
23:25:67:31:bf:3b:53:70:b3:a3:5a:49:64:bc:16:
71:25:bd:8b:4a:b5:2d:0e:1d:1b:67:1f:48:84:be:
21:e1:b6:e0:c6:7d:2b:e8:c1:c5:b7:45:f6:c4:b7:
e0:49:90:68:d0:66:9a:56:a1:60:5a:9c:69:e0:7a:
9d:0f:3d:ac:c1:5b:1d:76:b5:58:36:81:76:5e:01:
37:d9:73:05:d2:be:60:7e:f4:70:90:68:33:07:46:
92:6b:91:92:8e:40:c2:c4:03:3e:c1:19:12:19:d0:
4c:47:97:4d:65:0f:49:3f:5d:cf:63:d8:e3:58:26:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:83:CE:B1:30:13:A0:D2:6C:07:2D:97:C0:92:F0:D4:F2:D9:B1:2A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YIPOsTAToNJsBy2XwJLw1PLZsSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.160.0/21
Signature Algorithm: sha256WithRSAEncryption
03:79:d1:dc:dd:be:5b:4b:37:da:ff:6b:09:00:97:d2:75:1d:
08:4e:08:b0:a2:83:f6:63:5a:c4:25:39:68:76:40:f5:95:24:
b4:f5:7d:cf:90:40:d1:f7:94:b5:24:27:db:a5:fe:91:b6:0d:
03:ac:84:84:73:bf:ef:59:91:85:cd:27:3c:7e:bd:a6:df:b7:
5a:17:d7:33:1f:66:31:04:83:8f:ac:b5:a3:cd:f7:94:68:de:
d3:32:20:bb:db:22:d1:94:d3:c7:c1:4e:40:d5:23:d0:4b:e0:
7a:ae:42:ec:f5:44:0d:36:9b:24:c7:23:d1:b3:24:e6:51:2c:
65:ff:44:e8:c2:2b:7e:63:fd:da:f2:18:4e:7f:98:2e:0d:33:
ae:2f:17:49:7d:fb:25:ef:46:e0:11:fe:1c:6e:d7:b2:f5:01:
17:d8:6d:dc:62:b2:ce:f4:11:af:59:49:05:1d:3c:0e:c6:a1:
ad:36:b7:97:08:3b:63:f6:e9:7f:af:82:7e:16:65:42:a7:4e:
1b:69:da:c2:6e:08:aa:e8:ec:3a:59:f8:03:78:ba:23:84:31:
98:6a:64:aa:66:78:68:c3:04:91:6d:df:fa:0b:20:21:3a:e3:
fd:a7:3b:25:ef:32:11:ff:b1:81:26:75:2f:d7:40:19:37:32:
86:03:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:16:32 2026 by rpki-client