Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_OO5_1KwMP9Rde7BXwtTOSb8pfE.roa
File: _OO5_1KwMP9Rde7BXwtTOSb8pfE.roa (raw, json)
Hash identifier: qsirQj6SeAOzKkswjBG7apmesXNmYYHHt3o7l5/KNFg=
Subject key identifier: FC:E3:B9:FF:52:B0:30:FF:51:75:EE:C1:5F:0B:53:39:26:FC:A5:F1
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A00EB2B69697AD0170ECC1291AE4D7C716
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_OO5_1KwMP9Rde7BXwtTOSb8pfE.roa
Signing time: Mon 17 Aug 2026 07:49:48 +0000
ROA not before: Mon 17 Aug 2026 07:49:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61112
IP address blocks: 82.152.90.0/23 maxlen: 24
82.153.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:b2:b6:96:97:ad:01:70:ec:c1:29:1a:e4:d7:c7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 17 07:49:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fce3b9ff52b030ff5175eec15f0b533926fca5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:d5:54:25:67:04:5d:29:ea:84:a0:7f:5c:
9d:1f:67:f2:3f:c0:c1:14:16:9e:35:a1:11:66:02:
32:56:89:4c:25:f3:27:cd:66:8d:de:2c:79:73:d1:
46:09:51:6f:4d:9a:27:16:b6:8c:06:a7:01:02:af:
d7:f0:0f:b3:98:4b:ba:93:df:e9:bf:19:dd:98:4a:
c0:c0:ba:f6:21:99:ab:a0:00:61:6d:44:af:22:a3:
d3:b0:db:3e:06:4f:99:4f:98:08:94:2d:a8:6e:a3:
ba:39:b0:e1:5c:b0:e7:52:c8:00:79:36:22:42:2c:
af:58:8f:e8:78:ed:8e:91:3b:34:ba:53:41:38:8f:
1d:4e:53:b0:9b:01:6b:14:5d:6b:08:04:c5:a7:6b:
1f:ca:01:98:f0:e3:c0:1c:fe:db:02:27:55:99:36:
2c:7b:19:f7:4b:bf:26:f6:21:fb:a5:80:28:0f:0f:
9c:09:70:d0:7f:49:4a:f6:9b:55:1e:89:c5:8c:83:
8f:2b:d3:c1:48:c6:f9:69:4e:cc:94:0d:c5:58:e2:
a7:a2:18:96:e4:fb:e9:36:32:49:03:a4:1b:96:74:
39:6b:09:3a:f5:1e:da:28:d3:d6:42:02:4f:06:f9:
37:fe:0d:4b:09:04:10:26:61:48:28:84:09:7f:03:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E3:B9:FF:52:B0:30:FF:51:75:EE:C1:5F:0B:53:39:26:FC:A5:F1
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_OO5_1KwMP9Rde7BXwtTOSb8pfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.90.0/23
82.153.135.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d4:41:7c:4d:21:a8:12:ba:77:41:38:ad:d0:f0:14:34:e9:
f8:4b:65:a7:19:8e:1f:22:12:1a:09:fd:61:7b:0c:63:6b:1c:
26:fd:50:19:1e:80:7a:dd:52:fa:cc:07:67:14:a1:bb:67:00:
86:f6:06:56:01:cc:9a:ad:a8:8e:d6:5c:43:2d:fa:e5:6f:e7:
8f:ca:aa:c2:d0:d4:a6:df:58:c2:24:86:3b:cc:81:f9:5a:eb:
fa:48:ad:64:87:a9:3e:39:22:68:af:65:b3:9f:1b:4b:03:d4:
7d:bf:6a:f7:da:00:86:5c:26:63:5d:be:e4:36:83:8d:38:04:
29:9e:90:0a:67:16:c3:03:dc:77:5f:cd:cc:ec:6e:c4:9b:9a:
3f:64:2f:23:10:08:bd:1f:63:27:16:4f:5c:2c:a9:08:e6:b2:
8a:4e:e3:ee:dc:aa:85:e8:4a:05:18:64:c8:93:fc:c2:e6:66:
11:a4:2b:0a:8b:e8:14:41:84:38:a1:9d:80:79:28:d3:db:73:
b2:95:f9:b1:d3:15:8c:9f:4e:cd:d7:ef:94:4d:51:b9:cb:eb:
37:c9:3e:ce:69:93:6d:24:a9:32:5f:50:0b:d7:31:75:e4:67:
7e:c6:81:aa:08:cd:b8:af:9c:63:09:8c:78:e3:9c:0f:2e:14:
08:b4:85:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:25 2026 by rpki-client