Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aPelMaDuj3hBRwdpYcokBwRmtWI.roa
File: aPelMaDuj3hBRwdpYcokBwRmtWI.roa (raw, json)
Hash identifier: J+9CDH/3XUeJ3gnZj5uVW83ruyPBuk4+7vegy0kRewI=
Subject key identifier: 68:F7:A5:31:A0:EE:8F:78:41:47:07:69:61:CA:24:07:04:66:B5:62
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368E93D75A3F75F9C6D20F7AF4DC40B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aPelMaDuj3hBRwdpYcokBwRmtWI.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207992
IP address blocks: 82.153.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e9:3d:75:a3:f7:5f:9c:6d:20:f7:af:4d:c4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68f7a531a0ee8f784147076961ca24070466b562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:d1:f8:41:f9:05:72:41:d1:e7:f0:c9:b2:
1a:41:5c:6e:bb:9d:2e:16:6b:87:45:db:4e:31:58:
0d:1e:1c:bb:c3:fc:eb:f5:59:ac:71:5f:03:d6:d5:
34:22:9f:bb:71:ee:52:a4:59:b3:b2:40:15:a7:93:
9d:88:32:4c:e3:ca:d4:fe:1f:a1:a2:51:c6:a3:5c:
f4:24:45:57:a8:3b:af:7b:0b:db:71:f0:c7:9c:d4:
bd:79:98:97:c9:a3:fc:66:4b:1f:e8:86:08:3f:60:
81:c1:5e:61:68:97:61:a0:4c:01:dd:d0:da:cc:82:
2c:f0:18:db:cb:7c:a1:9c:de:ec:dd:f1:f9:d5:45:
be:f7:66:33:a1:3c:61:0d:63:f8:74:90:f3:a7:0e:
4c:18:c6:79:f6:30:f3:08:4a:d9:fb:b6:cf:84:35:
4f:01:4d:4c:c5:f6:11:7e:d3:cb:fb:d0:61:3d:1e:
21:78:b4:c9:a3:95:eb:31:fd:f3:c0:49:c5:58:4e:
f9:91:45:1d:d6:d2:a3:7c:1c:36:4c:3f:ea:a3:64:
fc:19:94:35:2c:e9:a6:b4:7f:33:cb:84:12:70:05:
00:0d:71:70:16:91:fa:61:19:5a:80:ba:09:bc:37:
7a:c3:b5:37:df:f3:2f:10:43:28:7d:5a:a3:47:77:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F7:A5:31:A0:EE:8F:78:41:47:07:69:61:CA:24:07:04:66:B5:62
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aPelMaDuj3hBRwdpYcokBwRmtWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.202.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:13:dd:87:60:43:df:90:77:a4:24:32:c6:f6:36:dc:86:53:
42:dd:bf:d8:fe:3e:8b:9f:e8:a2:01:11:a4:bd:78:91:10:a5:
10:92:29:5e:0f:43:97:3e:ac:fa:be:3f:ab:d2:e4:56:27:f9:
f2:1c:32:2a:24:07:0f:6d:9d:98:a4:af:46:d1:27:dd:b4:5f:
ec:76:14:9a:8a:8d:bf:93:de:7f:7a:7c:25:47:1c:9d:33:ca:
42:49:b8:aa:ad:1e:dc:ef:4b:2a:ff:22:91:22:83:8f:69:d0:
da:27:55:73:b8:38:43:ba:bb:f1:5d:7c:96:34:ea:6f:ad:02:
d1:c0:86:93:26:a3:78:77:41:4b:49:8f:6c:28:56:5e:88:95:
70:2a:92:26:04:a3:b6:06:25:e8:52:11:13:35:bf:88:42:f7:
b8:a9:fd:23:dc:c3:d0:c1:09:70:e9:81:f7:50:f6:db:97:86:
23:47:55:f0:f7:f6:e8:1e:d8:14:e3:ff:86:33:f2:ee:99:f7:
27:4b:f0:0d:9b:9e:57:e4:00:73:f0:b5:c4:39:1c:5b:a2:49:
a7:2b:db:34:98:ba:ac:9d:c9:83:29:93:6c:a1:35:3a:cd:da:
c3:db:a2:46:b9:da:74:0f:b2:90:21:7b:1e:97:e7:50:c2:77:
ab:b5:93:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:39 2026 by rpki-client