Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bSi0-yTtLm18bWqh6hP7YS1D4Tg.roa
File: bSi0-yTtLm18bWqh6hP7YS1D4Tg.roa (raw, json)
Hash identifier: 3qZBULL0+nN6Uz3FzJa4rav8dPq4d3aWsFHrgTSbtUQ=
Subject key identifier: 6D:28:B4:FB:24:ED:2E:6D:7C:6D:6A:A1:EA:13:FB:61:2D:43:E1:38
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368F3D38FA8E49D2E77559CE0C47C6E
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bSi0-yTtLm18bWqh6hP7YS1D4Tg.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211484
IP address blocks: 82.152.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f3:d3:8f:a8:e4:9d:2e:77:55:9c:e0:c4:7c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d28b4fb24ed2e6d7c6d6aa1ea13fb612d43e138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:9d:1b:9d:8b:86:9e:f2:99:94:e4:f4:fa:
53:18:97:55:14:a9:6c:dc:b7:8d:df:9b:5c:98:9a:
f6:d8:e4:61:8d:fa:b6:45:9e:6b:9d:97:8f:42:9a:
1c:e1:25:a7:14:e5:65:50:6e:86:35:41:a1:e8:d5:
f2:39:26:b5:79:dd:6a:6d:c4:a1:3d:a6:d7:01:bf:
3a:67:43:35:57:cf:82:61:6a:88:5b:72:b4:67:30:
ba:f6:eb:4c:2e:c8:fe:a9:81:72:57:f9:6a:8e:f4:
47:6a:f1:16:99:b7:70:a4:0d:61:f0:59:e8:89:0a:
0c:a1:9d:3d:e4:30:f6:23:84:c0:87:94:a1:8a:70:
da:fb:92:14:b4:a2:67:95:a5:28:c4:b7:68:3d:9d:
ee:07:5e:2d:d8:c3:f0:0b:eb:45:46:b0:ba:92:cc:
86:58:bf:98:b9:33:d4:df:28:16:a8:bb:41:7f:07:
f7:1b:84:86:b3:7a:37:a5:45:3b:24:f8:43:5d:c1:
a6:a3:12:e3:d0:48:2a:c5:81:d2:7f:9e:ed:d8:96:
2f:22:4e:40:f4:80:82:59:f6:b4:16:9a:a0:d6:43:
aa:d6:41:01:ea:1d:9e:5b:7c:85:6e:55:a3:77:bf:
55:a9:f1:55:2c:c3:f8:88:af:bc:90:03:3a:1d:3e:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:28:B4:FB:24:ED:2E:6D:7C:6D:6A:A1:EA:13:FB:61:2D:43:E1:38
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bSi0-yTtLm18bWqh6hP7YS1D4Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.68.0/24
Signature Algorithm: sha256WithRSAEncryption
45:2d:a7:ce:f5:56:c6:53:68:40:07:7b:a1:24:bf:2d:02:4a:
e5:d7:f3:68:95:2f:11:c2:c5:d5:92:71:f5:4b:00:06:cd:13:
2b:5e:4c:38:5a:2f:af:0f:49:70:bd:4d:db:b8:90:e9:cc:47:
b8:b1:a8:34:df:33:c9:49:85:1b:2c:ef:0e:ff:33:fb:8e:1c:
12:01:b5:ea:63:7b:a1:5b:8b:9c:87:dc:dc:d9:91:1f:f1:35:
24:4b:94:29:ec:32:a6:3b:09:23:31:30:73:26:f7:b8:85:6d:
09:77:44:9e:64:57:63:a6:03:88:24:a1:3d:6d:a6:b7:9a:02:
de:f2:a7:9b:d0:6a:ed:60:39:f5:41:4e:19:4a:4b:b8:51:2c:
65:16:05:57:0c:d2:7b:80:09:9a:da:87:4b:ff:13:c4:3c:0c:
05:bf:b3:97:3d:6d:d6:7e:22:b6:13:47:45:ce:a0:73:8b:79:
47:a5:cc:54:d8:85:c9:7d:4a:47:4d:e4:aa:32:8d:45:64:7a:
2c:36:fd:74:af:e0:30:26:ea:d9:0b:8d:37:c0:12:19:43:c8:
3b:00:37:80:57:c5:c9:ec:72:db:85:b9:a5:5a:17:50:9b:7f:
c6:e6:7f:f6:01:2b:94:54:52:de:3b:a2:0d:77:9e:34:55:dd:
0c:38:c6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:20:48 2026 by rpki-client