Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cTKDANSC_OQkotlhq_xBlSCtqvI.roa
File: cTKDANSC_OQkotlhq_xBlSCtqvI.roa (raw, json)
Hash identifier: u10Reyntytg5F3om2TXCkVelRmjiCRwcb41P99ucfRA=
Subject key identifier: 71:32:83:00:D4:82:FC:E4:24:A2:D9:61:AB:FC:41:95:20:AD:AA:F2
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FD774AA8CA946D98A9F89D6609ABBCC7F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cTKDANSC_OQkotlhq_xBlSCtqvI.roa
Signing time: Thu 06 Aug 2026 14:22:55 +0000
ROA not before: Thu 06 Aug 2026 14:22:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204828
IP address blocks: 82.152.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:74:aa:8c:a9:46:d9:8a:9f:89:d6:60:9a:bb:cc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 6 14:22:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71328300d482fce424a2d961abfc419520adaaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:d8:df:d2:80:f2:03:6c:eb:3f:64:ad:b8:
d9:d9:0e:62:b2:f5:e7:bb:9a:c5:f5:b9:6a:75:ef:
01:b8:f0:fd:3c:ee:eb:cc:a4:62:f7:74:d8:0f:f6:
58:b4:19:56:aa:04:de:11:d5:03:82:60:d1:3b:6f:
80:2f:c1:57:64:c2:60:7f:9f:68:1f:e5:b1:b1:6b:
69:d9:93:6f:d4:ea:17:3c:82:9d:82:aa:69:bc:a0:
fb:9e:e1:63:50:29:d7:89:37:b1:2a:78:27:ae:19:
ce:08:3a:93:19:31:34:26:dd:db:e1:5a:2d:0d:8b:
4f:5f:05:28:23:01:19:6d:ea:22:40:17:4f:7d:5a:
09:9e:a6:90:82:75:c9:e3:ec:0c:b6:6e:87:93:4a:
c0:22:9a:a6:49:11:66:14:5f:b1:b8:c9:8d:b6:c8:
c2:d6:c6:e1:7c:6e:e2:ab:ee:01:53:f3:63:83:e2:
c0:26:2a:3e:04:c9:a4:4f:a4:b4:f8:23:a7:6b:c9:
58:33:a6:23:f7:e0:46:48:6c:5f:dd:ef:3c:69:e8:
d6:e0:99:ac:0d:60:a8:14:0b:b7:13:8c:b6:07:84:
35:d8:0e:fc:f1:f8:fa:c6:c9:34:23:20:a9:50:fb:
43:37:e5:50:df:79:7a:5c:aa:a7:61:37:93:85:81:
29:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:32:83:00:D4:82:FC:E4:24:A2:D9:61:AB:FC:41:95:20:AD:AA:F2
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cTKDANSC_OQkotlhq_xBlSCtqvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.68.0/24
Signature Algorithm: sha256WithRSAEncryption
20:18:f8:08:7a:c6:90:1e:1f:4c:6d:56:03:f1:1f:03:71:d7:
05:61:ee:b7:97:d2:1c:62:b6:5a:1b:8a:dd:29:c4:fc:1e:73:
62:61:82:10:c4:52:bf:c0:d8:54:19:8d:66:94:bf:77:7d:07:
0e:ea:50:36:54:2a:ef:cb:27:5f:19:dc:38:c8:36:b3:97:11:
a4:bf:17:ac:31:5d:6f:75:34:e6:03:aa:43:08:df:e7:91:12:
3f:54:95:90:9b:eb:c6:9f:29:6e:a5:da:46:b9:49:0f:31:42:
f2:cc:dd:54:3c:d8:1a:15:c6:ce:cc:83:c2:45:ba:d9:80:3f:
fc:d2:31:95:66:9b:f0:d6:9e:f4:a4:08:20:90:38:e4:b2:32:
b8:72:95:2b:f4:cc:c6:34:93:34:6c:2b:ea:8f:db:af:83:b1:
1c:08:1f:1e:b7:55:63:c3:a0:fb:99:b4:12:0f:24:88:4e:01:
68:41:05:2c:79:10:b4:8c:07:94:b7:73:12:3c:9f:ea:a4:a4:
7c:a0:28:4b:b2:33:6d:c1:9f:af:8b:e3:2b:30:0d:8e:45:18:
3d:8a:df:56:1e:46:a8:41:9c:f6:04:85:10:54:14:7a:e0:53:
14:c4:dc:58:16:db:ed:93:3e:f5:59:ef:40:44:42:db:0d:d9:
d5:ba:28:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:03 2026 by rpki-client