Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dpW_-B4zhXo5sEKHR--zQx9QEAE.roa
File: dpW_-B4zhXo5sEKHR--zQx9QEAE.roa (raw, json)
Hash identifier: +UWgraNmkJXOEw5zAsDy/F/JuVVgu2b1rHQC9pOw8X0=
Subject key identifier: 76:95:BF:F8:1E:33:85:7A:39:B0:42:87:47:EF:B3:43:1F:50:10:01
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A014822522122E168E20C8BB080E531BB9
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dpW_-B4zhXo5sEKHR--zQx9QEAE.roa
Signing time: Tue 18 Aug 2026 10:54:28 +0000
ROA not before: Tue 18 Aug 2026 10:54:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213468
IP address blocks: 82.152.63.0/24 maxlen: 24
82.153.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:82:25:22:12:2e:16:8e:20:c8:bb:08:0e:53:1b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 18 10:54:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7695bff81e33857a39b0428747efb3431f501001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:bc:48:52:47:e7:a3:e2:87:6f:2a:ac:d3:
df:4b:34:40:81:ec:d7:53:75:8c:2e:82:67:77:b5:
51:dd:95:e8:a0:11:f8:68:ef:54:92:df:d6:9e:6a:
a3:a2:f9:98:ff:d8:75:6f:ad:fc:04:e2:54:3d:47:
87:93:2b:17:6c:37:a3:ed:1b:6c:f1:23:a4:9b:fa:
9f:9d:9f:f9:11:9b:1a:91:8c:47:0f:83:32:05:ee:
e6:8c:2f:f7:b1:de:0c:a5:bb:b4:c9:fa:d8:10:88:
fe:43:72:b8:91:db:1f:84:8f:a2:f6:2c:75:71:8d:
e7:30:c5:d9:12:1d:61:88:fd:ea:6b:81:9d:97:d3:
8f:96:c7:d9:5a:cc:5e:a0:00:70:d4:cc:08:59:f5:
e6:0d:17:2d:1e:92:d7:1a:64:c8:7d:7f:6c:0f:81:
3e:24:6b:d5:54:a9:9f:e1:12:c2:43:f5:75:6d:42:
24:f1:05:78:04:37:05:67:51:aa:0a:15:e5:70:b6:
25:9f:4e:5b:4a:76:0e:75:62:b3:0e:35:77:6d:c8:
c5:7e:60:6d:aa:f8:e1:31:d3:9d:a1:0b:a3:0d:23:
c5:4b:68:14:70:e5:fd:91:91:98:ee:33:1a:13:b9:
ca:21:dd:85:59:13:4f:9e:19:ff:2e:1b:0b:20:37:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:95:BF:F8:1E:33:85:7A:39:B0:42:87:47:EF:B3:43:1F:50:10:01
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dpW_-B4zhXo5sEKHR--zQx9QEAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.63.0/24
82.153.234.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:2e:bb:77:2b:9d:80:8d:06:71:2e:d3:a8:79:47:a5:99:64:
52:4c:d4:0c:04:b4:c4:45:f1:1e:14:37:1a:e7:9a:c1:6f:1a:
3f:99:7a:bc:71:73:f4:b3:b5:c8:c9:14:36:9f:9e:83:96:80:
52:95:7d:72:f3:a0:0d:c7:26:aa:eb:b1:10:99:fe:f3:66:41:
78:59:4c:00:fb:70:23:76:4a:7b:53:72:bf:0a:f5:51:60:f1:
b4:f9:da:2e:26:c5:8e:6b:72:2f:7c:58:76:0f:c2:24:05:80:
8a:be:a3:dc:62:cc:e4:20:f7:fd:86:a1:2e:6d:1a:4c:d8:73:
bb:2b:c8:e6:6a:82:56:f3:77:4c:c4:be:2d:ea:b2:f6:38:c8:
99:74:cb:10:f4:a7:37:2b:92:f7:b7:b4:46:67:8b:53:96:d9:
63:d3:f3:64:7f:56:8d:c7:e8:d7:68:62:54:cc:fa:2b:98:06:
44:5d:ef:a3:cb:b9:00:6f:34:0f:18:81:af:f1:70:83:72:6e:
7a:82:67:13:23:c1:fa:ac:f7:bf:20:d4:67:05:1b:ba:9a:65:
9a:54:6d:cf:dd:de:ab:f7:0f:ea:4c:5e:49:9c:f5:ba:59:e7:
bd:85:b7:dc:05:41:ae:d6:93:7b:13:b4:a7:64:2a:92:3f:29:
42:a8:eb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:34:12 2026 by rpki-client