Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dw0IQge7hwdlYHyGkfazWRliso8.roa
File: dw0IQge7hwdlYHyGkfazWRliso8.roa (raw, json)
Hash identifier: XSh38tighisOEeQpr3ofS5PltjzQJ02e374Iq/vieKs=
Subject key identifier: 77:0D:08:42:07:BB:87:07:65:60:7C:86:91:F6:B3:59:19:62:B2:8F
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368ACE76039BE4B68FEFDCA1C0F17FE
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dw0IQge7hwdlYHyGkfazWRliso8.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11426
IP address blocks: 82.152.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ac:e7:60:39:be:4b:68:fe:fd:ca:1c:0f:17:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=770d084207bb870765607c8691f6b3591962b28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:2f:ef:75:7c:c0:2b:cd:dc:6c:5d:3b:c1:
4b:d9:3b:35:68:4f:24:6a:9f:31:31:eb:12:06:2e:
ec:37:e7:76:d4:bc:90:b9:aa:58:27:86:16:2f:1c:
72:a9:08:e7:84:8d:77:b5:24:2e:a8:b7:a6:43:40:
14:9d:22:9f:5d:fd:eb:47:3d:d1:88:ee:66:b4:0c:
87:90:4f:a7:ec:70:64:f5:9f:47:6e:09:9d:9b:bb:
14:81:26:be:aa:43:8f:08:17:b6:ef:fb:5e:db:d7:
83:f5:ba:55:ed:03:59:9f:d4:74:cd:81:0a:a2:31:
c3:ec:30:3a:95:ea:95:4d:33:1f:3d:b6:c6:b0:75:
6b:90:f8:3c:ce:88:65:3d:4c:86:d2:41:84:d9:89:
59:da:47:7f:93:e2:c2:65:1c:3b:74:47:21:2e:ef:
2b:a4:6a:69:6c:45:44:3b:47:cb:b9:60:01:64:66:
91:24:62:d3:7f:e3:4a:cc:f2:fa:d7:a3:d3:da:7e:
c7:24:91:16:82:01:bf:8c:82:e3:c2:1f:ae:c5:db:
3f:8d:95:56:c1:d4:b5:9c:c3:bc:b2:24:49:95:f9:
fd:dd:6a:86:51:86:a9:49:f3:cb:c9:39:fb:47:a8:
f3:c0:cd:af:31:e0:37:32:36:22:98:2f:04:02:a6:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0D:08:42:07:BB:87:07:65:60:7C:86:91:F6:B3:59:19:62:B2:8F
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dw0IQge7hwdlYHyGkfazWRliso8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.131.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e4:fd:ea:66:50:b0:f6:d6:f8:c1:17:da:9c:dc:bd:3b:a6:
a1:47:a8:16:ec:4c:97:a1:91:33:29:3c:66:19:73:9d:86:4d:
ef:63:9c:9b:c8:8a:66:38:cf:4c:d1:d1:ed:ad:62:1c:a2:cc:
6b:ac:36:d4:df:99:d4:c0:c6:d4:e6:8a:25:64:bb:77:da:53:
ae:db:33:e8:08:3b:61:e8:31:51:7d:8f:5b:13:88:9b:8f:27:
5a:bc:85:46:3f:cf:c5:41:3e:e2:87:f0:04:7b:22:da:f6:fc:
d9:b9:a0:23:64:7c:e0:5e:b5:30:63:1c:48:54:87:06:c0:03:
c7:fb:98:aa:f2:a6:1f:50:ec:04:65:ff:83:8a:cc:93:94:3d:
e3:15:47:20:2e:95:db:22:3a:5e:29:c8:d3:aa:05:cd:9b:a9:
12:b1:96:80:e1:d9:33:3f:e9:2e:12:b1:8a:b2:e3:b6:7d:12:
0b:87:64:a7:b0:1b:6b:c5:8f:4f:9f:b4:16:c0:68:ee:e0:17:
c0:d0:fa:d1:13:4c:2b:db:76:94:19:b7:45:9b:53:8e:91:b3:
9b:96:0f:48:7e:02:73:25:cb:56:84:09:b8:85:4d:df:00:5d:
2d:26:12:a6:4e:4a:41:2f:6b:71:15:20:9e:79:53:a5:39:de:
60:82:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:20:29 2026 by rpki-client