Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/g_nkh53QhVs9ms8mxdQ0-xitZFc.roa
File: g_nkh53QhVs9ms8mxdQ0-xitZFc.roa (raw, json)
Hash identifier: yKFcSmBd4TudKOmMhM0mHWjoNGNh1cB360pREyrahog=
Subject key identifier: 83:F9:E4:87:9D:D0:85:5B:3D:9A:CF:26:C5:D4:34:FB:18:AD:64:57
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23690C4C3DC697C13B8D6411348DC3F7
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/g_nkh53QhVs9ms8mxdQ0-xitZFc.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214855
IP address blocks: 82.152.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0c:4c:3d:c6:97:c1:3b:8d:64:11:34:8d:c3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83f9e4879dd0855b3d9acf26c5d434fb18ad6457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:da:82:83:d5:4b:d0:d3:b0:39:44:0b:0b:
aa:69:b2:4d:6d:c8:e1:2c:1e:34:9a:5c:f9:3d:ac:
6d:d7:b4:2e:9b:2f:8c:21:ea:9a:47:f2:34:6f:d5:
0f:c7:28:1a:7d:e0:0d:e9:aa:ed:e8:79:0e:c0:b4:
b0:90:57:6e:a2:a6:5a:b7:36:77:bb:69:e4:a4:cc:
ef:df:96:64:1d:21:97:fc:c4:d1:b7:8b:d0:0a:81:
34:26:18:5a:ad:ed:e7:d2:e1:70:9e:cf:52:a5:38:
28:d7:72:7c:7d:27:d7:df:d6:98:d6:e7:8f:97:4e:
0c:36:7b:51:82:98:61:14:83:bf:cc:b3:11:bb:83:
26:dd:e6:4d:13:ff:8c:cc:0d:5a:05:c6:9a:00:22:
c0:f3:26:7a:6f:3c:b6:06:19:47:d1:7a:b6:7e:fc:
ae:cd:18:b0:71:7e:b1:65:db:0c:54:e7:e7:80:ad:
5c:7d:00:4c:76:65:1c:f9:a5:8c:12:e7:bb:1f:ab:
e5:b9:c8:8b:89:25:01:2b:03:17:a3:ab:63:2e:69:
cd:b5:6c:c2:82:ff:0a:1e:25:86:cb:67:1b:a2:aa:
c3:fe:0c:2a:d3:ad:b5:c7:8a:38:20:e4:dc:48:40:
5f:37:46:82:a5:3a:a7:1f:ee:ec:b7:57:b2:5f:9d:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F9:E4:87:9D:D0:85:5B:3D:9A:CF:26:C5:D4:34:FB:18:AD:64:57
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/g_nkh53QhVs9ms8mxdQ0-xitZFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.2.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:9e:d3:e3:9a:35:1e:a9:d2:a0:b1:0c:6c:e1:d7:9b:9a:02:
d2:20:06:2d:12:6e:5b:ae:66:3f:1d:bd:3e:58:82:2d:5a:e8:
41:f2:8f:c7:e0:d9:b1:dd:16:8c:3c:5c:1b:21:06:ed:9d:ea:
67:26:74:50:a1:ef:25:18:91:f3:87:f1:06:85:df:3b:59:82:
13:00:f7:ce:aa:d5:e2:30:76:57:3d:76:58:64:4c:28:10:2f:
bd:72:67:8c:66:5b:68:f8:79:37:05:e5:a0:fb:3d:51:cf:fc:
16:42:03:43:5b:3f:51:91:a5:78:f1:aa:7b:6a:7b:a9:23:a6:
0e:b2:42:66:55:ec:f9:1c:03:73:35:86:77:92:52:cf:ac:e4:
54:88:46:9b:a6:01:b5:a9:6c:c7:fb:3c:96:b7:44:0e:7a:57:
10:ba:55:7b:9e:32:5d:9d:a7:f2:4b:a8:de:ad:4c:23:ac:52:
c9:3e:f6:ab:e8:6a:c3:39:b3:ae:48:ad:7e:ee:2c:31:ec:56:
17:d9:4e:79:74:63:b4:77:ae:38:b5:08:82:6f:8e:f0:40:d1:
f8:62:dd:94:19:c2:a8:cd:ed:90:b2:68:93:be:bc:a1:d2:98:
2b:e4:a2:dc:8f:9e:53:ef:7a:e0:c8:06:ed:15:6e:fa:81:d5:
f9:ca:d5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:40 2026 by rpki-client