Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i-ZllQhFvEzHzpW1m9DyqaFM0cc.roa
File: i-ZllQhFvEzHzpW1m9DyqaFM0cc.roa (raw, json)
Hash identifier: OZ0i9MXhRJtuKtz3ztGB0fxJNOXD4Fm/rb6QQmM0e+o=
Subject key identifier: 8B:E6:65:95:08:45:BC:4C:C7:CE:95:B5:9B:D0:F2:A9:A1:4C:D1:C7
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23690E6583E7ED6B229368B24CF9DEF4
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i-ZllQhFvEzHzpW1m9DyqaFM0cc.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 37.98.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0e:65:83:e7:ed:6b:22:93:68:b2:4c:f9:de:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8be665950845bc4cc7ce95b59bd0f2a9a14cd1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:d5:79:13:52:71:d6:dd:e7:54:14:5e:f1:
a3:8e:1e:02:5f:81:a5:3c:26:cb:15:df:e9:8f:23:
46:92:b1:cf:01:ee:cd:b5:c6:47:2e:85:1d:5e:c0:
40:82:35:aa:ea:d1:00:18:b3:d4:0f:9e:84:23:fe:
7d:2b:35:90:02:6f:93:c4:32:be:45:be:56:36:1c:
77:b7:f6:20:04:f8:fb:23:8d:05:bb:6d:b3:da:af:
90:91:2f:64:f2:d7:c4:a1:00:1b:36:20:f1:53:66:
8d:07:e6:46:9a:7f:a5:b3:5c:fd:fe:05:35:8e:7e:
7e:35:f8:75:c3:39:8a:7b:05:90:3e:64:0a:c5:e7:
35:8a:a2:6c:5e:be:46:ee:c5:fc:17:f4:e0:f6:e5:
55:3e:17:98:8c:cc:dd:55:92:45:28:b7:c8:0c:c7:
be:5e:7c:1f:86:3b:6d:eb:1e:30:59:5c:b9:dd:2d:
b1:d4:45:3e:b5:4c:ba:8a:d1:66:7f:96:7c:f7:9a:
a3:86:de:e9:9b:7b:60:45:ce:0e:15:e6:3a:7c:bf:
39:09:0e:7c:85:51:0d:fe:44:88:a0:a1:e6:4a:dc:
76:06:82:5e:06:59:09:a0:e8:7c:ab:c3:29:c0:bc:
5d:38:38:a8:0c:63:6e:50:a6:f8:1b:f2:b2:72:65:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E6:65:95:08:45:BC:4C:C7:CE:95:B5:9B:D0:F2:A9:A1:4C:D1:C7
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i-ZllQhFvEzHzpW1m9DyqaFM0cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.148.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:2f:3b:fc:62:8c:9f:99:aa:d3:4a:b1:34:1c:e0:52:6c:8f:
7a:e5:f7:99:4c:fa:e5:ee:16:1c:b5:16:bc:ab:eb:69:84:ac:
e9:f9:f9:e5:37:3c:5a:15:93:03:83:e1:47:30:85:c9:86:bc:
15:23:ae:ee:47:66:59:11:b0:a3:69:3e:dc:a3:3e:8f:b6:ce:
de:6b:fa:54:69:f5:4c:ed:9c:5b:d7:86:f5:99:2c:e9:44:32:
89:2b:e8:db:3b:1d:d9:46:33:3c:83:72:77:a1:58:5c:05:ac:
06:83:b5:ff:96:b5:53:14:82:1c:8c:90:ae:0c:b9:ad:7a:b4:
f7:0b:4c:6f:c3:0b:bc:c3:f6:95:92:ac:41:40:d1:fd:8d:d7:
7a:e1:25:f4:c8:fd:31:e5:8d:f6:33:c1:6a:ab:e8:17:00:9a:
fc:df:09:ca:eb:22:bd:24:90:7c:6e:d6:05:1e:4a:cf:94:56:
4e:1c:8c:b5:eb:f5:b6:25:41:44:dd:4d:21:bc:80:25:67:0b:
2a:d9:90:1a:e1:53:3c:f1:97:b5:03:09:29:d2:43:c8:6f:60:
bb:ca:6a:ef:50:5c:22:dd:28:87:78:0a:79:ae:10:b4:66:06:
5f:02:63:01:f1:57:c7:33:07:09:c8:e6:5f:37:48:44:82:aa:
70:8c:9c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:13 2026 by rpki-client