Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i2O_uc0rIghVYemae2_bgu4sT8s.roa
File: i2O_uc0rIghVYemae2_bgu4sT8s.roa (raw, json)
Hash identifier: q2VkH3SIiJq2A6C44rdDLBksV4upw6LZL384Oq9vPqU=
Subject key identifier: 8B:63:BF:B9:CD:2B:22:08:55:61:E9:9A:7B:6F:DB:82:EE:2C:4F:CB
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A00EB2B83D7E2213F1317B14244389B9D4
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i2O_uc0rIghVYemae2_bgu4sT8s.roa
Signing time: Mon 17 Aug 2026 07:49:48 +0000
ROA not before: Mon 17 Aug 2026 07:49:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201002
IP address blocks: 82.152.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:b2:b8:3d:7e:22:13:f1:31:7b:14:24:43:89:b9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 17 07:49:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b63bfb9cd2b22085561e99a7b6fdb82ee2c4fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:fb:0c:1c:d8:68:e1:c6:79:b5:ca:cc:58:
aa:a2:0f:11:b5:43:cf:88:54:95:de:f9:1f:bf:60:
c2:95:e9:14:ab:c3:a2:9d:3f:ad:f4:69:47:2b:cd:
39:4d:fd:0c:19:b9:41:4b:33:4e:19:68:59:5b:fd:
53:a1:54:a1:f3:99:be:4b:86:21:16:9a:54:93:6d:
dd:64:ee:27:b0:99:90:d7:4e:53:d4:3d:c4:f0:b7:
68:d8:32:78:b5:46:63:43:83:c7:4a:94:e5:cc:5e:
1f:2b:14:de:ec:ca:0f:18:36:6f:2e:74:05:11:b7:
6e:ba:70:ff:d7:e1:4b:00:3c:56:fb:bc:ab:a9:c1:
69:06:2d:c6:cb:11:d4:e7:6f:ae:d6:79:75:f9:74:
68:71:4c:ea:50:90:e9:16:69:21:6a:10:fb:a6:03:
36:f5:27:af:be:23:76:e5:2f:0b:b1:da:04:de:d1:
96:e9:fb:98:34:d5:b9:14:67:c6:b7:15:96:2e:f2:
36:56:75:79:6d:1d:2f:2a:49:d9:94:0b:c3:4a:4d:
c3:4a:a5:26:e9:7a:da:a1:1b:76:8d:d3:dd:ac:cb:
01:31:80:b1:f3:fb:11:56:57:ec:38:46:66:96:6a:
5e:3f:a4:de:8f:85:80:7d:c9:30:63:85:77:c1:3c:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:63:BF:B9:CD:2B:22:08:55:61:E9:9A:7B:6F:DB:82:EE:2C:4F:CB
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i2O_uc0rIghVYemae2_bgu4sT8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.184.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d5:14:de:af:19:f5:9d:23:b0:4a:34:07:6a:eb:93:9c:50:
4b:01:d3:3d:37:7b:ae:02:99:28:dd:ef:5e:69:bd:f5:03:1c:
fe:78:e7:95:69:9a:9f:4d:12:1b:97:46:c6:45:b4:1f:f5:36:
c5:b3:68:be:09:fe:fc:2c:a0:73:77:60:0d:44:05:da:44:f0:
36:29:41:bc:12:2a:65:c8:52:13:32:b2:83:e3:10:14:7c:36:
d0:32:fd:1c:c9:1d:6c:c0:90:ea:01:1a:d3:3e:6d:6e:2a:8b:
ec:b8:40:a5:9d:e4:0a:08:e2:11:d1:0c:e1:2c:7a:8f:72:bd:
b0:f2:6f:09:be:3e:ae:9b:06:e0:c3:9c:37:f0:bb:71:df:a7:
71:c3:2a:9f:e8:95:e1:f2:10:f2:ca:aa:84:3e:7d:0b:a9:8b:
b4:a3:1f:4f:86:3b:d3:73:68:1f:06:c2:3e:6e:23:43:b3:c5:
b3:84:12:3d:53:74:90:c3:b9:45:07:b0:50:8b:a8:a3:b8:c7:
b0:b9:2b:b4:d8:ab:02:32:4e:c7:55:45:80:37:86:7a:94:6b:
93:ca:74:33:7e:d7:33:20:08:41:a6:a8:13:11:57:96:d0:2f:
a5:e5:d5:1e:c2:70:1f:5d:c3:ef:23:e0:65:b0:b4:a1:0f:5d:
09:36:0f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:31 2026 by rpki-client