Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ikLpoVznEY8LxYX_ndLd7r5gZgw.roa
File: ikLpoVznEY8LxYX_ndLd7r5gZgw.roa (raw, json)
Hash identifier: 1b/xi0LYR6FavVIlHxb6L0q5qDZjhi2j3jzOa1Yp3dQ=
Subject key identifier: 8A:42:E9:A1:5C:E7:11:8F:0B:C5:85:FF:9D:D2:DD:EE:BE:60:66:0C
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368CF78E0C2998EE122B545559FE3D8
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ikLpoVznEY8LxYX_ndLd7r5gZgw.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152324
IP address blocks: 82.153.47.0/24 maxlen: 24
82.153.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cf:78:e0:c2:99:8e:e1:22:b5:45:55:9f:e3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a42e9a15ce7118f0bc585ff9dd2ddeebe60660c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:65:33:52:8c:c5:54:c2:e4:e9:fb:86:77:
cd:f6:f2:58:8e:2f:6b:e5:dd:04:49:1e:a9:b8:1a:
83:fb:c6:4a:4e:5a:9c:d8:63:7d:43:c0:29:5a:9b:
26:f0:95:c5:f5:c2:a4:47:85:bb:d0:ca:83:4f:20:
d2:3f:9e:5d:3c:2c:8b:f1:9b:dc:ed:a5:fa:19:8e:
62:1a:1e:6e:ac:17:92:e7:f4:a6:7e:b7:35:ad:0d:
e8:eb:77:a6:78:59:b3:96:ac:4d:33:ab:64:7b:78:
ac:08:f4:c9:19:87:d8:cb:2a:3f:8a:c7:f3:7f:a3:
75:fa:29:b4:13:11:16:b8:3b:d9:b8:66:05:a5:f6:
23:3a:05:e5:26:f5:7f:5f:79:5b:6d:7f:1d:ac:d3:
4d:3b:c6:f0:19:fa:10:0b:11:1d:d0:6f:e4:05:e8:
7c:03:a9:c9:67:5b:30:14:68:44:a7:ca:95:b9:7c:
19:69:93:02:b9:df:6c:fb:2d:09:b3:d1:a3:ff:97:
40:3f:af:e4:f7:6e:90:2e:7e:8d:c0:23:49:40:ea:
2c:9a:36:70:b8:39:49:20:f4:a4:e7:21:58:1e:98:
69:42:fc:db:2f:71:5c:0f:00:0c:bb:c6:5d:53:3f:
00:ea:5a:cb:58:c0:34:11:da:09:4e:c1:72:73:7c:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:42:E9:A1:5C:E7:11:8F:0B:C5:85:FF:9D:D2:DD:EE:BE:60:66:0C
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ikLpoVznEY8LxYX_ndLd7r5gZgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.47.0-82.153.48.255
Signature Algorithm: sha256WithRSAEncryption
49:c0:0e:61:dc:97:70:2a:81:f4:97:07:e1:af:8a:6e:74:6f:
9c:5d:c4:22:29:be:72:82:45:92:6e:4e:59:f7:db:63:86:46:
47:9c:e3:2a:a8:23:a0:89:45:bf:71:22:63:d6:48:28:06:02:
92:1a:0a:a5:ed:8e:4b:d8:57:71:1c:6c:f5:72:6c:50:cb:d7:
1f:81:23:f4:3d:50:61:55:88:1d:c6:31:cb:85:06:75:17:4a:
2f:7e:45:f2:7c:21:7e:cc:d8:6f:0d:45:24:f0:ad:c2:e3:98:
1a:5d:d0:5a:ef:6c:cf:02:25:2f:ba:b8:b3:dc:7d:10:8c:b5:
83:51:76:5a:3d:fe:d7:5c:44:4b:28:ae:73:9c:df:e2:d7:8d:
29:6a:3e:c4:13:f8:0b:ed:96:99:53:51:6c:39:d7:d2:cc:16:
94:fc:c9:bd:2d:20:23:8c:68:a4:96:ac:6b:50:1f:d4:fb:ef:
31:13:1d:97:f3:99:0f:2c:a2:84:b3:74:47:7f:37:4c:fc:60:
40:08:64:04:46:82:89:df:06:a0:7e:01:ed:0b:8f:0c:17:35:
c2:71:81:dc:0b:d4:45:41:30:21:91:c6:f2:a0:fa:6c:e9:ca:
50:b3:8f:05:cc:01:f5:2b:41:d4:51:4c:ed:3e:4e:21:f0:b3:
8a:4b:1c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:21 2026 by rpki-client