Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kkuMI0vvTLX0NMyIO6MQl4expk4.roa
File: kkuMI0vvTLX0NMyIO6MQl4expk4.roa (raw, json)
Hash identifier: fBnlPirRQWEssdu+5sPcmR7eI2XytOCgbcBrhUvHl3s=
Subject key identifier: 92:4B:8C:23:4B:EF:4C:B5:F4:34:CC:88:3B:A3:10:97:87:B1:A6:4E
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368B8B6E689FBA47BA0B493E78A5141
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kkuMI0vvTLX0NMyIO6MQl4expk4.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 82.153.66.0/24 maxlen: 24
109.176.165.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b8:b6:e6:89:fb:a4:7b:a0:b4:93:e7:8a:51:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=924b8c234bef4cb5f434cc883ba3109787b1a64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:24:0b:4d:12:c6:ff:4c:e3:48:83:6d:65:
bf:b0:a3:45:46:2d:ab:54:00:59:ef:e7:ef:f7:a5:
d0:e8:14:2e:0d:35:26:1b:af:ba:e9:ee:b1:dc:e3:
eb:a6:1a:96:cb:d3:03:f8:07:8c:ca:27:1e:2f:6d:
11:1c:f3:98:b5:69:c0:ed:a8:dc:1e:9f:8c:80:22:
28:0c:9c:79:47:44:c3:06:bc:69:8e:66:3d:73:26:
65:f7:b1:4e:fb:23:d8:e6:64:3c:01:30:96:2c:a7:
a1:91:bb:e3:f4:03:3c:43:c0:06:a1:47:4a:44:d9:
07:b3:dc:e7:61:73:f4:d6:02:f1:93:39:92:ad:ef:
85:3c:f2:19:a2:35:91:ac:b7:08:73:b3:40:7d:58:
ca:ba:9f:32:16:99:83:aa:09:e3:9e:a8:5a:2a:b0:
30:e0:95:c4:dc:d1:72:8c:16:54:3f:80:7d:cf:9a:
68:7c:9d:2b:bb:ab:c9:38:d3:99:aa:ab:52:7c:fe:
aa:65:e8:35:51:70:f6:ff:67:6a:6f:cd:8d:77:66:
84:26:2c:88:8b:cc:79:83:fe:51:75:79:21:20:fb:
70:65:3d:9f:d1:4e:8e:0d:23:41:b0:c5:d0:9b:1c:
46:69:0e:cd:bf:07:7d:db:4d:e0:1a:1b:1c:b5:e0:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4B:8C:23:4B:EF:4C:B5:F4:34:CC:88:3B:A3:10:97:87:B1:A6:4E
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kkuMI0vvTLX0NMyIO6MQl4expk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.66.0/24
109.176.165.0/24
213.218.213.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1d:61:cc:8b:3d:8e:c4:36:22:b6:bf:ad:1a:33:70:0d:e7:
df:9a:9a:93:06:6e:31:3c:74:a2:56:dd:21:f4:3c:0c:25:0a:
7d:ac:10:32:d4:2d:2d:26:9a:26:74:be:dc:a1:5d:2b:b1:0c:
3d:0f:25:35:75:5c:6f:34:63:2d:2b:74:46:30:39:d5:5b:d5:
2c:85:9c:9e:b7:a3:f5:ee:7b:fd:be:17:80:66:e2:3b:90:38:
7e:7b:14:7b:d3:1f:08:98:84:c2:9a:5d:93:e8:4a:cf:99:4c:
d9:15:a1:a8:cd:93:28:66:64:ad:b9:76:3a:29:af:37:85:75:
07:2b:8b:9b:3d:76:84:bd:14:a7:19:87:7a:8f:c1:e3:28:08:
df:d9:dd:02:11:2e:80:02:a3:67:4d:ba:28:f4:e8:92:02:d0:
2a:9b:ec:46:25:e9:80:24:1c:2c:88:ab:e5:bb:a3:9c:e9:b3:
82:e6:fb:39:be:ca:14:38:09:f8:b8:80:d7:2e:ea:e2:1a:90:
de:78:01:e5:24:8a:96:b2:79:dd:f8:7c:28:4b:94:8e:cb:5e:
08:9e:f0:85:8a:f7:e6:16:58:1d:8b:55:29:11:33:8d:84:e1:
df:ae:4f:dd:4f:13:28:d6:25:21:a6:36:72:4b:58:ef:d1:f0:
a5:79:6e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:16:49 2026 by rpki-client