Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mClSVwWUq6kAlDNWj2fNFaoCkuI.roa
File: mClSVwWUq6kAlDNWj2fNFaoCkuI.roa (raw, json)
Hash identifier: s+v/uaEH/e2yKSK/tO+IJ1BZ5QVMOyhURhLwkJiX8RM=
Subject key identifier: 98:29:52:57:05:94:AB:A9:00:94:33:56:8F:67:CD:15:AA:02:92:E2
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368B3609CC05B984C33B1A33DEC4001
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mClSVwWUq6kAlDNWj2fNFaoCkuI.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 82.153.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b3:60:9c:c0:5b:98:4c:33:b1:a3:3d:ec:40:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=982952570594aba9009433568f67cd15aa0292e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:87:28:d7:5f:06:ad:ac:c5:6e:ee:b7:ff:
34:da:7e:c3:56:6f:4f:f2:c4:a3:41:42:07:f9:aa:
05:c5:62:39:c5:92:5c:6e:87:b0:bd:1d:73:4f:59:
c8:ee:46:ab:7f:49:39:60:1c:83:46:08:c4:71:22:
25:0e:73:9f:6d:2b:cf:fe:3e:ff:46:40:a3:c0:fe:
20:4c:5f:4d:d8:dd:1b:49:b2:b7:c5:45:59:e2:fa:
bd:8c:2c:d4:0a:64:4f:28:36:12:7d:4c:4f:31:81:
d2:2d:1e:2d:fd:2f:25:9a:9f:9c:2b:7c:91:e8:eb:
31:21:f8:01:f3:43:24:71:5e:f6:99:6e:e1:e1:c7:
79:06:0e:8f:e6:a2:09:97:e5:ba:e3:96:ec:80:fc:
80:5c:58:8d:5f:e8:7e:29:87:aa:14:6e:74:32:c8:
8e:48:7d:d4:8b:ec:e0:38:95:2a:a2:d2:08:dd:4d:
89:f3:d6:20:20:4e:df:6d:05:ae:00:1f:bf:c3:b5:
4c:1c:eb:41:cc:00:d8:2d:f2:2f:70:a4:af:84:30:
3d:0c:36:7a:c8:cc:7c:5f:f3:6b:67:93:d9:aa:b8:
18:36:da:2c:05:f8:7a:93:4a:f2:93:cf:4f:1e:4d:
9f:11:aa:4f:11:80:aa:56:cc:d3:dc:79:3b:fb:e9:
bf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:29:52:57:05:94:AB:A9:00:94:33:56:8F:67:CD:15:AA:02:92:E2
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mClSVwWUq6kAlDNWj2fNFaoCkuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.216.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ef:4d:f9:ae:b6:17:66:95:13:57:3c:28:bb:06:22:c5:ca:
ec:71:c3:6b:c8:f7:e2:43:3f:0e:87:e2:e4:67:56:89:73:74:
69:03:10:73:3f:25:a5:99:82:b5:82:0c:42:cb:d0:cd:08:5d:
81:79:9f:ea:d0:29:84:16:07:d9:70:36:85:a1:17:35:49:fd:
61:07:1b:a5:9d:78:fa:82:e5:e6:f4:a6:55:f1:c0:7c:20:7b:
2f:82:ad:0c:65:7a:5b:ec:1f:1e:ec:a4:97:cb:fd:c7:7f:d9:
b9:5a:3d:ae:c3:92:ac:d7:19:c2:3a:ed:5e:98:25:48:ef:8c:
5a:2d:6c:23:70:b1:61:b7:33:63:be:1b:b0:80:fa:f1:29:d7:
c5:f8:51:7d:79:e3:ec:ff:25:88:6b:c3:9b:40:f1:10:06:51:
07:40:2b:21:10:71:ee:79:be:5e:dc:95:ba:f0:5c:15:b0:cb:
88:83:09:9b:6f:79:d2:5e:10:ff:a6:08:e3:48:c2:1d:5f:22:
fd:cb:02:dd:e7:e4:9e:3b:3f:5b:f8:ec:8a:7f:d6:a6:b6:22:
50:a7:75:73:47:21:d4:5e:0f:83:95:d6:9a:85:02:5d:55:02:
86:b6:fe:4b:52:06:b0:49:1d:15:b7:ae:47:1c:c7:0e:b1:5d:
5f:6c:a7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:19 2026 by rpki-client