Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pCg6o8MmxoEX7zVtfjWk6luzVL0.roa
File: pCg6o8MmxoEX7zVtfjWk6luzVL0.roa (raw, json)
Hash identifier: PzNMRprZBrfhXtFuS1/gMJ4e4ICWncIlfQolp9wGTm8=
Subject key identifier: A4:28:3A:A3:C3:26:C6:81:17:EF:35:6D:7E:35:A4:EA:5B:B3:54:BD
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368E737D1785E2706CA88555AC1D316
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pCg6o8MmxoEX7zVtfjWk6luzVL0.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207343
IP address blocks: 82.153.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e7:37:d1:78:5e:27:06:ca:88:55:5a:c1:d3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4283aa3c326c68117ef356d7e35a4ea5bb354bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:da:90:fc:0a:94:28:69:3a:95:35:fa:ea:
28:f6:a3:f8:ad:ab:07:ae:b6:36:a7:76:9a:ec:4a:
42:27:35:be:23:ac:8f:88:9e:ac:81:1f:11:e0:26:
6c:d8:f8:44:76:f5:32:9b:ff:83:8c:09:fb:49:3c:
ff:aa:69:ea:66:9c:d6:da:7a:91:bb:0d:b0:d1:34:
bc:fa:fd:54:be:d6:5c:83:7b:20:59:82:c6:c3:e3:
59:5f:ad:af:c9:09:71:21:21:90:4b:21:41:b1:d5:
08:aa:45:c6:da:bb:36:7a:43:aa:74:46:c0:b9:e8:
7f:d8:06:2d:44:04:03:40:34:70:61:08:bc:b8:5a:
68:57:42:c4:77:0a:f7:9d:be:43:c4:30:33:20:2b:
1f:b3:40:0f:2e:05:cc:dd:c2:13:d8:da:7e:37:80:
4b:d3:37:ea:f4:0f:7b:c3:8d:98:0b:07:60:4f:b0:
c8:67:1f:f1:58:ca:23:b0:79:28:47:1d:fa:53:34:
84:29:4f:1b:db:7a:44:67:02:fb:2d:1f:26:a4:ab:
88:e5:b5:4d:9c:b9:a8:23:55:2d:e2:49:2d:16:2e:
62:ce:7a:78:58:46:4d:15:1a:50:03:13:f3:15:09:
23:90:c6:d1:85:0e:99:36:5f:5b:9a:5c:5e:8b:10:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:28:3A:A3:C3:26:C6:81:17:EF:35:6D:7E:35:A4:EA:5B:B3:54:BD
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pCg6o8MmxoEX7zVtfjWk6luzVL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.111.0/24
Signature Algorithm: sha256WithRSAEncryption
47:3d:3b:c4:55:ab:06:53:49:c0:98:16:38:0c:da:e8:d6:0f:
7c:1b:df:1b:4a:33:8e:78:65:bf:4d:de:89:1b:58:dd:f4:71:
6d:9a:23:f5:a9:a5:d0:86:ad:65:a1:5b:27:91:7d:32:b0:69:
cd:a0:e2:bf:10:65:cf:2d:d5:a8:83:64:d5:43:37:32:a3:1b:
91:25:76:1c:e8:df:1c:73:0a:11:16:d5:87:97:c3:86:ae:7c:
a5:c2:f8:09:e3:8d:6f:15:80:74:2a:83:94:26:bb:88:ec:a3:
06:c8:12:b0:14:57:af:a5:76:62:bc:22:e6:58:6d:cd:da:ee:
58:f3:91:34:b5:54:05:5e:d7:eb:d6:6f:6a:8b:ab:61:6b:31:
53:48:f6:46:0d:50:df:bd:1e:fc:84:b3:99:40:43:c0:99:ac:
16:15:0b:54:1f:59:d1:d1:bd:30:4c:c6:37:0a:ac:08:ca:85:
a5:a3:58:56:ba:08:6c:e7:21:69:bb:66:04:e3:b9:40:68:81:
48:eb:5d:93:1b:72:e4:bb:9b:74:47:d9:2b:60:59:6e:b8:9e:
d0:1c:c8:43:37:b8:dc:c4:e7:99:85:3d:53:ae:81:54:0e:72:
24:1a:72:7a:ac:8b:c1:ba:72:19:8d:e6:c3:14:6b:f3:b2:b2:
f8:20:9c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:39 2026 by rpki-client