Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/phG3-FfBcTcXYwYDchLDfMh0AAY.roa
File: phG3-FfBcTcXYwYDchLDfMh0AAY.roa (raw, json)
Hash identifier: EsUS5Qp5FqQMGMdSTUAuCmFgz/obfCJyhbUqVxKgIwY=
Subject key identifier: A6:11:B7:F8:57:C1:71:37:17:63:06:03:72:12:C3:7C:C8:74:00:06
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FDB3B78CBCAC0BA8C151FE5FF0B90DF6E
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/phG3-FfBcTcXYwYDchLDfMh0AAY.roa
Signing time: Fri 07 Aug 2026 07:58:55 +0000
ROA not before: Fri 07 Aug 2026 07:58:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399631
IP address blocks: 82.153.97.0/24 maxlen: 24
82.153.102.0/24 maxlen: 24
82.153.109.0/24 maxlen: 24
185.49.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:3b:78:cb:ca:c0:ba:8c:15:1f:e5:ff:0b:90:df:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 7 07:58:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a611b7f857c17137176306037212c37cc8740006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:15:a5:1f:82:c7:a5:68:07:4f:97:40:e1:
0d:ba:ff:ab:6c:7a:2d:2d:b2:23:80:da:97:6b:20:
db:c0:7a:a3:d8:39:53:6e:69:b6:7e:a6:34:20:a4:
d0:d1:f1:07:c8:0b:1e:36:ef:12:2a:12:e8:c0:50:
f6:29:17:6a:0f:8c:b0:f5:cf:7d:a4:ff:a3:94:ba:
3e:d7:93:60:25:02:b8:2a:49:63:c9:b6:91:86:c1:
9e:d1:6c:d5:3c:bc:e0:f1:44:9a:51:fe:35:d7:86:
b6:08:02:31:68:38:b3:79:fe:d4:60:42:f6:77:0b:
b1:ac:53:12:a5:87:aa:71:f0:fb:b7:66:2a:7f:73:
57:0e:6e:b0:9f:ea:06:68:f5:e0:7d:79:f8:98:ca:
57:98:3e:c3:e9:80:af:e6:fb:8b:02:55:8e:11:73:
ab:08:05:a6:d0:3b:fc:ad:f0:f6:7a:1e:7d:8d:e5:
de:5e:79:b9:12:95:bf:86:e2:c4:9c:ba:6e:8f:58:
a4:3e:06:8e:a9:51:ce:9c:6d:28:09:04:94:9f:ff:
92:c5:6d:f5:34:63:ff:4e:31:c9:8e:4a:c4:1b:b9:
81:cf:2f:94:83:d7:e9:e8:25:75:54:85:55:d4:b8:
f1:31:9d:2c:87:24:24:af:48:bc:39:9a:5c:5e:9f:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:11:B7:F8:57:C1:71:37:17:63:06:03:72:12:C3:7C:C8:74:00:06
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/phG3-FfBcTcXYwYDchLDfMh0AAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.97.0/24
82.153.102.0/24
82.153.109.0/24
185.49.125.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:46:2d:99:3e:8e:65:68:9e:70:78:61:2c:1a:4f:e8:7f:5f:
22:c2:0b:11:5b:e5:ac:da:69:db:2e:01:ce:50:f9:0c:39:ea:
42:60:63:4a:a0:e8:70:e1:aa:e5:48:d0:ec:a3:66:a2:db:e8:
2b:fe:32:a7:2a:63:c0:9b:3e:2a:e9:2f:07:e0:76:a4:d1:18:
12:56:9b:94:ae:49:a2:5e:9e:9c:3b:de:1c:98:46:59:6e:43:
6c:99:86:bb:76:93:a7:89:a6:85:3d:10:fe:73:0d:02:5e:3a:
33:49:7c:67:bb:e9:58:4a:fc:3e:bc:6e:54:7b:a7:b9:3b:8a:
b5:a5:9c:2d:22:60:40:e1:af:53:46:c0:8e:67:95:2c:1e:d6:
30:60:42:f2:f5:de:d9:74:7d:1f:2e:3e:4a:73:8e:aa:ab:67:
b8:fc:57:50:75:27:5a:e6:5b:6f:ef:02:0c:47:b8:f5:ac:78:
ed:25:d2:63:b1:02:2b:0a:8d:65:ec:4b:39:d3:f2:ba:6e:62:
df:37:5a:d8:b9:75:04:ca:35:bd:43:97:56:19:a8:19:ee:88:
2e:e9:7f:28:c0:17:a9:56:6c:1d:e6:58:25:ca:34:eb:d3:84:
92:57:d4:4c:9e:95:f6:79:c9:55:cd:c6:9b:79:70:24:fb:16:
45:63:dd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:21 2026 by rpki-client