Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qURljKrc68ld4cDhwm4pk-SJZOY.roa
File: qURljKrc68ld4cDhwm4pk-SJZOY.roa (raw, json)
Hash identifier: XusHVeVlLg8exoM7ckZzzhRgnZrkvR6ZPqmG/lvRyMQ=
Subject key identifier: A9:44:65:8C:AA:DC:EB:C9:5D:E1:C0:E1:C2:6E:29:93:E4:89:64:E6
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368A4F90B4663C1A82406E625DEB841
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qURljKrc68ld4cDhwm4pk-SJZOY.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 973
IP address blocks: 82.153.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a4:f9:0b:46:63:c1:a8:24:06:e6:25:de:b8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a944658caadcebc95de1c0e1c26e2993e48964e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:a5:bf:57:dd:bf:02:03:ce:fd:03:56:8d:
5c:0a:a1:18:08:f9:65:9e:7a:75:90:6f:32:c9:20:
d7:cd:fc:0e:c3:a9:9e:ec:99:45:24:e9:fa:cc:89:
e4:17:c3:f7:de:64:be:29:db:57:01:18:61:be:bd:
7b:05:41:d1:6d:f2:37:6e:7e:54:9c:0b:38:99:7b:
1d:9d:fe:b4:c3:69:e0:c2:59:cb:03:96:ce:10:b2:
ad:eb:c5:d7:0d:ec:ae:7d:70:55:c5:b8:15:26:88:
e2:1a:c4:06:59:f5:9d:b8:78:41:f6:42:be:fd:c2:
cb:97:0f:15:6e:01:19:b3:69:8f:78:87:7b:df:28:
97:3d:f9:99:7b:8b:65:d0:92:9c:e9:0e:31:49:17:
11:b7:c2:3d:ed:7e:0a:dc:5a:05:ec:a6:16:14:5e:
e0:8f:a6:c9:71:1a:b0:3e:47:36:52:ed:08:fd:c0:
59:b5:f6:11:14:ec:18:9c:d0:57:07:5c:44:5b:15:
c9:18:63:c4:46:ae:d3:6b:d6:09:b5:ae:94:9a:a2:
3d:c0:5c:87:18:80:6a:e9:ee:f5:fc:85:52:7a:dd:
85:f9:37:1c:ce:32:12:8f:3b:e9:4d:ae:2a:42:53:
9e:1b:c5:72:89:02:5e:bb:de:87:ce:d4:25:d6:95:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:44:65:8C:AA:DC:EB:C9:5D:E1:C0:E1:C2:6E:29:93:E4:89:64:E6
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qURljKrc68ld4cDhwm4pk-SJZOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.224.0/24
Signature Algorithm: sha256WithRSAEncryption
48:93:f0:cb:64:a2:13:18:6b:9f:ec:33:ce:84:eb:13:58:0f:
3b:01:ce:22:67:62:d5:85:f8:8b:dd:8c:00:3e:31:e7:d0:a3:
f7:cb:a9:69:42:8f:45:40:c5:9f:73:1c:ce:fb:ba:86:4e:36:
63:a2:d3:16:9b:fc:72:50:f9:8e:65:0e:20:e1:50:18:4a:9d:
1f:75:db:f5:67:7c:2f:e4:79:b0:d1:23:64:a2:08:3e:2c:fb:
4d:f6:d3:c0:f1:45:ef:2b:f1:cd:38:b4:66:03:e4:15:b8:ad:
bb:1a:81:2b:72:4f:e6:6a:41:b6:81:ba:77:f8:e2:3d:55:86:
20:95:cc:16:5f:78:e6:57:d9:9a:85:6d:79:94:c6:75:24:8f:
69:30:4a:60:a1:20:83:9e:c8:32:9b:97:14:1d:04:4f:92:ef:
ee:0a:58:38:7e:29:28:b0:23:dc:9b:8e:f7:d0:50:b6:d1:70:
93:d6:4f:f9:05:47:e8:c5:0a:8f:4d:b6:a9:9f:74:61:18:28:
d4:47:71:87:a0:05:03:2e:0a:e6:b1:c6:67:04:2d:a9:0f:e7:
e8:1a:da:84:cf:05:81:91:c9:ef:d2:77:e0:3f:cf:46:f5:c2:
df:e2:ba:5a:98:c7:3b:05:0f:e8:6f:7b:ac:fb:60:34:e2:5d:
f0:0e:91:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:33 2026 by rpki-client