Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qkMnpmyGD_IiyzL_xpX7G-f4bWY.roa
File: qkMnpmyGD_IiyzL_xpX7G-f4bWY.roa (raw, json)
Hash identifier: 02EGn9uNbf3fvjIfmV/8PgDiSqerA//LUFRKuD4WIwo=
Subject key identifier: AA:43:27:A6:6C:86:0F:F2:22:CB:32:FF:C6:95:FB:1B:E7:F8:6D:66
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC86DA7D62A5C0F61D803B1EA842064E0
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qkMnpmyGD_IiyzL_xpX7G-f4bWY.roa
Signing time: Mon 03 Aug 2026 16:20:57 +0000
ROA not before: Mon 03 Aug 2026 16:20:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201676
IP address blocks: 82.153.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 12:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:6d:a7:d6:2a:5c:0f:61:d8:03:b1:ea:84:20:64:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 16:20:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa4327a66c860ff222cb32ffc695fb1be7f86d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:16:60:6c:c7:e7:f1:5e:5b:62:80:e2:1b:
5f:41:00:fd:52:57:31:33:f2:29:b2:39:8d:da:00:
af:70:b2:74:25:1e:d7:d2:92:63:ec:b2:b5:ee:00:
48:85:88:cf:ec:67:1a:75:b9:a7:c8:10:fa:12:ab:
91:d7:1c:09:29:bc:57:75:54:af:86:c9:48:db:b7:
ef:b9:30:be:10:33:a1:c2:15:63:37:c4:c8:f4:72:
f7:52:72:91:81:09:9f:0a:45:93:6a:f8:98:b1:64:
f5:19:fe:ff:03:f6:09:b2:17:56:d4:2b:c3:84:e3:
8d:55:f7:b4:74:44:51:30:57:ea:47:c6:8c:92:26:
2c:87:be:9d:04:55:44:9a:64:37:79:10:9e:1a:e5:
23:6a:e9:ba:07:b5:46:17:73:f9:a8:50:35:48:5a:
09:05:eb:af:d7:54:2e:02:83:50:6b:90:6f:94:71:
b5:4d:5f:7f:da:db:98:e6:38:ae:47:76:3b:6d:59:
ce:2d:22:54:26:3d:e8:13:f1:9d:79:e2:04:7e:5d:
8d:d2:9f:f8:a1:cf:45:54:73:41:e6:c6:bb:ff:5d:
88:cb:dc:2c:14:7b:7e:4a:a5:26:48:fd:1f:c1:e8:
e3:53:96:96:bf:02:20:59:51:69:27:ce:4f:0e:d9:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:43:27:A6:6C:86:0F:F2:22:CB:32:FF:C6:95:FB:1B:E7:F8:6D:66
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qkMnpmyGD_IiyzL_xpX7G-f4bWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.151.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9d:bc:4c:18:dc:aa:41:69:97:66:18:9b:3c:da:58:1b:9a:
ee:0d:56:1f:9f:98:76:95:bd:72:0c:81:f4:39:1f:75:ed:26:
ea:f9:b4:c3:7c:5e:1d:08:32:c3:c0:21:a5:27:02:55:30:86:
83:30:c6:b3:17:ed:17:fe:2f:d5:0c:c6:38:03:ec:69:4e:6f:
7d:41:a1:6e:8a:ca:45:6f:6c:2e:e9:a5:79:a0:ca:ec:36:18:
77:70:c5:2a:f3:a0:76:8a:4b:16:31:74:d8:85:da:cd:0f:f3:
d8:f6:9c:18:b9:b0:3a:5d:c9:f7:26:44:13:d1:af:ca:0d:49:
db:7d:20:b5:72:63:b7:ea:36:66:86:f6:6c:0a:67:4c:2e:eb:
b6:a2:d9:6b:eb:ce:c7:76:bd:19:9b:fc:c8:c8:5c:a5:aa:e3:
4c:29:58:ec:f4:85:7d:73:19:90:b0:01:6d:1c:fb:3c:a9:aa:
b1:f9:51:0a:1c:7e:cd:dd:cb:a6:a4:4a:2c:8a:39:cb:12:83:
58:df:f7:4b:e5:d4:69:6b:e2:2c:f9:c7:dc:a1:6c:00:9a:b7:
19:2b:ef:e4:ba:a4:d8:7c:86:f1:eb:e4:8e:9a:3f:33:3b:90:
61:ae:e2:1b:d5:af:e4:c5:e2:08:9e:64:ef:50:75:71:a7:f7:
4d:f5:01:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:40:07 2026 by rpki-client