Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/scpTZn3rpb_RIvYGNJ2mCjuXJUM.roa
File: scpTZn3rpb_RIvYGNJ2mCjuXJUM.roa (raw, json)
Hash identifier: 0are3UWO3qpw3HMHKQ6tfTfxRjve8TAvRxaGSp2U8ek=
Subject key identifier: B1:CA:53:66:7D:EB:A5:BF:D1:22:F6:06:34:9D:A6:0A:3B:97:25:43
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368C4A2B869052778887AEA55917B1D
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/scpTZn3rpb_RIvYGNJ2mCjuXJUM.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60982
IP address blocks: 82.152.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c4:a2:b8:69:05:27:78:88:7a:ea:55:91:7b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1ca53667deba5bfd122f606349da60a3b972543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:92:2a:ae:54:47:a8:02:fb:d9:cc:c3:1f:32:
20:af:93:52:68:48:8b:8e:78:fb:f3:15:5d:ef:f1:
45:c6:d0:fc:73:3c:bd:93:48:ec:48:3d:9f:a4:1f:
d2:8e:a4:3f:de:b1:74:80:38:48:07:1b:72:78:be:
5b:93:b9:c9:25:af:ea:9f:2b:32:c5:d9:63:24:d6:
52:5d:18:27:1c:30:b5:bb:6a:ed:73:0c:0d:d5:5e:
77:c0:97:28:78:71:ca:02:97:1d:d5:d5:44:5f:3d:
45:4d:58:e6:db:33:78:90:65:cf:63:1f:cf:ce:13:
bb:44:9f:53:57:d5:c7:84:33:be:5f:f1:d8:cf:b5:
76:34:3a:5d:30:fd:39:04:0e:a4:17:da:e2:b9:ac:
2d:77:5f:ae:7a:59:35:67:c3:bd:87:d4:47:6d:bb:
db:14:83:8c:8d:14:a9:b6:5d:99:5f:2d:f5:50:6f:
74:bd:26:d9:27:76:56:1f:23:93:9c:97:89:72:7f:
2a:b2:77:65:59:96:1d:19:91:5a:28:1a:e3:87:92:
41:47:27:78:a4:16:8b:c8:8a:ff:96:ac:49:30:08:
62:eb:1c:5f:c4:b1:ef:3d:3b:14:c5:e1:31:c7:81:
aa:cd:f9:25:aa:9c:f4:a3:07:ac:45:86:02:ec:30:
e9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CA:53:66:7D:EB:A5:BF:D1:22:F6:06:34:9D:A6:0A:3B:97:25:43
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/scpTZn3rpb_RIvYGNJ2mCjuXJUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.132.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:98:14:11:69:ad:15:e5:91:ab:f2:c2:21:9c:01:85:1f:7a:
0e:66:6e:8b:45:5c:49:01:47:6a:05:3d:4e:40:bc:0b:3c:24:
f0:fc:6b:08:e9:4a:57:88:b1:b8:69:1c:ae:ca:a4:45:b0:2c:
bf:94:77:d1:98:32:53:44:b9:57:90:6f:ee:35:89:74:7c:ae:
33:e4:50:5b:92:d7:39:18:7a:11:c6:0a:16:63:9a:29:61:a3:
84:2f:a6:03:49:6b:52:1c:76:96:ca:1e:27:9b:6d:64:73:06:
f9:04:19:20:16:ba:d4:cb:f9:c7:8c:1b:ae:65:83:47:28:26:
19:4c:c2:17:46:19:90:88:80:4f:c0:0e:5f:61:c5:6e:ef:e4:
50:98:57:49:a6:50:0d:4f:8e:1a:43:36:d7:34:61:2c:8c:b8:
56:98:f0:f7:95:8f:b0:d2:53:41:9f:ee:1c:fc:02:2e:f8:92:
ca:95:8b:82:91:42:31:87:82:b7:f4:a7:80:fb:39:21:71:50:
38:e1:3b:92:e7:83:44:c7:f7:a9:96:09:e2:58:b9:8c:a2:25:
4d:1f:6c:dc:f5:e7:6b:dd:28:33:69:0b:5a:23:a4:d5:bb:52:
ac:08:90:f6:4d:28:78:1d:5a:8c:33:e7:01:ff:f1:f7:de:6e:
f1:fc:17:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:19 2026 by rpki-client