Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tmb300qrZC0WJF7kuUcOCsnDPZM.roa
File: tmb300qrZC0WJF7kuUcOCsnDPZM.roa (raw, json)
Hash identifier: wQantc53KMBAUqXrgr9TGxPXyToYl0Ju6QS8kmYL+9g=
Subject key identifier: B6:66:F7:D3:4A:AB:64:2D:16:24:5E:E4:B9:47:0E:0A:C9:C3:3D:93
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC6869626D6A66398C08792E259BB7CD9
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tmb300qrZC0WJF7kuUcOCsnDPZM.roa
Signing time: Mon 03 Aug 2026 07:28:56 +0000
ROA not before: Mon 03 Aug 2026 07:28:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 217.144.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 07:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:86:96:26:d6:a6:63:98:c0:87:92:e2:59:bb:7c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 07:28:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b666f7d34aab642d16245ee4b9470e0ac9c33d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:96:be:80:8c:81:ba:9f:06:81:f6:62:90:
fb:5e:1d:2c:fd:36:f9:82:62:2e:8b:2e:43:ef:62:
66:b9:27:4f:77:2c:09:c0:f9:c6:2e:36:8d:9c:b3:
c4:be:b2:ab:e6:78:ba:62:85:60:b2:db:5f:f1:87:
f2:d8:65:63:b8:74:15:1a:d6:13:0c:52:f7:aa:74:
12:5a:99:dc:71:b4:2c:d4:64:57:58:89:06:79:33:
a4:20:a9:f7:bf:97:e3:6c:7e:5d:0d:12:6e:ed:bf:
a9:74:cb:87:99:aa:d4:a1:e6:fb:bc:aa:1c:78:92:
f9:a4:b4:0a:d3:b5:2b:95:d4:66:36:66:af:68:64:
d1:95:d4:01:37:7b:33:97:83:1c:68:44:87:18:d2:
3e:b9:bb:a3:5a:c6:64:f0:16:e3:1c:25:35:da:a9:
7f:f0:89:55:ca:82:d2:d8:df:dd:cf:90:31:dd:42:
9f:15:4f:99:1c:de:07:1a:99:75:35:53:b7:51:4c:
f5:14:8e:52:24:23:52:e7:5c:8f:1c:bb:78:02:39:
6f:5a:aa:74:d6:bb:87:dd:b1:26:a5:57:f2:b6:31:
e1:25:4f:8d:c0:17:89:a0:38:28:69:99:20:8c:43:
b2:64:e9:83:b9:da:15:37:06:26:f2:d4:5f:f0:5d:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:66:F7:D3:4A:AB:64:2D:16:24:5E:E4:B9:47:0E:0A:C9:C3:3D:93
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tmb300qrZC0WJF7kuUcOCsnDPZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.144.156.0/24
Signature Algorithm: sha256WithRSAEncryption
52:9e:68:66:c6:f0:70:54:d4:0d:c8:f7:fc:54:01:d9:42:dd:
6e:bf:d3:0b:9e:e7:a5:78:51:e8:ff:e4:7e:92:34:95:f1:53:
95:fd:cc:6f:dc:b2:d3:95:6d:7b:a1:e9:d5:e4:b0:63:9c:95:
95:7b:0b:c7:72:cd:c4:d7:4e:a9:81:32:8f:5c:3d:a4:0a:fc:
dc:60:9b:42:4b:b5:7c:67:a0:88:44:3c:ab:de:10:6c:ee:0c:
41:00:bb:27:32:5d:62:d1:99:6d:1a:bf:43:91:47:ef:22:95:
23:22:94:22:d1:7c:31:e5:d5:8c:e0:fe:bc:05:7e:9c:7e:94:
26:17:25:54:38:1b:34:c4:37:1b:59:3c:e9:e8:a9:bb:76:6c:
05:51:1d:6b:0f:69:6c:9c:c3:6b:ca:dd:45:5b:fe:6a:84:e0:
80:48:5e:2c:36:d7:b7:07:45:1d:c0:a0:d8:d8:97:e9:14:4c:
a8:13:0c:a7:d7:d3:60:89:27:ea:5c:8b:7b:01:02:09:9a:0e:
92:cc:e4:87:ee:48:59:0b:5d:ea:da:01:e5:94:d1:14:54:53:
f0:4a:75:c7:5f:85:c5:1a:dd:eb:9e:6b:cc:50:f0:dc:c2:5e:
6c:ac:d2:c2:68:59:fb:93:e3:a8:cc:77:80:fe:36:3a:58:6f:
2f:b3:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:12:03 2026 by rpki-client