Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uJNXfRkuZvJgeMKSZKJgwFK2iS0.roa
File: uJNXfRkuZvJgeMKSZKJgwFK2iS0.roa (raw, json)
Hash identifier: F4+Y/B6+hxKOeSBufiLyCYXORqTrvC7gL/zGn8tTY+4=
Subject key identifier: B8:93:57:7D:19:2E:66:F2:60:78:C2:92:64:A2:60:C0:52:B6:89:2D
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368E67D2C5A22EFD1EBED74DDC12938
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uJNXfRkuZvJgeMKSZKJgwFK2iS0.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206300
IP address blocks: 82.152.18.0/24 maxlen: 24
82.152.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e6:7d:2c:5a:22:ef:d1:eb:ed:74:dd:c1:29:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b893577d192e66f26078c29264a260c052b6892d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:2c:a7:06:e4:0c:9f:05:28:17:f3:fa:98:
f4:82:13:8e:1c:4e:45:f1:7f:d1:44:fa:01:ee:0a:
2f:41:cb:00:78:09:85:41:25:59:6f:a1:d6:dc:98:
ff:48:0f:28:f6:af:73:09:2f:cb:ad:c9:02:b6:9d:
69:67:5d:a6:7f:83:f5:31:20:98:8d:f2:6e:19:3d:
46:1e:88:38:05:03:a3:95:b5:fa:bd:f5:a3:29:00:
06:70:71:be:26:09:83:d3:02:8c:e4:46:2a:b6:42:
c7:2d:50:19:17:e8:71:79:72:72:85:11:72:3d:d3:
5c:8d:47:00:9c:cb:9c:3d:ce:63:96:f0:f4:a6:f4:
da:99:c9:e3:01:de:66:97:99:86:9d:0d:61:7f:da:
b3:ea:76:c1:af:a2:31:6a:19:c4:19:2a:92:41:e8:
8c:b7:7a:2f:3c:e8:bb:4d:6e:47:c1:a0:f9:f5:d3:
1b:fc:3d:cb:27:30:e1:73:83:32:0f:eb:a1:69:19:
b9:4f:a6:4f:b6:c0:a1:10:88:11:79:44:7b:78:a8:
20:cc:9d:d6:00:be:0a:05:64:88:cf:12:22:d5:bd:
27:f3:03:20:66:9e:48:b1:e5:b8:02:29:b2:07:6d:
27:b3:84:d3:b7:17:ee:8a:91:0e:54:8f:92:22:4e:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:93:57:7D:19:2E:66:F2:60:78:C2:92:64:A2:60:C0:52:B6:89:2D
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uJNXfRkuZvJgeMKSZKJgwFK2iS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.18.0/24
82.152.64.0/24
Signature Algorithm: sha256WithRSAEncryption
53:16:ae:01:1f:42:50:ec:66:5e:48:1f:af:5d:04:5d:10:c2:
01:f2:75:f5:42:05:3b:64:af:89:09:59:25:67:51:1f:4f:46:
ac:e6:60:1e:bc:c9:3a:bd:d1:b3:35:7e:91:79:5a:b4:63:34:
1b:b3:d0:9b:3d:73:be:9c:e5:fe:13:50:55:01:65:8d:e4:e2:
29:1d:64:1f:25:8d:31:79:81:03:85:cf:a9:ff:bb:07:ed:c6:
6c:be:5a:e9:c4:a1:34:d0:71:0e:c2:e9:ad:12:5a:54:5e:46:
82:eb:b1:5f:e3:cb:84:75:bc:96:2d:15:a4:50:e8:ce:dd:0f:
26:9e:08:34:63:22:87:ef:00:17:88:28:51:a3:54:8c:3e:ff:
a0:43:04:cc:99:a9:ac:83:d0:77:81:7f:b7:70:b7:bd:4b:d9:
e8:a0:73:10:f3:01:11:56:3c:92:c3:74:8f:4f:59:98:bc:c1:
aa:17:d6:87:43:62:6a:ba:7a:d6:60:9f:3b:00:38:81:16:a5:
dc:c2:93:80:c6:d4:db:e1:f1:31:da:6f:74:bd:7b:e0:42:e6:
45:73:6f:88:6a:9e:4a:e6:5c:4a:ad:4c:9c:a8:21:2c:c9:94:
e0:c0:60:ee:4f:73:d1:43:12:5c:a6:4a:1a:cb:c2:30:56:52:
29:95:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:22:22 2026 by rpki-client