Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uJfuMTUwAKx4dBBuzM4dWu2dAK0.roa
File: uJfuMTUwAKx4dBBuzM4dWu2dAK0.roa (raw, json)
Hash identifier: 8NlBX7s9VBr/Ic4vLU1FMqPNXVt+pKH/lM2gXLACpos=
Subject key identifier: B8:97:EE:31:35:30:00:AC:78:74:10:6E:CC:CE:1D:5A:ED:9D:00:AD
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368CEA553C63743D13726723AE116CA
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uJfuMTUwAKx4dBBuzM4dWu2dAK0.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151964
IP address blocks: 82.153.47.0/24 maxlen: 24
82.153.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ce:a5:53:c6:37:43:d1:37:26:72:3a:e1:16:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b897ee31353000ac7874106eccce1d5aed9d00ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:73:d8:0c:d0:bc:f2:49:86:f5:7e:42:dc:
b3:66:01:af:3e:25:4f:ae:61:cb:a8:d9:f8:a5:a0:
89:9b:cc:a6:3b:54:c8:05:e1:87:c1:24:48:8c:9c:
98:83:d9:1f:07:a4:19:aa:ea:e6:99:35:09:11:fc:
9e:64:7d:6e:8c:2f:45:04:f7:38:cd:be:eb:ee:1d:
95:fa:9e:e2:3c:7d:b9:0d:4a:fc:95:b4:5a:69:b4:
0b:87:de:0f:72:8d:d8:43:96:79:4d:74:17:24:43:
a2:ae:8a:91:1c:43:cf:af:a9:69:03:69:0f:3a:aa:
cf:d8:84:97:c6:4d:a4:67:fc:1c:e7:57:4f:d2:b8:
72:4c:71:7c:05:15:ac:7d:69:23:eb:e1:01:ff:3c:
d1:db:3b:9b:ff:fe:37:3e:5b:31:56:1b:56:98:7c:
e4:58:98:e5:05:33:64:2c:6a:6d:a9:1e:33:0a:f9:
f2:c2:1b:80:b8:e5:8b:7e:9f:32:42:ee:93:42:a4:
51:59:49:c3:41:1e:9e:6a:4d:3d:df:6b:76:3a:f7:
a6:ce:e3:43:26:10:a2:d9:64:b4:d9:44:a4:6d:97:
4b:31:72:65:8c:c6:49:ac:62:a2:db:1f:ca:12:0c:
ad:fd:f3:b7:3d:72:8f:5a:3f:24:f6:7b:db:68:b5:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:EE:31:35:30:00:AC:78:74:10:6E:CC:CE:1D:5A:ED:9D:00:AD
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uJfuMTUwAKx4dBBuzM4dWu2dAK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.47.0-82.153.48.255
Signature Algorithm: sha256WithRSAEncryption
59:f4:94:a6:9a:50:87:5e:b1:c8:27:e5:25:67:c3:56:df:b6:
ce:08:12:f5:45:a9:42:da:6c:e7:92:07:a2:f2:f2:c9:03:73:
d8:d2:98:a7:30:ec:a3:f2:43:7f:49:33:47:c3:fb:50:38:28:
b9:2f:bb:a6:9b:59:77:8c:47:8b:e8:1a:dc:ae:43:65:c8:ad:
80:57:af:14:3f:21:28:18:0a:9a:a6:51:e9:6d:6f:3c:15:5b:
7f:dd:50:3c:22:9f:22:17:ed:2b:4b:b3:6d:2b:e0:af:b5:d1:
57:05:d4:67:c8:44:33:88:51:6a:f3:77:aa:f9:98:85:83:d0:
be:50:85:25:77:0b:a4:10:6d:5c:76:6b:91:3c:bc:f2:4c:59:
73:08:e2:72:5b:af:d1:ea:04:ab:bc:7f:58:c8:eb:3c:fb:bc:
91:be:8c:bc:11:aa:73:ef:1d:19:97:0f:64:13:8e:31:4f:2f:
2a:db:58:27:8c:09:a7:ab:16:d4:a1:fa:a0:1b:fe:3c:b2:f5:
21:d6:55:85:b7:7e:ab:66:64:9e:31:d5:3a:02:6c:1f:cf:db:
af:61:3a:ba:f6:09:69:2b:93:82:80:1a:d8:79:92:e8:0c:11:
17:0e:c7:3d:0f:ca:2d:a1:7e:81:90:4a:9c:6d:bc:17:5a:8a:
e6:42:7e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:31 2026 by rpki-client