Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ub_a2o9rvuF8E-YNyUZjX5j2d2w.roa
File: ub_a2o9rvuF8E-YNyUZjX5j2d2w.roa (raw, json)
Hash identifier: +EmjDg7NG96QcZlDJLfEANJ+QkToUk/lJna50auWgbQ=
Subject key identifier: B9:BF:DA:DA:8F:6B:BE:E1:7C:13:E6:0D:C9:46:63:5F:98:F6:77:6C
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23691236D79A0D1550B18E166B0F57AD
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ub_a2o9rvuF8E-YNyUZjX5j2d2w.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215727
IP address blocks: 82.153.148.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:12:36:d7:9a:0d:15:50:b1:8e:16:6b:0f:57:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9bfdada8f6bbee17c13e60dc946635f98f6776c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:ec:12:05:99:ec:d1:4b:67:3f:d9:7d:ee:
f3:dd:9a:5c:7c:ad:61:40:dc:dc:3b:15:91:53:4a:
95:c9:72:5a:75:89:e0:39:78:78:b0:5c:5c:29:e1:
2f:b0:ad:8b:4b:81:63:52:17:ac:ef:af:10:a6:56:
97:cf:7e:cc:c1:8c:0a:b1:c3:d9:1c:fd:fc:19:84:
69:9b:dc:c1:e9:5d:16:80:22:5e:d5:a3:2b:13:53:
c6:91:8e:f8:98:52:6f:aa:01:da:06:32:57:3a:2d:
e2:77:42:ac:b4:14:1e:f1:77:ef:89:24:11:b3:c4:
87:ac:16:28:2d:66:d1:1a:df:37:c8:b6:f0:90:84:
3b:58:fd:77:8c:f9:17:2e:a1:07:bf:05:ea:2e:45:
04:3a:a4:39:a1:f1:42:e1:64:21:79:6f:db:39:30:
e0:f3:ca:90:da:ce:5d:9b:e8:bc:b7:9b:0f:27:cc:
9a:ae:12:4f:d2:28:11:43:9a:e9:7a:0f:31:b6:18:
7b:7a:3d:7b:ec:e9:5d:4b:08:bd:79:f2:3c:19:b6:
94:f3:09:24:65:70:51:7d:68:10:33:8a:5c:ab:1b:
29:a5:2b:63:8d:02:24:7a:54:bf:69:bd:a0:c6:24:
bf:63:c3:28:4d:f8:2f:b4:20:b3:b1:90:0b:cb:77:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BF:DA:DA:8F:6B:BE:E1:7C:13:E6:0D:C9:46:63:5F:98:F6:77:6C
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ub_a2o9rvuF8E-YNyUZjX5j2d2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.148.0/24
109.176.208.0/24
Signature Algorithm: sha256WithRSAEncryption
21:82:4d:38:f4:cc:55:43:b5:25:e6:db:0c:f0:8e:30:d2:9f:
a5:83:ea:02:98:54:9a:43:7d:5b:c5:46:33:9c:a4:6f:22:8f:
7e:1d:19:ae:f2:39:19:0b:ff:77:42:42:7a:b1:94:3d:57:92:
2e:19:95:b3:b2:fd:ed:95:d3:9e:d5:78:56:ab:3f:51:21:01:
16:03:27:7d:f3:b9:52:9c:3a:18:52:30:85:aa:3c:ba:6f:ad:
0e:d9:fe:7e:f0:83:16:ea:76:d1:27:96:02:65:42:e6:7f:76:
9a:76:6f:0b:58:6c:0b:8c:48:ac:7b:6d:ee:c9:61:11:b0:e9:
12:b3:31:c5:78:d1:a5:a7:d0:3a:45:24:c8:a3:86:4e:7d:c7:
07:89:60:43:33:cd:5d:54:a3:3d:73:34:66:c9:c1:40:79:38:
72:cc:77:53:e7:27:36:0c:6b:5b:c9:fb:57:03:78:68:8a:23:
ec:b6:b6:b8:dc:59:b7:5a:98:3f:21:2e:c8:3c:c9:c7:81:ad:
a6:b6:1a:f0:c8:51:0f:88:f5:8f:ea:56:f4:a2:0a:05:9a:24:
84:cc:35:53:c7:47:70:a2:20:67:ee:a2:5e:26:eb:47:ea:3d:
ba:13:fa:93:10:8e:10:54:d0:c2:ac:67:f4:00:81:b4:57:37:
62:c9:ff:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:38 2026 by rpki-client