Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vfTl57eOzJjIXtmgJS7sxfzUMhI.roa
File: vfTl57eOzJjIXtmgJS7sxfzUMhI.roa (raw, json)
Hash identifier: h+V0u1prQjMMM8Le0n4h6R/YBbAj4tsYxBn3FJ1afos=
Subject key identifier: BD:F4:E5:E7:B7:8E:CC:98:C8:5E:D9:A0:25:2E:EC:C5:FC:D4:32:12
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368D60126AA93053FF3EA4E53DB96E7
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vfTl57eOzJjIXtmgJS7sxfzUMhI.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197213
IP address blocks: 82.152.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d6:01:26:aa:93:05:3f:f3:ea:4e:53:db:96:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdf4e5e7b78ecc98c85ed9a0252eecc5fcd43212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:c3:d8:f5:b4:83:c4:67:e5:48:06:40:9d:
4a:97:b5:9d:46:2e:47:ca:8b:43:59:79:61:ee:fb:
1f:7f:ce:f0:48:a2:7e:93:31:3e:4c:5f:01:ab:94:
83:9c:58:87:de:11:de:8b:50:82:52:bf:70:39:8c:
d4:0b:ba:42:46:32:92:c4:50:98:9b:cd:b4:9f:bc:
35:54:05:78:f6:3a:e9:38:fc:c3:f9:80:9b:f9:98:
9f:fa:79:34:dc:6d:fb:0a:ea:37:c8:79:ea:b7:ad:
0c:1d:df:1d:7a:a1:7e:c1:bf:e0:14:05:50:50:44:
ab:6c:51:cd:70:b5:54:d3:76:ad:f7:9e:60:50:30:
e5:c5:ab:f1:b7:8b:8a:20:c4:6e:c4:37:9d:34:63:
75:bf:c9:e1:88:da:f2:0e:99:f6:8d:2a:87:75:e1:
f5:9c:48:db:4e:f0:1e:7a:19:a2:b6:ae:55:19:9f:
86:01:3d:b3:36:b0:d9:ba:1b:4b:ea:f0:c4:e8:eb:
cd:8f:99:5a:41:51:e6:3f:ec:9f:00:0b:86:24:0f:
dc:e4:06:6d:d5:b4:dd:01:d0:ee:49:e8:96:4c:23:
d0:7a:19:f1:ba:78:2c:0f:7b:55:c5:01:e8:0c:2a:
93:47:52:9c:1a:51:b8:ab:c6:8d:c0:c9:c3:4d:3a:
0a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F4:E5:E7:B7:8E:CC:98:C8:5E:D9:A0:25:2E:EC:C5:FC:D4:32:12
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vfTl57eOzJjIXtmgJS7sxfzUMhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.129.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b7:67:b4:c0:37:bd:38:c4:1b:79:b5:bd:41:6e:87:0d:bc:
dc:3d:bc:1f:cc:fb:06:1e:90:d2:25:ae:7d:c5:26:b5:d7:3d:
5a:77:59:cb:7d:30:5d:2e:ae:82:79:ee:f9:db:79:4a:7f:d1:
fe:67:fc:64:a7:a9:20:be:15:ac:e9:1b:c1:99:ac:fa:e2:65:
3e:9d:ac:61:f7:0f:21:8a:7b:38:94:8b:0e:64:5d:3c:d8:c2:
0b:96:7a:e8:ac:f6:6b:af:db:06:66:43:dd:a8:77:85:00:a7:
c0:77:c9:21:de:44:3a:e9:56:3f:42:a0:c4:8f:40:e4:37:46:
84:5e:99:a7:00:17:e2:f7:54:1a:92:12:8c:ed:3c:d0:b6:3f:
c2:57:8e:7b:ee:d7:4e:1c:38:7b:72:97:2c:b0:61:16:c6:31:
df:12:c7:5e:5e:67:7c:83:8d:6e:a7:e1:7b:4f:86:6e:ec:ec:
a7:df:cc:41:07:b0:b4:05:0a:5c:f6:ef:04:6e:af:e1:93:5b:
6e:69:7a:e3:c2:5c:8e:c0:ea:b6:b6:a4:0c:73:07:25:39:56:
53:16:f9:f0:90:1f:56:5f:4d:ae:81:7e:8e:90:7e:e9:d8:db:
91:4d:96:e5:a9:e0:cd:df:9c:c5:02:72:90:02:12:08:15:83:
69:33:59:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:38 2026 by rpki-client