Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wMFfzcNWMDbLrFM75QRVoAo6r8A.roa
File: wMFfzcNWMDbLrFM75QRVoAo6r8A.roa (raw, json)
Hash identifier: i3c7dVrbacQD4pupX2phJgCwUbAS/l1jR45gdvA4n3w=
Subject key identifier: C0:C1:5F:CD:C3:56:30:36:CB:AC:53:3B:E5:04:55:A0:0A:3A:AF:C0
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A01E283D23388EDCBF6E04F7454D4DAE83
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wMFfzcNWMDbLrFM75QRVoAo6r8A.roa
Signing time: Thu 20 Aug 2026 07:52:28 +0000
ROA not before: Thu 20 Aug 2026 07:52:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47172
IP address blocks: 82.163.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:28:3d:23:38:8e:dc:bf:6e:04:f7:45:4d:4d:ae:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 20 07:52:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0c15fcdc3563036cbac533be50455a00a3aafc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:64:14:99:ef:f4:ab:0b:14:b8:56:c6:ff:
9a:2d:1d:a0:d3:3a:96:64:d8:82:f1:fc:ca:66:65:
de:4a:63:f3:17:e8:ea:e5:8c:0f:61:29:f2:b0:46:
2f:00:4b:e4:53:e4:e4:7f:bd:57:71:3d:88:aa:c3:
aa:6a:0c:1a:ff:aa:81:e2:9c:83:43:8e:31:a0:d8:
56:31:3e:8e:f1:bd:3a:00:69:3b:19:13:a3:80:c0:
e6:3d:2b:e6:7b:50:e1:15:ee:6d:ae:f3:9c:8d:b0:
6b:ee:d9:a2:9a:39:b9:5b:da:d4:8d:3c:ca:3c:93:
16:ff:52:bb:61:ac:26:f4:be:a0:f1:ac:ca:7b:a8:
4d:5f:90:75:f7:bc:9b:c9:60:39:33:3e:7d:15:34:
f3:71:e3:64:3e:15:cc:60:ed:95:b5:be:0b:65:6e:
09:92:c8:00:31:43:de:65:75:43:8c:d7:75:a5:6f:
58:13:17:e4:5a:47:f0:6a:85:99:d5:fe:b4:45:3a:
a8:9c:14:36:cd:b2:5b:8c:31:dc:d1:e8:76:bb:40:
d3:4d:b4:b5:d6:41:65:e2:a7:fe:c9:d9:df:51:da:
2e:72:f5:a5:5c:6d:a7:09:7f:8c:40:b3:38:af:a5:
79:b9:b2:df:7e:06:5d:b6:6d:b1:dc:82:a6:0f:9d:
d9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C1:5F:CD:C3:56:30:36:CB:AC:53:3B:E5:04:55:A0:0A:3A:AF:C0
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wMFfzcNWMDbLrFM75QRVoAo6r8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.16.0/24
Signature Algorithm: sha256WithRSAEncryption
66:0a:52:13:5e:97:51:e7:df:ad:c7:61:bb:0e:f2:04:a2:c5:
a5:ee:9d:a8:fd:12:29:1d:42:ee:e5:79:e2:87:8f:ec:e3:fa:
97:64:93:e4:4b:38:96:4e:fb:47:10:12:fc:79:3c:30:29:0a:
13:42:7f:08:bf:a4:b3:5e:e8:bb:6d:7c:38:c5:ae:e6:16:3c:
f6:b7:10:50:c2:fd:b6:ff:c3:69:93:d2:02:e4:86:5b:45:7f:
e2:64:43:90:a1:79:3d:65:85:6d:59:f7:76:ca:f8:e5:f5:03:
35:e9:e6:b8:6e:b6:06:16:51:c5:32:2a:e6:96:0d:46:54:3a:
a5:51:fd:28:06:6d:71:5e:cf:aa:b7:e4:37:1a:3f:b5:6d:2c:
74:ca:c0:e8:7d:8e:e9:a2:4f:f8:18:8a:05:22:05:af:d3:cd:
72:41:cd:0b:d7:0d:2e:48:fb:c3:57:63:1c:05:15:71:78:98:
12:66:1a:9d:23:6c:d0:1c:d7:05:c3:54:44:53:ec:d3:ed:86:
d0:69:d9:6b:d8:00:4e:0a:1b:86:c4:13:cd:4d:e7:3d:5f:b3:
4e:21:6e:8b:3d:47:ea:1e:61:7f:ef:4b:84:b6:d4:9c:aa:4c:
db:2c:b0:16:93:44:b2:f8:51:d4:a3:f1:a4:75:9e:92:fe:fb:
32:49:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:28:46 2026 by rpki-client