Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/y79uOayiYW4ORSDIFc27ZwuGRFw.roa
File: y79uOayiYW4ORSDIFc27ZwuGRFw.roa (raw, json)
Hash identifier: wOiUq3HRPqfuNak9l64Owi6NpkESSJ3ZOrRsJ/sDXzE=
Subject key identifier: CB:BF:6E:39:AC:A2:61:6E:0E:45:20:C8:15:CD:BB:67:0B:86:44:5C
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368EF5E02697ED2EA320B72B2787174
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/y79uOayiYW4ORSDIFc27ZwuGRFw.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210542
IP address blocks: 82.152.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ef:5e:02:69:7e:d2:ea:32:0b:72:b2:78:71:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbbf6e39aca2616e0e4520c815cdbb670b86445c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:19:41:bf:a9:6d:be:d3:58:04:90:01:d2:
98:b9:59:0b:fa:35:fe:91:aa:d0:62:88:16:b2:f5:
37:37:be:89:e3:00:e8:fd:24:8b:9b:e4:2f:4e:04:
c5:6d:3f:eb:89:d6:86:b8:f3:ce:d2:02:da:a5:93:
01:93:bc:3b:5b:e1:ea:47:ad:d3:ee:70:25:e4:ee:
7f:27:6a:0e:39:3a:eb:1d:30:7a:32:08:1f:96:63:
1c:ad:01:cc:bb:0a:aa:5f:1f:c0:a3:15:c7:0d:c4:
d6:70:f5:a5:dd:69:72:9d:24:d6:e3:22:61:76:9a:
58:b8:34:d1:c6:20:52:e4:ca:ae:58:40:ef:91:e6:
9d:84:cf:51:a8:59:2b:70:77:71:0e:b3:9e:47:0f:
61:f6:72:6d:0a:09:65:9b:99:a5:3f:a2:a6:4b:83:
10:2e:80:10:f3:0c:74:f7:39:54:08:ff:bd:9c:f3:
e9:ea:93:14:52:b5:cd:00:3d:ca:13:34:65:69:fb:
24:3a:44:93:ba:23:10:bc:51:cf:cc:3d:c6:ec:30:
7f:1b:dd:c5:dc:3f:b0:2f:4e:af:e3:42:dd:b6:66:
93:e6:2e:70:3c:41:03:63:76:cf:84:b0:d1:5d:ff:
16:03:0c:9e:00:3b:dc:87:69:ea:18:38:fe:20:e1:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BF:6E:39:AC:A2:61:6E:0E:45:20:C8:15:CD:BB:67:0B:86:44:5C
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/y79uOayiYW4ORSDIFc27ZwuGRFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.49.0/24
Signature Algorithm: sha256WithRSAEncryption
56:82:ba:13:60:0f:98:35:1c:bf:45:9b:43:62:b5:22:1c:d5:
59:3a:ae:15:0e:61:1a:3c:eb:d4:06:55:6f:75:75:c1:fb:20:
b3:f1:62:ba:b0:0f:82:13:b2:3d:58:4c:2c:55:f0:3e:78:8a:
65:ff:9c:ed:aa:54:de:e9:8f:2a:3f:ac:9a:f7:4f:2e:3b:ce:
85:4f:de:b2:d9:c7:51:7e:c2:5e:ee:12:b2:c0:55:2c:a3:4c:
da:7c:92:04:0f:d7:4a:dc:a5:4c:81:0b:a3:3a:a6:b1:90:f9:
e2:40:f6:d8:59:de:6b:95:3c:9e:9b:0d:e7:7f:42:ae:9b:1e:
db:80:28:83:51:67:fe:f3:4a:7b:86:9b:43:73:39:da:4a:38:
b2:01:cf:1a:98:85:6b:84:d2:7c:e2:9b:30:74:51:56:3a:c6:
d8:c3:6d:be:23:6a:c2:9c:34:5f:1d:62:68:79:ee:cb:61:98:
8a:ab:7e:3a:bd:a7:bb:ae:b6:b9:f9:6c:a4:c5:08:d5:c1:7a:
60:d4:6a:95:5e:f4:4e:2b:c3:40:eb:7d:df:c2:c7:b2:72:5a:
82:95:9b:b6:8f:39:b9:1c:28:58:20:77:a1:83:7f:1e:e3:f3:
cf:3b:e3:8e:3a:cd:90:31:0d:6f:80:8b:1e:0b:cf:53:37:65:
60:2b:27:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:13 2026 by rpki-client