Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yXfYfumP9G942KSSYX2Ldbv20iY.roa
File: yXfYfumP9G942KSSYX2Ldbv20iY.roa (raw, json)
Hash identifier: QGVt9gD0BDEJw/2r9uDHwSPuig2WBvro9xkqJqtaC7M=
Subject key identifier: C9:77:D8:7E:E9:8F:F4:6F:78:D8:A4:92:61:7D:8B:75:BB:F6:D2:26
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0FBBCD31FD77BEB74896FE7AEC814216E
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yXfYfumP9G942KSSYX2Ldbv20iY.roa
Signing time: Fri 02 Oct 2026 08:30:51 +0000
ROA not before: Fri 02 Oct 2026 08:30:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 82.152.217.0/24 maxlen: 24
82.153.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:bc:d3:1f:d7:7b:eb:74:89:6f:e7:ae:c8:14:21:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 2 08:30:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c977d87ee98ff46f78d8a492617d8b75bbf6d226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:b2:a8:b1:e4:13:5b:a4:dc:46:29:75:e7:
77:5e:b4:71:5c:4d:03:9c:72:ea:ab:7d:da:d6:fe:
5d:79:f8:7d:e3:cb:65:22:ed:2b:3b:4c:27:0a:b6:
81:eb:10:b6:59:6d:35:11:db:dd:eb:f1:35:41:9d:
ea:49:7c:f4:db:ea:8b:89:07:85:b8:d5:45:d6:74:
87:7a:4e:5e:d3:a4:75:d7:e8:e9:75:77:25:a3:99:
f1:3d:ae:4d:e2:08:4c:ca:c9:ad:ef:ed:11:c2:f1:
9f:97:36:8b:72:59:32:1f:4d:97:1b:ab:50:15:fb:
0f:a5:dd:28:f8:63:e9:5f:60:97:45:e6:69:f8:6e:
43:38:7a:ff:3d:0f:66:21:1c:1c:ae:5c:23:d3:e7:
7d:84:2e:74:13:62:5f:52:9a:4e:95:20:1b:2f:80:
de:70:85:7a:6a:87:45:28:7c:bf:5a:8a:ea:15:3d:
51:dc:f8:f8:7c:57:40:fb:eb:2e:90:04:cd:d7:cd:
b4:fd:12:a2:a0:b9:79:7c:75:6c:4f:bf:38:eb:69:
44:b3:cb:4c:48:2d:a8:a7:8f:c9:ad:a4:80:54:85:
29:8e:ca:10:19:22:50:4a:b5:71:c7:b2:f6:36:fa:
62:d9:47:29:cc:21:d6:74:6f:c1:41:e7:da:b6:24:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:77:D8:7E:E9:8F:F4:6F:78:D8:A4:92:61:7D:8B:75:BB:F6:D2:26
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yXfYfumP9G942KSSYX2Ldbv20iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.217.0/24
82.153.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6b:f1:0a:9d:6b:4e:b3:b2:52:62:cb:bf:e7:6e:34:c1:ca:
27:fe:cd:4b:19:2c:28:61:f2:8a:02:6d:17:f8:a6:d4:67:d0:
d2:f0:73:87:fa:f1:bd:fd:fd:41:3a:20:bd:cb:31:62:e1:79:
c1:33:5e:92:f3:89:ba:18:ec:68:1a:d9:10:af:cc:e1:41:2e:
07:f6:2c:98:19:49:a6:f7:0d:be:20:36:ea:74:25:29:e7:3f:
20:8f:b3:4d:15:e4:ec:4f:f8:c7:dc:6b:d4:9e:28:5f:fa:f8:
a1:f7:de:13:02:66:8a:47:16:cf:d5:55:10:d5:5c:5d:93:40:
89:38:ac:f2:1c:da:b7:94:7f:30:bb:59:41:e3:bc:de:4e:f2:
1f:57:bf:c0:f1:9e:e8:c6:a0:6b:62:3a:5b:51:e5:77:d6:97:
13:f1:24:b7:37:0e:a8:fb:1f:4a:0c:1d:69:f7:d4:30:9b:63:
d9:05:81:aa:84:d6:4a:b8:29:22:02:5e:94:7e:9e:c7:50:b4:
01:0d:44:a4:f4:47:49:56:6d:14:f2:97:cb:1c:c5:4d:90:ea:
d0:f4:d8:67:77:22:29:3a:67:ab:aa:6a:3f:bd:51:e3:e5:57:
6e:98:c1:1a:5c:13:29:33:a3:7a:ac:a4:25:78:6d:66:36:ec:
3d:d7:8b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:58:12 2026 by rpki-client