Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z9lRprSZMD9AkK1Lqid-V9JLL3g.roa
File: z9lRprSZMD9AkK1Lqid-V9JLL3g.roa (raw, json)
Hash identifier: b+iEQvft9Nks/QcFlRZ5W+jDWl5GSa7RtjOo2PKMRW4=
Subject key identifier: CF:D9:51:A6:B4:99:30:3F:40:90:AD:4B:AA:27:7E:57:D2:4B:2F:78
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A00EB2B92A70F36768B3169B93ADB3C509
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z9lRprSZMD9AkK1Lqid-V9JLL3g.roa
Signing time: Mon 17 Aug 2026 07:49:48 +0000
ROA not before: Mon 17 Aug 2026 07:49:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216006
IP address blocks: 82.153.113.0/24 maxlen: 24
82.153.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:b2:b9:2a:70:f3:67:68:b3:16:9b:93:ad:b3:c5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 17 07:49:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfd951a6b499303f4090ad4baa277e57d24b2f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:08:d6:c5:8a:33:df:15:aa:0c:d5:38:22:
4a:9e:08:f0:08:34:29:92:4a:41:57:2d:42:60:ba:
f2:88:09:b5:47:b8:64:9d:47:b0:00:68:b2:e2:d1:
76:75:f1:5b:02:f9:56:c8:70:74:ca:d2:23:da:a9:
96:8b:95:53:ba:a9:16:9a:57:73:ad:0e:6b:4d:f7:
25:ad:2c:09:6f:0b:2a:2e:55:78:55:76:a7:79:d9:
cf:77:5a:2e:0b:23:6a:24:b0:7e:9f:df:8f:73:43:
ff:1c:08:52:65:ba:6b:ee:98:84:c3:a3:95:86:df:
4d:31:7a:36:d0:e7:48:03:5d:00:1c:ef:cb:1c:4f:
05:8f:5b:29:5e:d8:31:3d:c6:cb:34:97:88:12:d2:
09:65:e6:1a:d9:fb:50:d5:c9:9a:5f:50:63:5e:a1:
3d:05:39:61:03:ad:80:4b:53:1a:67:dc:25:47:61:
cf:1d:35:8b:cc:5b:08:69:e6:7a:48:27:6d:0d:64:
44:67:d8:43:52:27:64:2b:e4:ff:6e:b8:b2:dd:9d:
a6:36:71:35:44:ca:d6:e0:3f:db:04:2b:0b:3b:6b:
b6:6b:96:5a:f0:7f:12:f1:6e:89:bf:87:6a:60:2a:
a5:8a:01:ad:c8:5c:1e:9e:17:8f:2c:38:45:e5:41:
dd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D9:51:A6:B4:99:30:3F:40:90:AD:4B:AA:27:7E:57:D2:4B:2F:78
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z9lRprSZMD9AkK1Lqid-V9JLL3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.113.0/24
82.153.116.0/24
Signature Algorithm: sha256WithRSAEncryption
61:5b:6c:7e:d7:44:c6:30:d5:c5:0d:4e:21:24:75:c9:28:49:
43:27:ef:f1:e8:bc:72:94:27:6b:51:98:fe:8c:78:62:e6:cc:
74:c7:69:28:99:c2:ce:cf:32:d4:9d:85:d0:73:81:42:02:20:
1e:af:d3:2f:20:49:ee:60:58:07:89:1b:62:02:58:ac:70:90:
75:33:b3:e3:46:2d:4b:24:df:c9:50:36:3c:ac:81:b9:d6:ac:
b8:16:48:07:42:da:4a:d5:79:ab:08:18:fd:75:09:77:78:bf:
14:fd:c0:94:19:d8:64:35:66:f1:8c:02:0c:c0:15:7a:cc:7c:
e0:00:9d:59:a6:dd:22:4e:0c:f8:70:4c:3c:90:dc:d5:88:a1:
2e:cd:0e:eb:31:93:c8:98:0a:2a:dd:10:0c:2c:46:8b:fa:7b:
51:6a:8e:d6:07:bc:e5:cf:33:6e:3d:c5:76:42:e5:91:f5:26:
5d:db:66:e6:58:7d:75:35:da:1d:07:be:45:2f:60:4c:c8:de:
6d:ce:b1:73:0e:2d:bd:36:32:79:d6:89:4a:47:be:e9:6c:61:
0a:f6:e3:b9:b1:2f:19:5c:a6:dc:3a:ba:98:07:55:ed:d6:87:
10:7a:e7:bb:ae:e5:88:ef:da:6e:72:ef:d2:fa:e3:2c:e4:93:
39:12:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:30 2026 by rpki-client