Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zMyBZjUrAccU_NAGm64Ka-IZ5NM.roa
File: zMyBZjUrAccU_NAGm64Ka-IZ5NM.roa (raw, json)
Hash identifier: hq39pFXSJ+aCLvl2zUpCpfb0AzuuJtPbUcZrz5k8j3U=
Subject key identifier: CC:CC:81:66:35:2B:01:C7:14:FC:D0:06:9B:AE:0A:6B:E2:19:E4:D3
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F236905E6C1EE0FDD3C19792596A7476C
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zMyBZjUrAccU_NAGm64Ka-IZ5NM.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214143
IP address blocks: 82.152.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:05:e6:c1:ee:0f:dd:3c:19:79:25:96:a7:47:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cccc8166352b01c714fcd0069bae0a6be219e4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:c6:d6:ed:9b:4f:4e:6e:11:a1:78:06:a3:
eb:ec:61:17:c6:d4:09:2a:5c:a2:de:19:21:fa:61:
0f:0c:98:2a:77:65:36:86:3e:9a:43:04:05:75:78:
dd:02:6c:d3:b4:23:70:0b:a2:5a:70:14:3c:c5:c4:
2e:07:f2:d6:b7:7a:cf:a1:06:34:6a:54:fb:c8:26:
63:2d:b9:f8:6a:64:40:c8:6a:3f:36:48:13:f5:95:
aa:d2:14:ea:28:df:f3:f2:55:dc:46:b4:70:08:10:
3c:31:c5:36:1f:fe:35:c8:09:d0:dc:c4:30:fc:ab:
71:d6:b2:0b:08:af:43:22:da:11:87:69:67:60:9b:
15:50:0e:f9:ac:ce:8c:15:68:87:5e:17:6f:1d:17:
32:89:bc:31:87:64:e5:82:81:72:74:72:48:af:9a:
bd:cb:5e:85:09:5f:b8:b3:82:de:9d:d7:c8:d0:d0:
e7:e6:2f:fb:37:e7:4f:44:91:98:2d:a2:49:a2:38:
ba:19:58:19:cf:ba:35:35:ef:9e:9a:39:39:be:f0:
d0:9e:83:13:e7:73:cb:c1:8f:b9:f2:f9:6b:7b:96:
18:ed:37:04:a3:3a:10:78:f6:a8:97:6a:b0:49:03:
38:4b:50:45:79:90:78:09:a2:ae:56:7b:2c:be:14:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CC:81:66:35:2B:01:C7:14:FC:D0:06:9B:AE:0A:6B:E2:19:E4:D3
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zMyBZjUrAccU_NAGm64Ka-IZ5NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.49.0/24
Signature Algorithm: sha256WithRSAEncryption
46:01:8b:b4:10:76:ae:a4:53:99:39:18:65:17:88:04:e2:bc:
b3:78:e4:00:3e:6c:bc:c8:3a:a5:11:b1:2d:69:30:ce:c9:32:
bf:24:0e:ee:a5:21:53:a6:14:ba:5d:79:8e:59:47:54:19:37:
68:98:ac:9f:81:ee:b2:d2:8f:a5:5c:5e:5c:90:d8:5a:10:62:
67:11:b7:09:6b:16:98:69:a8:a4:54:c3:89:18:a8:8c:06:05:
8f:24:b4:79:b0:40:40:9c:8f:13:4a:ba:21:7c:62:5b:a0:30:
6e:ee:66:86:5e:7b:7c:43:dd:8b:0f:21:88:dd:87:de:20:ef:
40:6f:3a:d2:82:1d:64:72:6a:89:cc:e4:18:87:2e:7f:4c:b5:
53:31:6d:8f:b8:82:d3:7c:90:ab:6d:45:d6:0d:c3:7e:28:32:
6d:e5:3b:04:e8:7c:c4:85:39:55:44:cc:c6:96:e5:4f:b8:4f:
5f:a6:12:a8:40:3e:b3:8e:76:04:89:ce:64:20:67:e7:c0:32:
4a:48:67:17:2c:34:3c:83:d1:4a:5f:2c:8f:a6:e7:df:af:b1:
aa:fb:4d:a7:db:6b:7c:3f:33:cb:3b:2c:97:ee:e7:91:f1:e5:
de:05:50:72:93:be:06:65:3e:4d:7d:5d:06:81:3a:3c:38:75:
0b:2b:db:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:22 2026 by rpki-client