Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z_LPf9TxNTJfH-hrziiG1xcIoFg.roa
File: z_LPf9TxNTJfH-hrziiG1xcIoFg.roa (raw, json)
Hash identifier: zKKpUREi3nNrtcEiHdWM2up3npkkUeJuPER23HBispo=
Subject key identifier: CF:F2:CF:7F:D4:F1:35:32:5F:1F:E8:6B:CE:28:86:D7:17:08:A0:58
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F236912EC8611C5727B38952652FDD495
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z_LPf9TxNTJfH-hrziiG1xcIoFg.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216026
IP address blocks: 82.152.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:12:ec:86:11:c5:72:7b:38:95:26:52:fd:d4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cff2cf7fd4f135325f1fe86bce2886d71708a058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fe:2d:8c:38:6b:5f:86:7e:5f:a5:e4:b9:c2:
67:b8:95:64:18:fd:db:62:21:62:2b:26:6a:5b:68:
12:6b:56:02:c7:f8:70:0f:87:e2:9f:0e:82:f4:b0:
a4:f7:d6:d3:90:4d:fa:f1:09:a1:64:f9:50:5a:01:
7a:dc:22:4e:42:23:bc:35:55:ca:8a:92:f8:fe:db:
66:4e:d3:cb:7d:fa:62:f1:87:13:67:ab:18:5e:98:
4f:cd:16:b6:8a:f9:f1:31:25:a2:1e:75:0f:c9:8f:
9e:c5:8a:23:87:c7:9a:91:68:40:da:09:91:58:49:
00:c0:8d:48:0f:f2:7d:c1:be:2e:80:80:a7:04:65:
18:38:79:fb:ef:7c:16:3b:88:4b:d9:54:47:91:ba:
a7:09:c3:dc:1a:10:93:6a:73:e9:15:fb:23:67:6e:
79:66:d9:d5:8e:94:ce:ff:47:df:0f:3f:cb:04:46:
49:8f:60:4f:31:19:fb:b9:ac:20:06:e2:5a:1e:e8:
e9:34:d9:b7:ba:db:96:60:ba:27:a1:ec:ed:54:10:
a1:65:a8:bc:57:1b:59:f2:37:47:24:c2:3e:94:bc:
2b:6d:e8:ed:d2:7a:2f:39:40:cb:2e:72:72:60:0c:
82:ee:bf:dd:29:93:39:6d:46:e2:d2:b5:d5:55:7b:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F2:CF:7F:D4:F1:35:32:5F:1F:E8:6B:CE:28:86:D7:17:08:A0:58
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z_LPf9TxNTJfH-hrziiG1xcIoFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a5:c3:84:9f:3d:b4:7f:ad:46:59:2e:c5:79:69:5c:e5:ea:
be:31:c6:4d:e6:f7:52:24:7d:b5:10:41:c2:eb:cf:b1:62:27:
fc:42:c3:7a:a5:04:34:fc:94:55:28:4f:da:53:af:42:d7:0a:
5c:8d:4e:0e:ae:2a:ad:4a:e1:04:cc:2b:7a:c9:65:3e:55:03:
f5:e6:fa:87:43:7b:02:1b:77:44:ba:1c:54:e6:8e:6c:cd:d6:
ae:40:27:f1:1e:fe:49:57:e7:f1:3e:a9:59:1b:48:e7:74:b5:
fb:1c:c8:33:5f:26:e5:75:15:74:0a:d2:5f:3e:c1:df:c7:a2:
7e:60:7e:78:79:a8:2a:35:69:47:8f:c6:46:62:24:0e:11:bd:
de:72:5d:8f:22:86:cb:18:c3:db:ec:69:e5:f5:63:84:fa:04:
ec:22:79:35:36:c3:45:5d:2b:a5:97:f7:47:11:36:b1:a0:16:
a4:f5:da:02:67:12:02:97:a9:13:54:b8:a4:f4:04:ea:9a:02:
ac:b7:e0:06:ab:13:d7:43:8f:8c:d9:ec:6e:dd:d9:72:07:e1:
e0:62:68:20:b8:73:9a:e9:0e:93:74:42:1a:3f:69:cc:b2:5b:
ba:1f:96:06:1d:bf:cf:51:93:26:1a:5c:28:20:9d:87:92:90:
88:68:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:39 2026 by rpki-client