Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SYFgI8aekJx9ZkIcStOieYhmx1E.roa
File: SYFgI8aekJx9ZkIcStOieYhmx1E.roa (raw, json)
Hash identifier: tx0iDd5DzLObJo+AV4/91tZecG7IYQTfWrpRWjzrCD0=
Subject key identifier: 49:81:60:23:C6:9E:90:9C:7D:66:42:1C:4A:D3:A2:79:88:66:C7:51
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A11B270EA4293F06145C8D32D1A6609448
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SYFgI8aekJx9ZkIcStOieYhmx1E.roa
Signing time: Thu 08 Oct 2026 10:55:06 +0000
ROA not before: Thu 08 Oct 2026 10:55:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402904
IP address blocks: 82.152.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:27:0e:a4:29:3f:06:14:5c:8d:32:d1:a6:60:94:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 8 10:55:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49816023c69e909c7d66421c4ad3a2798866c751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:b5:07:1f:e2:df:26:d4:70:69:c7:8e:32:
41:51:e1:a9:d2:06:01:ce:c2:17:07:94:4e:ae:0e:
42:a6:2c:e1:fe:be:a1:a9:95:71:eb:02:8d:ab:87:
6d:db:16:2e:22:d2:c5:c2:2d:f6:2d:f7:8d:dc:2e:
73:da:d4:0f:ff:22:89:f1:cb:7e:ad:89:75:67:ce:
fa:6b:15:76:3c:e7:a5:0e:dc:25:41:7c:b9:65:26:
e9:2f:32:47:9c:e7:77:55:53:e2:13:dd:1a:32:fc:
fd:5e:5f:7d:88:1e:06:d5:69:fc:28:3b:35:b7:08:
5f:38:6d:90:b3:7b:28:cd:a0:4e:85:2b:cc:06:b0:
fb:af:6d:a7:59:ff:3f:ff:8a:6b:98:84:2e:66:26:
b1:15:f6:39:b0:d5:a3:81:5d:03:d0:ee:b8:f6:f8:
d9:fc:b9:e9:0f:ae:a7:7e:57:bb:f3:47:86:9c:6a:
86:a6:42:9e:40:39:a5:db:7d:38:8c:36:cc:f5:be:
f3:99:26:a3:58:a8:0a:59:5a:62:7c:30:06:1d:b7:
30:b6:91:a4:ea:a1:2c:14:c3:94:ea:03:f4:b0:da:
b9:63:82:a6:23:7e:cc:78:48:94:a6:30:a4:fc:16:
f5:7f:e0:eb:5d:d3:c3:64:f4:8f:b5:cf:22:3d:90:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:81:60:23:C6:9E:90:9C:7D:66:42:1C:4A:D3:A2:79:88:66:C7:51
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SYFgI8aekJx9ZkIcStOieYhmx1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.6.0/24
Signature Algorithm: sha256WithRSAEncryption
68:09:34:fa:26:28:4e:77:94:c3:6c:0f:aa:af:90:7d:88:18:
87:0c:da:11:54:60:c7:d0:ac:1c:99:5f:66:f0:de:f3:d3:5a:
79:0f:d7:de:71:14:0f:54:80:a2:97:40:c2:cd:77:c5:1f:b8:
5d:fb:82:2c:79:db:b6:90:ee:44:74:7f:30:43:9b:26:a5:a8:
75:d5:fc:a3:ac:46:97:53:ae:36:6a:93:43:e7:5e:6a:f3:25:
a6:b3:64:b6:26:26:3f:42:4c:9e:68:2b:98:30:8e:f8:40:35:
73:2f:e8:2d:21:a5:dc:91:2b:51:21:80:7f:4c:9f:69:90:d3:
e9:5b:87:68:32:fd:6e:4a:d7:2f:ac:2e:8d:8e:c8:0f:60:cc:
b8:c3:f8:83:c5:e2:4b:44:05:b6:fc:7a:81:bc:7b:1a:82:94:
9b:43:22:40:6e:0d:76:fd:2f:5d:7b:97:dd:f1:d3:69:7f:4c:
6a:12:e6:cb:28:57:94:21:32:b1:89:ce:4f:93:bb:15:d4:d0:
be:e4:cc:5b:37:d5:80:20:72:cb:ba:b8:b2:cf:c3:c9:ab:f4:
82:04:11:d0:9b:68:62:cd:a9:f1:ab:1a:26:fc:84:91:cf:aa:
a7:f1:79:ae:6d:27:9d:41:27:a7:05:05:bb:7f:58:08:db:e1:
92:3d:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:50:20 2026 by rpki-client