Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/W_zaTjrsoyp4ev45KUVD9FGw1u0.roa
File: W_zaTjrsoyp4ev45KUVD9FGw1u0.roa (raw, json)
Hash identifier: GWhxvSz8S0y0KOrdomOIjQfb5vC3fUg4bRDd2gLb8mw=
Subject key identifier: 5B:FC:DA:4E:3A:EC:A3:2A:78:7A:FE:39:29:45:43:F4:51:B0:D6:ED
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A1534DA38060993BCE64DBF7085A80B41C
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/W_zaTjrsoyp4ev45KUVD9FGw1u0.roa
Signing time: Mon 19 Oct 2026 08:35:59 +0000
ROA not before: Mon 19 Oct 2026 08:35:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 80.240.93.0/24 maxlen: 24
82.152.217.0/24 maxlen: 24
82.153.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:4d:a3:80:60:99:3b:ce:64:db:f7:08:5a:80:b4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 19 08:35:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bfcda4e3aeca32a787afe39294543f451b0d6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:08:6a:1d:c2:a8:ce:d0:f5:7f:5b:f6:ae:da:
19:1f:f1:a1:00:54:d4:de:37:c9:73:9c:32:c9:65:
bc:18:50:c7:f5:e9:22:84:8d:2a:98:a2:86:19:8e:
ea:35:b6:22:76:dc:d7:46:f5:ef:fa:7f:5e:c9:90:
ce:b0:f7:f7:70:92:60:d4:b9:da:e4:89:9a:cb:ec:
c1:94:18:6c:48:1b:85:16:83:30:14:a0:9a:8b:ba:
c0:ac:8e:ff:8a:41:8a:22:11:12:6d:62:c5:2d:c1:
30:34:69:23:ae:3e:c7:dd:de:87:dc:d8:b8:38:b8:
c0:59:53:64:d5:7a:d4:1c:de:31:49:75:1e:25:aa:
7e:95:1d:6a:72:7b:ee:16:3c:35:97:83:0f:3b:b5:
cf:0b:4d:ea:ee:69:d2:92:78:67:42:b5:20:cd:b8:
1d:0a:85:02:f4:d2:66:88:9a:61:a6:f6:92:06:00:
74:a0:1d:14:d7:da:7d:af:68:a5:c3:b4:07:a5:d5:
e7:3d:3c:bd:b7:58:53:ad:6b:4e:26:af:11:87:8d:
34:59:7f:8c:cd:e2:50:1b:67:a6:89:04:b4:1d:c7:
88:d3:81:7d:e0:4e:47:55:1a:3d:c3:5d:ac:ac:52:
31:83:e2:93:b7:68:7d:36:f6:0a:3d:dc:6b:e9:77:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FC:DA:4E:3A:EC:A3:2A:78:7A:FE:39:29:45:43:F4:51:B0:D6:ED
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/W_zaTjrsoyp4ev45KUVD9FGw1u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.93.0/24
82.152.217.0/24
82.153.184.0/24
Signature Algorithm: sha256WithRSAEncryption
24:da:f3:e1:21:5c:29:79:fd:0a:9c:de:c6:4f:09:62:9f:eb:
e7:5c:0e:ad:e2:6f:ae:08:83:0b:98:b0:6d:1e:6f:84:ea:81:
0d:ce:2e:6c:63:33:cb:13:33:3c:36:72:bc:84:46:c9:25:ee:
ed:f7:68:f7:3f:d2:48:f1:b2:08:bf:1e:10:9c:f9:ea:e3:3f:
a2:db:db:79:04:f0:41:95:03:86:d1:6e:d4:95:48:41:3b:84:
d3:81:38:59:24:c8:d3:d4:70:2e:c9:1a:dd:25:16:2b:59:f2:
22:a2:28:63:b2:2e:5f:9d:bf:93:54:0a:e9:f4:b7:fd:9f:86:
26:a1:44:d4:46:af:b8:c1:bf:aa:e5:d1:13:e4:9e:e1:55:f7:
70:31:61:4b:91:42:de:30:f0:df:b0:f6:e3:42:0e:ed:61:03:
63:59:a9:57:d9:bc:9c:0f:6b:f4:7b:1a:f3:7a:45:bf:01:f5:
76:75:23:62:cd:b1:1e:c4:c1:ae:5f:bf:50:96:90:cc:9f:e1:
08:00:4e:5a:f9:27:b1:d1:29:87:f7:99:25:71:67:0f:e6:56:
b4:03:d3:7c:2d:51:52:bc:0c:08:c6:3f:30:c9:84:37:fb:94:
65:7a:0b:8b:5a:63:20:4e:29:85:7d:81:2b:88:49:14:7e:ed:
22:6d:f8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:09 2026 by rpki-client