Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vA9aDr4NhFk3G__9RCxTWfS8Ew8.roa
File: vA9aDr4NhFk3G__9RCxTWfS8Ew8.roa (raw, json)
Hash identifier: yo+gofM5g1Zqmkpr2WAKdcXbvVv8aP+cMmgkydLZESg=
Subject key identifier: BC:0F:5A:0E:BE:0D:84:59:37:1B:FF:FD:44:2C:53:59:F4:BC:13:0F
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0C2D191ABD29E7B84A2C25A53B3B44703
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vA9aDr4NhFk3G__9RCxTWfS8Ew8.roa
Signing time: Mon 21 Sep 2026 07:15:09 +0000
ROA not before: Mon 21 Sep 2026 07:15:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 82.152.223.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:d1:91:ab:d2:9e:7b:84:a2:c2:5a:53:b3:b4:47:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 21 07:15:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc0f5a0ebe0d8459371bfffd442c5359f4bc130f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fd:69:2f:76:41:f5:32:c1:21:ff:0e:4f:d7:
fb:01:21:c2:26:ad:24:ea:64:b7:69:c1:f2:6e:18:
1a:09:d4:d7:85:e9:83:3a:a0:06:f7:5f:46:4b:41:
00:a5:84:5e:9e:f6:fd:f8:54:d1:8e:d9:90:97:24:
e5:a9:61:22:f2:ca:97:18:8b:81:d9:23:16:60:c2:
47:3e:ad:eb:fc:b8:0f:67:59:31:37:fe:47:3d:73:
cd:60:7d:30:f1:42:b6:2c:7b:c3:94:4b:2b:6e:ae:
d8:61:c1:e5:22:ce:ba:77:52:66:2c:47:09:af:cb:
d6:89:6b:ec:85:2d:b8:27:f5:62:d1:f3:c1:de:ce:
c4:f0:5f:c9:b1:ac:d9:73:b1:e1:45:af:6d:86:12:
36:46:bf:9d:c1:5e:a7:87:77:1a:6a:00:ae:fa:fc:
cc:0b:54:88:b9:9b:32:42:2b:e4:43:4a:41:1c:d7:
1a:e6:94:38:e9:66:ed:3f:c0:2e:5f:91:0a:ef:74:
41:8b:c5:c5:70:5d:cf:a5:41:d5:78:44:c3:57:b1:
68:42:59:0c:04:0c:15:d9:a1:85:21:15:19:4a:2b:
89:eb:1f:87:d3:8f:8d:f7:a4:15:15:c9:60:60:2f:
bf:25:a0:67:9d:29:98:0f:a6:d6:8b:c0:51:a3:35:
9f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0F:5A:0E:BE:0D:84:59:37:1B:FF:FD:44:2C:53:59:F4:BC:13:0F
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vA9aDr4NhFk3G__9RCxTWfS8Ew8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.223.0/24
213.130.137.0/24
Signature Algorithm: sha256WithRSAEncryption
64:fc:37:ba:72:c4:19:26:aa:c6:0c:3c:78:09:8d:f9:c8:b5:
bb:7c:34:21:23:2e:8d:b0:3f:4f:93:aa:81:30:d2:74:07:d7:
1b:92:3f:4d:de:d2:a7:1f:7a:e4:9e:01:04:b4:e5:c0:0e:0b:
4b:5d:5e:2e:91:16:d5:c4:b5:96:43:d1:60:45:8e:90:1c:f2:
8a:11:ad:66:3c:9b:64:ca:60:5f:00:0b:17:74:12:56:72:2d:
8a:36:99:3a:fd:2b:fb:c2:30:56:d9:bf:f3:de:29:15:00:02:
7d:14:06:57:c0:f8:57:c6:1d:6a:67:49:47:aa:18:90:89:a9:
87:f1:a1:0d:1a:80:15:a8:76:61:d5:b6:5f:75:29:ca:87:97:
df:b8:0c:25:ba:c3:c7:2f:0f:fe:7d:15:76:2a:a0:9f:7a:a0:
ab:77:cb:27:c8:61:dc:be:d3:42:72:70:1f:7d:5b:98:19:01:
41:9e:06:29:17:bc:56:5c:46:bb:03:ae:3d:77:07:a7:ae:b8:
84:a9:e8:d9:19:7e:d2:14:9a:0d:62:60:0d:1a:a7:02:23:3b:
b5:1f:7d:f9:d6:d7:72:4f:2d:01:5b:cb:7c:c8:19:40:dd:75:
93:a0:28:b7:da:02:f3:63:05:b6:a8:51:f1:fd:bd:5c:53:af:
f3:4e:81:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:30 2026 by rpki-client