Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zkYjq1-x3ohOOZjU7b5IRKNp-ro.roa
File: zkYjq1-x3ohOOZjU7b5IRKNp-ro.roa (raw, json)
Hash identifier: oVJiK+C4k8HVsLXEchk+GT0d0nnFGMvWYNgfjCo3bNo=
Subject key identifier: CE:46:23:AB:5F:B1:DE:88:4E:39:98:D4:ED:BE:48:44:A3:69:FA:BA
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F7E84BAC96DEF1E3E9E1BD028F6CD0526
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zkYjq1-x3ohOOZjU7b5IRKNp-ro.roa
Signing time: Mon 20 Jul 2026 07:54:15 +0000
ROA not before: Mon 20 Jul 2026 07:54:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213078
IP address blocks: 82.153.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:84:ba:c9:6d:ef:1e:3e:9e:1b:d0:28:f6:cd:05:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 20 07:54:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce4623ab5fb1de884e3998d4edbe4844a369faba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:11:c6:77:0c:9a:3c:53:9c:dd:93:96:d1:
db:03:ab:3b:14:8b:21:aa:0c:3c:74:e9:30:eb:b2:
36:4f:b9:f3:bc:9c:4b:67:82:f1:92:19:db:94:fb:
f9:09:50:6b:21:7a:4c:e6:d6:af:f2:d6:8a:d4:38:
1f:4b:89:6b:e7:d8:bb:be:55:d1:1c:20:97:c5:07:
cf:48:c0:01:24:34:8a:1e:fd:72:6f:95:49:b9:34:
db:07:2e:c5:5c:56:7e:47:82:c2:43:8c:b0:60:c1:
f0:95:94:42:66:5e:e1:03:b1:c9:fb:9f:75:1d:09:
90:9b:f1:c8:7c:36:1f:f8:c1:21:8d:56:6d:ba:8c:
5c:ac:c9:54:af:bb:33:fc:d8:82:10:d6:26:52:72:
43:f7:ce:30:64:43:65:a8:5c:50:34:78:f3:ce:79:
8b:e2:20:42:e3:30:5d:68:45:d1:2c:14:a1:2b:58:
b0:65:cd:53:c3:60:0b:25:1d:e7:a0:29:bc:47:d6:
0c:dc:fa:88:05:a9:ff:c7:d2:6c:3a:1d:fa:6b:aa:
d7:8f:88:83:95:e9:30:85:dd:ff:75:c6:4c:ba:60:
bc:ca:e8:84:ea:30:67:95:49:a9:0f:95:e9:33:16:
45:81:f4:fa:ba:ad:cc:bd:09:86:e7:ed:2d:0a:dd:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:46:23:AB:5F:B1:DE:88:4E:39:98:D4:ED:BE:48:44:A3:69:FA:BA
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zkYjq1-x3ohOOZjU7b5IRKNp-ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.64.0/24
Signature Algorithm: sha256WithRSAEncryption
64:2c:aa:6b:d5:ff:6c:db:20:4e:ac:09:fb:43:6f:f1:1b:a0:
48:38:19:fd:29:48:cc:8b:c1:a1:e6:85:b8:03:50:94:b9:bc:
e5:d5:a9:63:c6:3c:82:5a:3d:e7:0f:0d:c8:65:12:33:fa:f9:
66:df:37:05:0f:25:43:69:04:3c:bb:b4:11:07:f4:f9:dd:10:
c1:19:2e:1c:9a:50:f5:8e:ed:d1:aa:e7:77:03:e9:f1:f4:16:
f2:ee:53:bd:af:81:0c:61:59:3b:4f:a1:54:c7:a7:73:fe:d8:
a5:72:ee:2f:05:16:94:84:54:36:2d:71:6c:cc:c7:63:2e:c4:
f2:32:91:cb:aa:5a:4c:97:31:63:24:e7:d5:a8:76:70:da:35:
84:50:71:ed:15:33:be:f3:ef:c0:8d:1d:2a:d8:da:1b:dc:85:
e9:63:2f:5c:77:d0:22:8f:42:49:fd:4c:8b:e9:8a:c4:cd:c6:
90:99:ef:42:4a:d8:22:cf:48:5a:76:59:d2:98:3b:2d:8e:69:
bf:f0:51:5c:26:87:73:0b:3d:bf:7b:14:58:49:05:68:09:ed:
f6:82:03:31:f9:ae:ea:ea:e5:3b:68:5f:48:e5:09:a0:f2:05:
8b:74:ae:a1:1e:a5:e8:cf:1c:43:0a:b1:7b:30:82:28:ce:d8:
19:1b:4c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:51 2026 by rpki-client