Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-Ghpllkl7isUcECjrqO1Acpw-40.roa
File: 1-Ghpllkl7isUcECjrqO1Acpw-40.roa (raw, json)
Hash identifier: i9FNEOWiGWeO8ReTU8l4Ys3SadJFLem0lQ29V1pjawc=
Subject key identifier: F8:68:69:96:59:25:EE:2B:14:70:40:A3:AE:A3:B5:01:CA:70:FB:8D
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0A5A6D27848D5D8C0A2B9B3BE164B7CF9
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-Ghpllkl7isUcECjrqO1Acpw-40.roa
Signing time: Tue 15 Sep 2026 15:19:28 +0000
ROA not before: Tue 15 Sep 2026 15:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 82.153.218.0/24 maxlen: 24
89.213.50.0/24 maxlen: 24
109.176.23.0/24 maxlen: 24
213.218.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:a6:d2:78:48:d5:d8:c0:a2:b9:b3:be:16:4b:7c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 15 15:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f86869965925ee2b147040a3aea3b501ca70fb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:1d:6c:d8:a3:f4:df:a3:58:ef:1e:17:a6:
45:34:f3:2b:72:15:2f:db:c5:5b:f8:78:76:70:5c:
66:44:a9:5c:67:a8:cf:e5:5f:73:1b:8d:cc:db:bd:
f5:3a:e8:f4:46:e1:f4:28:8e:1d:f7:77:d0:06:86:
4b:1e:e4:20:d3:d6:40:f6:42:56:ae:91:aa:a6:d2:
60:80:08:3f:78:f7:ff:22:16:ad:85:c7:a0:e3:3f:
bc:7a:3a:50:8f:03:d4:45:01:80:da:2d:8b:be:3b:
cf:63:6f:f8:f9:80:ff:c9:a2:4e:f8:48:9b:6f:5d:
df:50:d6:b3:36:28:35:10:a6:a1:51:e3:ef:68:26:
03:3f:88:e1:89:8e:c9:d0:0e:0d:da:9a:75:b3:a7:
62:c5:ce:98:ad:fe:b9:89:be:20:9f:8a:d4:03:bf:
e8:5b:38:03:b4:9f:61:4a:cd:a4:36:50:c2:71:12:
73:a1:cb:e8:9d:da:1d:f3:f9:a9:06:48:b8:ff:e4:
ce:f3:39:78:a5:45:6f:b2:98:78:08:4b:50:b5:f4:
93:e1:b7:84:b3:f0:8b:9e:8d:50:7c:1b:cb:78:fc:
f4:a5:5f:e7:03:77:7b:16:75:45:b9:0a:be:cd:1c:
f0:4d:0a:13:3e:08:20:08:ad:32:05:01:b3:47:ff:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:68:69:96:59:25:EE:2B:14:70:40:A3:AE:A3:B5:01:CA:70:FB:8D
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-Ghpllkl7isUcECjrqO1Acpw-40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.218.0/24
89.213.50.0/24
109.176.23.0/24
213.218.245.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5b:5c:1c:b5:a0:64:60:65:04:ef:fb:c0:ac:55:2b:a7:71:
7b:8f:9c:db:22:ae:f5:5d:35:59:7e:2d:da:93:64:dd:d4:c9:
9e:03:9d:6d:51:f8:3d:7e:6a:9b:79:19:93:9a:f1:f4:47:e1:
ef:d4:82:85:cf:ae:d5:2d:ee:b1:be:e6:49:b8:3d:5d:75:9c:
b8:4d:ee:06:c5:49:b8:8c:ab:2b:17:d5:6f:2a:0b:22:29:0d:
d2:02:1d:3e:c8:8f:ee:e7:fd:30:12:1d:b7:bb:e0:e3:68:98:
b5:e4:76:bc:be:0f:0a:e8:6f:28:c7:8a:9a:0c:58:bd:4b:de:
0e:b0:c4:d4:2f:57:bf:12:ba:04:46:aa:16:a9:61:9a:30:29:
49:6a:cd:c7:38:26:7c:99:82:c6:e3:34:26:e6:5e:6e:83:b8:
84:74:43:12:22:ee:c0:a5:e0:b7:92:8b:fa:c3:d1:b5:99:03:
89:7b:17:38:e9:3c:07:1b:c0:f2:f2:c4:62:40:13:72:6b:8b:
55:e0:96:b5:53:ea:6a:d3:75:b2:55:bc:f2:4a:ed:aa:05:b2:
6a:42:b3:a6:9d:8a:e2:37:d4:34:25:ad:0e:7c:f8:37:24:c1:
f5:df:80:50:6b:5b:f1:dc:4e:20:b8:2a:36:7a:c5:c2:bc:13:
18:64:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:46 2026 by rpki-client