Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3RlSJo89gpZuVnAbzMjhi6sQ3Qw.roa
File: 3RlSJo89gpZuVnAbzMjhi6sQ3Qw.roa (raw, json)
Hash identifier: De1g/P09Vozkxcj9S+GgToLhrfL6qcOgLXAuASSVNgk=
Subject key identifier: DD:19:52:26:8F:3D:82:96:6E:56:70:1B:CC:C8:E1:8B:AB:10:DD:0C
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A162B7A028EF0B2EAA9A60FCA8765DB614
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3RlSJo89gpZuVnAbzMjhi6sQ3Qw.roa
Signing time: Thu 22 Oct 2026 08:26:03 +0000
ROA not before: Thu 22 Oct 2026 08:26:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274447
IP address blocks: 82.152.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:b7:a0:28:ef:0b:2e:aa:9a:60:fc:a8:76:5d:b6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 22 08:26:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd1952268f3d82966e56701bccc8e18bab10dd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d7:94:98:a7:e9:1a:91:06:3f:94:7f:3b:5a:
69:34:d5:13:79:75:b6:60:92:33:5e:cb:81:c5:ac:
42:a1:07:ea:97:e6:d8:22:cb:36:c6:2a:bd:ee:1c:
4d:9c:97:c0:fc:14:84:80:b9:39:f3:4d:8f:2c:d8:
ae:4a:34:67:5b:20:06:b9:3d:5e:4c:44:74:44:94:
3e:fc:0c:8d:b8:7c:3b:2c:2d:ef:d0:5f:9d:29:c3:
29:cb:8f:44:46:02:45:a7:0f:6a:61:68:53:f8:72:
9f:7c:dc:69:37:ab:de:10:26:7b:72:23:0e:fb:35:
35:cc:d9:c1:ed:21:a3:95:81:e5:2c:13:06:17:21:
6f:15:f2:88:62:97:a0:0a:15:46:3b:ef:66:ad:5b:
f7:df:e1:e2:ff:69:f9:8c:6f:11:be:21:67:1d:df:
54:01:e9:f8:66:8c:15:89:68:d8:53:c7:fe:5f:a7:
ff:c8:c9:71:65:91:09:99:b2:9c:99:d4:7f:0d:53:
7d:ba:29:25:72:9b:a3:69:37:d2:a1:28:e4:a3:5c:
70:e6:a5:b3:3f:6a:f4:38:5c:e1:ee:b8:46:f6:c7:
f9:4e:ba:96:79:06:80:b0:ef:96:78:2d:d4:ff:79:
f0:f9:52:87:f4:70:92:e0:d1:7a:9a:10:ea:3d:be:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:19:52:26:8F:3D:82:96:6E:56:70:1B:CC:C8:E1:8B:AB:10:DD:0C
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3RlSJo89gpZuVnAbzMjhi6sQ3Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.138.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f0:e6:8a:84:3e:18:23:c0:cf:17:76:2d:f6:e7:54:2c:19:
d2:29:ec:eb:be:62:7d:c0:fc:86:c1:03:67:2e:2b:40:97:65:
0e:ef:94:42:a3:f5:f1:1e:49:f1:68:83:42:68:c0:df:90:5b:
61:d5:af:15:57:06:c9:24:ea:ed:3f:7f:72:5f:75:17:1c:b8:
20:9c:05:ac:a5:be:ab:7b:52:8f:2e:13:46:01:d5:85:4e:3c:
7b:d1:e9:32:ee:e8:6c:09:c1:2b:ee:ab:6f:4f:36:3d:ba:47:
a9:7c:ce:45:31:3c:71:8c:64:0f:ae:72:59:cf:8a:fb:20:b5:
7d:0f:92:fa:dd:31:f1:5f:62:7b:1d:80:dc:fe:f0:dc:e2:2a:
b4:52:7f:5a:66:94:51:1e:7b:93:0e:8d:37:ff:bc:99:42:4b:
17:93:af:96:c3:e9:19:53:b3:c8:96:95:f2:ef:41:cb:d0:a8:
51:c6:f3:9c:d3:14:ce:ee:fc:6f:1c:3f:d9:fb:7a:d3:34:04:
eb:2f:a2:d0:db:d0:1c:1d:09:4b:2f:17:88:11:39:54:40:58:
17:f1:01:a1:91:a7:0a:07:d1:07:91:06:9a:96:a2:91:28:81:
dd:14:10:9f:d8:2f:12:c9:b7:c9:d4:36:47:43:0d:56:bc:5c:
5e:00:4d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:17:58 2026 by rpki-client