Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TLyvnm84tWh4Kh8gix_zuJHJSPI.roa
File: TLyvnm84tWh4Kh8gix_zuJHJSPI.roa (raw, json)
Hash identifier: fpgHM6HUPuWNdkbNaDYFgr6u6yV+V18XvMxGr5Wf9Fo=
Subject key identifier: 4C:BC:AF:9E:6F:38:B5:68:78:2A:1F:20:8B:1F:F3:B8:91:C9:48:F2
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A06E5C0C556F6A8A852BC35A1C16550A0E
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TLyvnm84tWh4Kh8gix_zuJHJSPI.roa
Signing time: Fri 04 Sep 2026 21:38:41 +0000
ROA not before: Fri 04 Sep 2026 21:38:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199863
IP address blocks: 82.163.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:5c:0c:55:6f:6a:8a:85:2b:c3:5a:1c:16:55:0a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 4 21:38:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cbcaf9e6f38b568782a1f208b1ff3b891c948f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:19:2e:d4:b5:be:2b:ec:45:d8:23:6a:0f:
a6:c9:20:5a:db:55:50:bb:a5:c3:ca:d3:49:ba:d9:
ad:44:13:11:72:4e:af:2a:73:08:b3:f9:5e:24:30:
a9:ba:25:d4:25:5d:b1:f1:c9:99:64:dc:f5:b9:74:
19:68:be:f3:20:c3:0f:a1:05:8b:a9:13:2d:c4:88:
c0:a8:33:5d:b3:12:77:37:69:97:cf:2b:7c:f1:8b:
51:30:c5:a3:05:cf:b7:d3:2d:d8:d7:5b:74:e6:c8:
e3:73:fe:14:d2:3b:fb:cc:f3:73:a1:60:18:9d:98:
fe:27:aa:71:2a:08:ea:f4:a2:2c:01:bf:57:6e:4c:
20:86:03:9b:b4:13:74:df:e0:29:01:a9:a4:c5:c2:
3f:30:c7:f6:42:91:70:4c:ad:01:4d:84:dd:41:bb:
35:a1:3d:cd:01:75:61:ab:30:7f:30:8b:d0:91:dc:
5c:ec:bf:00:78:06:71:76:1c:a8:98:04:90:8e:cd:
4f:cd:55:50:4b:9d:04:7c:e3:fe:d3:e8:0c:ad:b0:
27:12:d2:46:93:4e:9b:63:e9:ba:c7:7b:0a:96:bd:
82:07:ff:98:3f:85:37:e9:e3:86:e2:cc:cd:e0:47:
fb:40:f2:6d:f8:1e:f6:de:5c:dd:b2:67:52:dc:7c:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BC:AF:9E:6F:38:B5:68:78:2A:1F:20:8B:1F:F3:B8:91:C9:48:F2
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TLyvnm84tWh4Kh8gix_zuJHJSPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.8.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4a:c3:07:af:8b:71:51:fc:e4:6c:e3:79:5d:e1:47:72:cf:
00:9a:9f:e6:df:f5:b5:f5:08:63:65:48:c6:27:17:a5:ea:a6:
ef:87:51:7d:b6:b7:df:a1:61:72:5e:c8:21:31:33:fb:93:b6:
e2:be:e0:cd:54:ff:41:90:eb:2f:4d:a7:17:46:92:87:0d:31:
da:70:5f:b2:77:b4:cc:62:8e:5b:2e:e8:54:fc:71:db:cf:24:
67:3c:80:1b:c5:e3:54:c3:3e:2c:ee:c6:4b:c3:fe:69:2d:d5:
29:8d:32:3a:ec:9d:59:49:65:71:4c:3b:0b:f6:cb:62:c2:2a:
f4:7f:3e:a6:2c:78:c4:d4:b9:ba:e5:b4:8b:c6:6f:ac:59:ef:
b3:fc:be:4b:ac:78:7d:9e:a6:d0:c8:72:14:de:e7:37:06:c8:
25:fd:04:f1:67:f1:20:aa:ae:b8:6c:81:8c:ae:86:f3:a9:17:
b9:99:3a:3d:4c:34:12:46:32:8e:c2:c9:74:c9:7e:f2:7b:5f:
24:26:59:7b:a7:6e:18:b1:25:f3:bd:8b:37:de:e8:20:b8:38:
ac:99:4a:61:e2:d7:1a:d3:41:4d:f7:af:43:99:70:bf:e4:90:
8c:14:a5:62:e7:31:df:0d:1c:eb:f9:56:c9:73:81:ca:99:38:
61:82:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:50 2026 by rpki-client