Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_fUrBm7qQpdzuyJ0kuZsIh1WBqA.roa
File: _fUrBm7qQpdzuyJ0kuZsIh1WBqA.roa (raw, json)
Hash identifier: oMQGPIQVZ6wkDZwDAIEZKrFI04OcytK3hobpWKv1G6E=
Subject key identifier: FD:F5:2B:06:6E:EA:42:97:73:BB:22:74:92:E6:6C:22:1D:56:06:A0
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A06B826185E4830405F6492C9ED814D857
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_fUrBm7qQpdzuyJ0kuZsIh1WBqA.roa
Signing time: Fri 04 Sep 2026 08:21:41 +0000
ROA not before: Fri 04 Sep 2026 08:21:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399631
IP address blocks: 82.153.97.0/24 maxlen: 24
82.153.102.0/24 maxlen: 24
82.153.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:82:61:85:e4:83:04:05:f6:49:2c:9e:d8:14:d8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 4 08:21:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdf52b066eea429773bb227492e66c221d5606a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:a7:14:41:e5:84:87:0b:ed:6a:3c:ab:23:
6f:2f:88:be:28:93:c4:0a:1b:71:cf:98:68:11:4d:
8a:0f:fc:20:8b:6e:7e:f0:6e:33:87:e6:20:54:f1:
25:a4:5e:3c:38:a4:fa:f1:8b:03:ad:d1:90:25:b3:
71:c6:77:00:43:e2:b0:70:08:f8:1f:df:37:2f:c7:
27:e0:61:00:97:e5:8c:ac:cd:50:fe:2b:a8:56:39:
3a:bd:ab:b2:41:6c:75:42:8f:44:a6:4d:74:a2:31:
fc:5d:de:89:28:f8:98:3e:29:1d:75:c0:c8:80:b5:
58:d5:e4:2a:60:9f:6c:cb:74:be:ae:a3:64:f7:5a:
48:5e:ce:fa:6a:f0:22:96:ae:b8:05:cc:c9:f1:51:
84:c5:7d:95:f5:13:21:d8:19:ed:7f:44:61:0d:09:
95:88:5d:e9:f4:58:ba:6e:70:a6:14:36:ca:1c:d7:
8f:41:5c:7f:3c:56:6e:57:f1:b9:08:89:63:78:1a:
03:ef:ed:ab:30:1f:73:27:61:aa:4f:99:69:59:86:
f0:c9:63:9a:14:f4:b1:d3:6c:6c:81:c9:1c:c1:e4:
bb:fb:a8:14:c7:c3:e2:ca:3c:e0:7a:5d:40:a4:ee:
de:51:4d:e1:48:d4:6b:b6:03:90:a7:0b:5e:75:f4:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F5:2B:06:6E:EA:42:97:73:BB:22:74:92:E6:6C:22:1D:56:06:A0
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_fUrBm7qQpdzuyJ0kuZsIh1WBqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.97.0/24
82.153.102.0/24
82.153.109.0/24
Signature Algorithm: sha256WithRSAEncryption
13:77:39:f2:ab:82:44:73:bf:36:04:ba:e7:93:54:09:8f:2c:
a5:6c:22:e2:d2:65:4c:bd:cb:0b:d3:7c:00:16:3e:bd:df:15:
f4:8d:41:eb:36:dd:a2:69:1b:5c:de:7c:23:19:b0:c9:40:f7:
e4:b9:ad:3d:e1:84:f8:b2:2d:7e:89:06:03:f7:68:b9:78:76:
98:fd:fb:90:b7:25:0c:5d:15:6e:a8:1a:cd:3a:08:f7:a8:90:
ae:17:37:7c:c4:1a:65:1a:c3:d8:86:c2:42:1e:df:ef:41:31:
a2:04:2e:b4:1d:0f:82:79:4a:3d:4f:45:1f:d8:1b:1a:08:a2:
98:ee:51:77:c1:a9:63:36:aa:e2:26:0e:73:6f:f0:52:83:3e:
c6:37:47:ac:82:e2:b2:be:92:ea:c0:3a:21:fd:c1:a3:54:74:
78:e7:5e:d1:37:ce:b7:00:ac:0c:9f:39:cf:5c:fa:ad:44:66:
23:42:bb:24:85:cb:65:e9:8e:82:d1:79:72:fe:21:31:47:35:
64:c4:ab:d6:cc:5a:aa:c2:39:dc:71:78:4a:97:50:c3:68:e5:
15:a0:22:4f:fb:93:38:4d:53:b2:ec:cc:7d:cb:e2:a7:f4:9d:
7d:b8:95:d6:23:cb:2a:e3:3f:61:c3:22:b9:32:c1:83:2b:b1:
9c:0c:89:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:48:36 2026 by rpki-client