Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bMXy8KyUKB7P1NRqCMNr-D9nvjo.roa
File: bMXy8KyUKB7P1NRqCMNr-D9nvjo.roa (raw, json)
Hash identifier: /1izPXy5T6C38UW4dXjhqZOvOvNwQ/9A20lDI8J0jOs=
Subject key identifier: 6C:C5:F2:F0:AC:94:28:1E:CF:D4:D4:6A:08:C3:6B:F8:3F:67:BE:3A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FA2704881243F258C6F7FC7E96DB7CFDB
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bMXy8KyUKB7P1NRqCMNr-D9nvjo.roa
Signing time: Mon 27 Jul 2026 07:18:15 +0000
ROA not before: Mon 27 Jul 2026 07:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 82.163.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:70:48:81:24:3f:25:8c:6f:7f:c7:e9:6d:b7:cf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 27 07:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cc5f2f0ac94281ecfd4d46a08c36bf83f67be3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:a8:ec:8f:ea:cf:75:e8:39:f7:75:61:71:
25:32:e4:a8:ca:67:94:f8:90:e4:da:77:b6:1c:29:
e4:a3:7c:c2:2e:85:a1:26:bf:30:8f:d9:5e:1f:82:
ed:1e:4c:a0:09:1c:f8:51:d7:c6:df:a3:c1:99:63:
1c:6f:ec:3a:76:ae:46:9e:d1:bc:18:bd:f2:83:cd:
80:85:d7:0b:25:92:4f:d9:b9:6e:3a:7d:89:cc:1b:
97:d2:06:73:90:34:13:b4:b4:ac:3d:b8:be:00:a6:
2e:f3:f6:23:6a:2b:dd:1d:37:0c:1d:22:32:59:d3:
2c:e7:b9:17:8f:99:ef:d5:ab:85:b8:ce:87:45:af:
63:50:58:4d:08:fe:4e:a7:f5:3d:f2:2e:4f:6a:e9:
2c:3d:0e:f2:ad:f1:99:8f:87:ce:fd:de:d9:c4:a1:
f6:94:8a:25:37:b6:24:78:d2:f9:64:b4:4e:20:72:
d6:4b:8f:4d:60:ce:30:2a:a2:6a:3f:59:16:77:9f:
bc:25:7c:4d:4b:83:fe:ea:9f:f8:6b:5a:a4:c6:db:
5a:8c:8d:4c:2a:e7:10:25:90:f2:09:1b:01:db:d1:
fc:79:c4:5a:f1:ea:95:9c:7b:79:56:00:25:9f:ea:
e5:e4:25:c0:7f:a2:19:d1:19:ea:66:bf:dd:47:5a:
e1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C5:F2:F0:AC:94:28:1E:CF:D4:D4:6A:08:C3:6B:F8:3F:67:BE:3A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bMXy8KyUKB7P1NRqCMNr-D9nvjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.16.0/24
Signature Algorithm: sha256WithRSAEncryption
23:67:a9:b5:da:8c:4a:56:fc:86:d7:db:a8:e5:01:27:19:90:
51:b6:cd:87:12:55:01:50:17:df:e5:f4:b9:96:f0:b4:f5:6a:
84:5b:64:19:f7:bc:d8:13:e8:6a:c5:13:11:55:06:91:8e:22:
aa:7c:75:0f:55:81:33:fe:79:c9:2c:49:58:a4:1e:e4:4e:c5:
ce:53:b0:29:93:8e:e7:6a:77:c2:5d:d7:86:db:53:9f:84:d6:
ad:43:40:12:35:8d:76:84:7e:ac:cc:4e:d4:e9:85:8f:3d:0d:
6a:5c:d8:f6:7f:a8:86:ef:e4:d4:95:23:b4:24:3b:6f:26:d5:
74:33:a5:00:f0:bb:57:7b:a7:cf:1e:42:d4:09:f2:8a:99:29:
38:26:f2:56:18:1d:67:bc:81:b8:d7:40:bf:7a:b6:eb:4b:37:
df:d2:8d:67:b4:cc:db:71:47:d7:ad:83:ba:b1:5d:b7:54:72:
3d:12:60:07:dd:ea:f4:2a:76:af:f3:52:c6:ac:e1:3a:d4:c5:
5c:eb:e3:4b:bf:25:35:e7:a7:cc:c7:23:9a:2e:c6:ce:66:e1:
93:18:a4:c3:17:3d:41:f5:ff:67:0e:98:88:9e:b9:c3:aa:88:
89:49:2b:1c:4d:7c:e6:18:4b:82:ff:92:16:c5:29:93:0d:b6:
e0:6a:90:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:44:22 2026 by rpki-client