Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bWw0w29F_XweC8_XNaRhkZZ1S6E.roa
File: bWw0w29F_XweC8_XNaRhkZZ1S6E.roa (raw, json)
Hash identifier: jO4HpBM8yQ1on0rFp36VpMeBAPUrRPrG3o+2OJtoHI0=
Subject key identifier: 6D:6C:34:C3:6F:45:FD:7C:1E:0B:CF:D7:35:A4:61:91:96:75:4B:A1
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A07AAEF6F9848477D4A8960E88FDFD3C61
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bWw0w29F_XweC8_XNaRhkZZ1S6E.roa
Signing time: Mon 07 Sep 2026 07:04:41 +0000
ROA not before: Mon 07 Sep 2026 07:04:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219289
IP address blocks: 82.152.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:ae:f6:f9:84:84:77:d4:a8:96:0e:88:fd:fd:3c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 7 07:04:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d6c34c36f45fd7c1e0bcfd735a4619196754ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:24:88:b5:50:e8:b1:cc:50:e5:e8:e4:60:
0c:90:06:e4:ec:66:ea:a6:0d:30:14:a0:72:45:64:
cd:a2:3f:a8:57:c3:99:64:a6:f4:a5:c2:9b:f1:d8:
2a:c7:03:41:b5:4b:3b:80:e7:82:10:f5:49:47:b1:
97:0e:a8:78:c1:24:1c:ae:7c:ad:a0:60:82:2f:a2:
62:86:0d:aa:04:a0:2b:1f:2b:54:de:c2:1e:c9:7a:
45:e4:77:a5:da:7d:6a:4a:c6:54:1c:f9:a5:26:ac:
3b:a4:81:33:e9:3e:a0:4f:45:a1:b8:f8:b0:ae:0a:
97:a5:78:48:ae:07:fd:db:dc:79:36:df:7c:9f:dc:
d3:a0:9f:48:2f:5e:02:7f:bb:e3:c8:90:b0:52:bb:
a4:82:9a:b2:bd:f1:ea:d1:40:67:fd:bc:fa:6e:43:
c0:1e:f5:06:58:43:46:e5:73:86:c9:77:ca:2c:fa:
a3:ee:a2:12:78:81:b9:98:45:ca:69:e0:40:39:89:
03:29:ff:9a:78:29:48:5f:f6:90:e0:0f:1d:6e:6d:
06:82:f0:58:92:04:4f:eb:a0:df:9e:52:49:a0:54:
ba:a2:ef:2c:d5:c3:0d:e4:1c:d6:6c:96:73:0d:6d:
40:e1:50:2e:c9:0d:c5:64:8e:32:3c:61:6d:41:1d:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6C:34:C3:6F:45:FD:7C:1E:0B:CF:D7:35:A4:61:91:96:75:4B:A1
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bWw0w29F_XweC8_XNaRhkZZ1S6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:45:fa:75:4a:34:db:d1:25:3a:15:fe:3a:c4:5d:fe:c3:16:
bd:74:eb:5e:08:d6:bc:cd:fa:c2:9c:ef:47:78:4a:83:0b:f3:
b7:66:4e:83:ec:6e:a6:4e:34:83:cf:86:48:f9:2b:d7:2a:c5:
d4:5f:c9:d0:2d:d1:ba:d7:10:9e:f2:78:bb:67:11:4d:1a:8f:
36:0a:ed:26:fd:81:f5:1d:8c:64:06:33:24:57:69:3b:0f:bf:
62:e8:5a:a3:95:4b:ab:d6:5f:5c:11:6a:d6:96:f8:60:1b:08:
a4:d6:99:87:c2:b2:e9:d8:25:5a:69:fb:14:db:21:c7:7e:0a:
f8:38:0c:44:a4:34:4b:a9:99:19:63:a6:85:eb:49:de:3c:a2:
4a:f6:49:34:95:e1:74:ba:b0:99:09:8b:2c:78:bd:ab:41:19:
27:72:a4:26:3f:f2:88:21:44:a9:1e:87:55:0d:33:44:35:44:
87:a4:e7:40:71:40:5b:71:9b:26:01:20:9c:ac:db:62:8d:a0:
89:4f:d5:f8:cd:65:25:7c:9f:70:ba:23:30:03:6a:33:4b:cf:
08:a4:e3:57:7c:5c:7f:0e:c6:2e:c1:ef:a5:12:40:29:00:eb:
24:26:3d:08:7a:6c:f4:4c:5c:24:1c:46:8e:3d:ef:d4:f8:19:
35:2f:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:12:43 2026 by rpki-client