Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ckkmkkIIOvCvzgf81CMrjjdFw9k.roa
File: ckkmkkIIOvCvzgf81CMrjjdFw9k.roa (raw, json)
Hash identifier: BYDDl8W5G7tDDg7OGjgpd7mcT0c9cg2YYRF6ypaAOQ0=
Subject key identifier: 72:49:26:92:42:08:3A:F0:AF:CE:07:FC:D4:23:2B:8E:37:45:C3:D9
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A05BF4550C2A05E79338A2A7951B6F59A8
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ckkmkkIIOvCvzgf81CMrjjdFw9k.roa
Signing time: Tue 01 Sep 2026 07:52:14 +0000
ROA not before: Tue 01 Sep 2026 07:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 79.99.147.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
82.153.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:f4:55:0c:2a:05:e7:93:38:a2:a7:95:1b:6f:59:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 1 07:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7249269242083af0afce07fcd4232b8e3745c3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:d9:e0:bf:22:94:c1:21:4c:b8:95:ea:d0:
d8:5a:b9:66:7f:79:d8:10:83:55:f8:98:55:79:33:
67:59:a5:4a:1c:64:d5:8f:20:a8:5f:cf:27:8c:fb:
16:3b:a2:8d:c6:d8:4a:32:d0:55:8d:cd:42:c6:0d:
f7:fa:6c:64:c6:03:df:86:22:18:1a:fc:83:bc:e4:
32:c8:1f:28:fe:db:3f:e4:99:1b:3b:da:8f:d6:00:
5d:e1:aa:a3:69:b5:37:05:32:1f:c8:d8:1c:35:cc:
40:be:ca:7b:42:e0:96:3b:40:d0:a8:09:6c:9f:98:
47:ce:df:6f:7d:8e:55:1f:95:fc:b0:a8:0f:9a:ca:
b1:65:d3:52:f9:9f:55:d5:05:37:8c:f2:1a:42:5a:
7a:4c:cb:78:ed:ce:42:0e:65:46:3d:27:c4:c5:a3:
9b:7f:b4:95:0c:7f:62:bd:dc:7c:6c:1e:23:0e:ee:
a4:f5:ca:46:48:9d:c0:f1:e8:19:e3:e6:11:4f:8b:
e4:9f:88:87:ac:93:35:9d:b7:13:da:3d:00:fc:cc:
2c:1c:33:c4:3b:d3:5d:3f:af:03:25:5e:5e:e1:93:
87:35:be:f7:46:43:ae:db:36:85:a1:58:b2:47:02:
bf:d5:ce:43:cc:61:ec:80:c8:3c:08:d2:ff:1e:37:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:49:26:92:42:08:3A:F0:AF:CE:07:FC:D4:23:2B:8E:37:45:C3:D9
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ckkmkkIIOvCvzgf81CMrjjdFw9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.147.0/24
82.153.66.0/24
82.153.120.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d5:9d:77:a7:ba:72:52:75:1a:2f:49:9c:32:f1:d5:6b:50:
aa:49:ad:ec:31:d8:56:61:52:b5:6b:d5:a5:85:e1:56:e1:f0:
79:2b:67:48:fd:d2:ab:2d:5b:a4:88:0f:5a:f9:70:b4:b9:35:
10:a6:5c:97:92:3b:a4:fb:f9:20:a1:96:ee:bf:a0:75:6f:72:
f7:a8:a1:f3:47:b0:3b:92:12:f9:8c:6b:a4:95:1b:07:6d:d3:
c5:6e:4c:c7:d5:5c:22:28:4c:08:02:c4:29:80:75:36:8a:71:
d2:ec:14:08:36:e2:37:a3:16:d0:b5:e7:16:6f:d8:60:31:7d:
d1:ae:dc:51:50:01:0f:34:54:0c:47:f5:f0:c1:3c:63:3e:61:
b1:47:60:f6:08:d3:22:fe:76:97:88:b0:3d:c1:44:62:6d:0e:
e8:a4:0c:0b:01:45:d6:01:06:f8:80:e1:3a:f5:08:53:03:85:
ce:2e:2f:8a:e5:38:1a:cd:e5:58:d0:13:3b:75:48:09:71:11:
98:cf:14:0c:50:9e:a8:af:6b:34:f5:50:78:b6:97:72:04:f7:
e5:ce:8d:2b:ca:7a:ac:43:04:10:af:c2:b1:20:7b:af:88:3f:
c8:ae:7c:51:18:1d:1e:cf:36:09:6a:ad:53:8a:a0:b3:33:5a:
da:fc:91:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:01:56 2026 by rpki-client