Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o7r2-ubqAHV1iQPb9I62m1kQgQU.roa
File: o7r2-ubqAHV1iQPb9I62m1kQgQU.roa (raw, json)
Hash identifier: SiDd2iyDZgOGtL2lfX78ptRqos/WyG5mYd/VDm588vc=
Subject key identifier: A3:BA:F6:FA:E6:EA:00:75:75:89:03:DB:F4:8E:B6:9B:59:10:81:05
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A05BF45595A6D787FDCF997D598A4F616F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o7r2-ubqAHV1iQPb9I62m1kQgQU.roa
Signing time: Tue 01 Sep 2026 07:52:14 +0000
ROA not before: Tue 01 Sep 2026 07:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 82.152.60.0/24 maxlen: 24
82.152.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:f4:55:95:a6:d7:87:fd:cf:99:7d:59:8a:4f:61:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 1 07:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3baf6fae6ea0075758903dbf48eb69b59108105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:6a:2b:78:28:53:67:ee:0e:d8:aa:82:4e:
7f:24:fe:0f:ff:7d:ca:1f:48:eb:14:ed:08:27:74:
32:a5:97:45:33:bd:3f:51:5a:4e:82:be:2f:e8:3a:
62:a0:77:ef:cc:46:af:08:06:b9:89:53:1f:c0:11:
a5:ab:7b:47:40:97:c9:99:65:f4:40:3a:19:d6:f8:
45:4d:0b:84:18:b5:75:8c:af:26:05:19:f2:aa:a4:
13:22:2e:e1:61:b9:d5:ff:a3:a1:97:fb:f9:32:f1:
b5:ae:58:46:e5:51:32:67:db:db:80:e3:60:de:c3:
bd:54:e9:69:5d:04:01:9c:87:57:f9:42:f7:5c:11:
fa:45:bf:54:99:96:55:5c:04:b6:2a:c6:94:16:58:
74:f4:02:11:f8:c4:ec:78:0f:70:76:72:09:8d:65:
8c:93:0a:d0:04:5f:b3:b0:69:6b:ab:ec:c0:07:ad:
62:65:7a:04:95:7f:3d:0b:43:59:f2:0b:3c:f9:8a:
89:77:e7:6d:fb:5d:22:bc:7f:b2:22:42:c1:85:f2:
33:2c:6b:6e:59:3c:3f:3f:fb:fc:0d:0a:13:d5:69:
db:d6:37:06:cc:85:7e:dc:51:9b:cd:d5:e7:9a:6f:
0f:12:5f:40:f2:ce:df:f0:2b:88:4d:8c:65:43:5a:
c9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BA:F6:FA:E6:EA:00:75:75:89:03:DB:F4:8E:B6:9B:59:10:81:05
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o7r2-ubqAHV1iQPb9I62m1kQgQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.60.0/24
82.152.69.0/24
Signature Algorithm: sha256WithRSAEncryption
75:92:22:9d:62:72:09:33:45:3d:10:6c:1f:49:95:21:ca:17:
b5:3f:79:f2:7a:79:94:09:f1:b2:86:9e:e7:f4:e9:66:37:7d:
5a:57:c2:f8:f7:93:e9:33:fb:ae:df:06:12:80:7d:95:7c:76:
5c:49:14:12:ba:c2:4f:0e:77:46:13:ed:fc:21:de:29:1d:21:
ee:e5:cc:b2:c4:5f:97:86:51:9b:16:1a:a5:87:b8:4b:e9:af:
18:1c:d7:f9:76:28:97:89:27:d7:38:46:6f:6e:c4:7f:f3:81:
c8:c5:15:c7:d1:1a:aa:d9:9d:0d:94:80:ce:5d:45:59:90:0b:
42:8f:57:ac:a1:21:53:fc:8b:76:4f:23:85:3a:71:9e:f9:4d:
1d:97:bb:bf:2c:d3:15:6e:0c:33:91:6b:06:81:86:e9:99:68:
f1:1d:14:ea:e1:f3:0e:58:a4:24:36:e3:57:ee:45:2d:59:9d:
eb:18:d1:e8:96:01:3a:37:4d:6f:36:46:3e:bf:c3:c7:b7:15:
7f:81:47:20:d3:7a:5f:bf:01:97:26:4b:fd:f3:24:ee:d7:bd:
5d:12:b4:eb:29:03:94:eb:d1:2a:20:3a:71:95:19:d7:2c:39:
57:30:c0:7f:ae:b9:6c:b9:c0:f8:07:7b:3a:89:23:1f:33:87:
3d:76:b5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:06:54 2026 by rpki-client