Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/p38FI1ZMh-l3tNCdaRFbfpvsul4.roa
File: p38FI1ZMh-l3tNCdaRFbfpvsul4.roa (raw, json)
Hash identifier: fToY/xJzsiJYuIWt+CNt1I3jcaCQi0LN6zosmxDSTHs=
Subject key identifier: A7:7F:05:23:56:4C:87:E9:77:B4:D0:9D:69:11:5B:7E:9B:EC:BA:5E
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A1886878D29927960C3921544AE342AE92
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/p38FI1ZMh-l3tNCdaRFbfpvsul4.roa
Signing time: Thu 29 Oct 2026 16:05:10 +0000
ROA not before: Thu 29 Oct 2026 16:05:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 82.152.235.0/24 maxlen: 24
82.152.239.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:68:78:d2:99:27:96:0c:39:21:54:4a:e3:42:ae:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 29 16:05:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a77f0523564c87e977b4d09d69115b7e9becba5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:14:af:99:39:a5:18:33:d0:d9:a4:3b:25:
2c:54:f8:3a:51:5d:32:61:50:65:3d:57:34:06:72:
3e:87:aa:f5:b9:1e:07:52:a5:3e:21:9a:ef:70:01:
ce:e6:b2:31:f2:60:09:37:47:71:c3:75:47:52:39:
b9:7f:50:1f:f3:76:92:82:33:9c:1d:75:83:16:cd:
b3:65:8f:db:52:98:7f:d5:1a:f1:a1:dc:0b:93:09:
4b:93:18:9a:92:d6:c6:6d:f8:e5:85:8b:de:05:a2:
ab:1b:67:62:9c:7a:5f:f2:66:4b:d1:e7:91:ae:16:
70:42:6b:f3:bd:e0:bb:54:29:0f:05:6d:72:dd:10:
bb:21:81:6c:fc:7c:bf:99:06:e5:87:7b:0f:f6:b1:
fa:d2:00:b7:12:ce:1f:e6:28:66:dc:b7:9f:59:2f:
36:7e:ce:0f:30:ee:e9:85:4e:a2:af:9a:cf:25:6a:
b8:40:79:11:04:98:af:98:12:aa:43:f2:2a:fa:a1:
fe:52:6d:c8:e7:f8:84:5f:f2:95:49:31:9d:16:d8:
26:7e:ef:52:27:b3:2b:f5:5c:10:88:b1:9c:d4:75:
7c:3e:cb:e0:1f:b8:bd:3c:2b:e8:53:35:e9:12:74:
91:8a:74:33:1b:4e:2a:cc:63:b9:6b:d0:d9:c4:06:
c9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7F:05:23:56:4C:87:E9:77:B4:D0:9D:69:11:5B:7E:9B:EC:BA:5E
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/p38FI1ZMh-l3tNCdaRFbfpvsul4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.235.0/24
82.152.239.0/24
109.176.208.0/24
Signature Algorithm: sha256WithRSAEncryption
46:1e:14:1d:ea:72:7e:1a:dc:ec:bc:76:e0:2a:cd:75:97:47:
86:e1:cc:9b:c4:4e:58:58:3d:d6:9d:24:7e:d0:49:80:52:e9:
df:ce:1d:d3:af:01:4f:ba:76:e5:a3:65:25:34:5f:73:5e:f7:
4c:d7:c1:33:ba:d3:bb:cd:35:d3:ee:10:b5:49:d7:b3:b7:da:
40:9f:57:b9:ac:84:40:b0:81:c6:28:41:21:7a:51:da:27:68:
64:14:8a:0b:d8:ea:fa:80:85:44:09:c8:78:9b:09:4a:f7:24:
d3:73:9e:98:94:ec:46:85:e2:64:23:78:9a:d2:e5:14:9e:a5:
a3:be:c7:0a:89:64:e7:70:a3:f3:95:7c:08:17:db:db:0a:e0:
0b:34:88:20:97:e1:31:16:c8:f9:bf:19:45:e5:26:8a:f7:71:
fa:02:e0:7e:b2:b0:ea:68:40:c4:f0:79:a6:d1:23:01:35:c6:
91:3b:c6:c6:a8:d0:c0:77:93:06:af:fb:95:a3:9e:aa:e9:d8:
7c:fc:31:a6:58:d7:4e:d1:a5:c2:b3:2f:73:58:b3:2e:e7:f7:
44:9d:ef:dc:42:9a:f1:ce:2a:b9:24:39:fe:9c:78:c9:07:bb:
52:b9:e3:55:88:3a:8c:15:57:10:95:98:71:92:6b:de:56:a8:
df:e2:a2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:52:37 2026 by rpki-client