Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/usrfwHrCG9rQ3TpPHYc9OSzM8hI.roa
File: usrfwHrCG9rQ3TpPHYc9OSzM8hI.roa (raw, json)
Hash identifier: yt1VC1xQ9G7X75bojSLeRguwLT+7bzimDyQOt8BDg4A=
Subject key identifier: BA:CA:DF:C0:7A:C2:1B:DA:D0:DD:3A:4F:1D:87:3D:39:2C:CC:F2:12
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A06B825FD3E27C27F2B4DE8DB67E71D3A1
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/usrfwHrCG9rQ3TpPHYc9OSzM8hI.roa
Signing time: Fri 04 Sep 2026 08:21:41 +0000
ROA not before: Fri 04 Sep 2026 08:21:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 82.153.117.0/24 maxlen: 24
82.153.208.0/22 maxlen: 22
89.213.58.0/24 maxlen: 24
89.213.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:82:5f:d3:e2:7c:27:f2:b4:de:8d:b6:7e:71:d3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 4 08:21:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bacadfc07ac21bdad0dd3a4f1d873d392cccf212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:36:07:4c:40:c0:32:78:7c:be:cb:10:24:
b6:cb:ad:2c:0c:da:80:a0:5e:67:64:bd:23:50:e8:
42:3e:fc:c0:83:a3:3e:14:86:6c:f2:f3:8f:8f:4b:
46:00:5c:6f:53:5d:1b:2a:b9:4b:6a:2d:a2:67:ff:
1a:34:bf:4f:79:bd:35:ee:79:14:5c:cc:29:50:4c:
b5:8f:7b:2e:83:31:91:a5:69:58:e4:67:a5:d0:c7:
79:7a:22:cf:8f:7c:e4:9a:e5:6a:49:26:37:83:a6:
2d:3d:92:3f:bf:ef:01:88:b5:31:59:bd:bc:95:05:
de:8b:e7:8c:5f:bb:d8:41:ed:bc:01:36:6d:e9:15:
a9:e2:17:69:bf:7e:ec:2a:1c:24:e3:c4:a9:28:76:
6e:2b:6b:dc:ba:ea:7c:f6:60:27:fd:a2:89:ee:c1:
c5:b9:df:66:d7:94:c6:8c:32:9a:a2:64:de:0a:07:
c9:3d:53:a5:8f:6e:89:a5:d4:60:84:44:95:70:ad:
5e:c1:07:30:6d:07:4e:fd:14:10:e4:42:34:e7:89:
6f:f4:2f:6a:8b:b7:35:0d:b9:a8:c8:9c:1a:16:83:
8c:a9:9f:4b:49:3a:90:76:bf:88:e0:b0:c6:a2:f9:
21:9c:f0:f4:31:14:8c:ae:03:32:bd:60:e8:27:3f:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CA:DF:C0:7A:C2:1B:DA:D0:DD:3A:4F:1D:87:3D:39:2C:CC:F2:12
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/usrfwHrCG9rQ3TpPHYc9OSzM8hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.117.0/24
82.153.208.0/22
89.213.58.0/24
89.213.228.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:1a:ee:5c:2e:96:b3:19:19:3f:a4:b0:9a:75:8e:fa:85:45:
25:95:ba:84:3f:31:7e:83:06:05:e5:da:1e:ad:9b:8d:17:45:
27:da:ff:d1:e0:ef:cd:69:44:2b:03:3c:78:d1:ab:3f:ca:0d:
48:68:20:6e:e4:7c:4b:59:2f:b7:7c:ef:a7:63:5b:c1:33:7e:
b8:79:56:3d:2f:8e:ca:92:9a:ff:0c:45:2a:8c:5a:71:d5:b1:
db:c6:55:c4:34:56:23:8c:b3:3a:67:a5:0c:01:4f:f6:b1:c4:
e8:be:66:47:6b:a4:62:3c:47:90:b9:96:d4:cf:5d:c6:fa:33:
bb:f6:82:67:c1:fa:64:0a:30:8c:7c:14:3c:b2:fa:58:da:63:
7a:9b:8e:21:46:19:5c:5f:e4:a2:ac:d9:9b:7f:6a:1c:a3:cb:
3c:6e:7e:99:92:01:3b:b9:b3:9d:9d:b2:9c:04:46:f3:60:95:
88:a1:6d:74:f5:a1:56:f6:f2:d3:eb:4f:b9:7d:00:01:f7:58:
e1:48:40:7a:57:d9:ff:27:3d:b1:da:88:08:ee:2d:14:35:c2:
f8:58:b9:7c:b5:d8:2d:81:fb:cd:1e:96:8a:9a:17:3a:85:52:
d0:9d:a4:ce:40:29:dc:82:97:4a:27:4c:19:e5:33:c8:00:d8:
df:7b:31:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:42 2026 by rpki-client