Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2y_pBy0dj28EQEALVkbevIfIMMc.roa
File: 2y_pBy0dj28EQEALVkbevIfIMMc.roa (raw, json)
Hash identifier: hK0sJasTBprAG3yAxhN+gahKF8C0v6xCkYMt3gPM7RA=
Subject key identifier: DB:2F:E9:07:2D:1D:8F:6F:04:40:40:0B:56:46:DE:BC:87:C8:30:C7
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F942A6ACBC0137F09FC76FF1E5CCFEBB6
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2y_pBy0dj28EQEALVkbevIfIMMc.roa
Signing time: Fri 24 Jul 2026 12:47:15 +0000
ROA not before: Fri 24 Jul 2026 12:47:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149978
IP address blocks: 82.152.234.0/24 maxlen: 24
82.152.241.0/24 maxlen: 24
82.153.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:2a:6a:cb:c0:13:7f:09:fc:76:ff:1e:5c:cf:eb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 24 12:47:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db2fe9072d1d8f6f0440400b5646debc87c830c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:10:8c:dd:84:7c:0a:90:ba:9e:27:a2:54:
0c:6e:64:9d:07:0e:e8:c7:e4:26:58:de:3f:96:8e:
3d:98:76:0a:1b:40:de:c5:4b:18:76:7a:31:a8:d1:
4c:e1:d6:39:b0:79:68:85:0a:eb:41:af:aa:8a:7f:
9e:86:11:f0:37:86:76:50:86:aa:57:1a:23:da:2d:
cf:de:59:a1:20:ad:ac:84:e0:46:90:e1:5a:f8:85:
fe:b2:48:e3:0a:3a:cb:90:91:3b:e4:9a:91:b8:54:
c7:2f:84:fc:d2:f0:25:19:6c:67:87:07:50:6e:15:
75:f9:c9:a3:78:2f:96:38:2d:2a:00:fd:75:38:a2:
d7:aa:a7:27:3b:41:6d:0c:94:10:00:6d:1a:83:d7:
e8:76:13:db:0d:ac:92:34:bd:6f:03:57:ab:4e:a8:
b9:e1:09:21:07:b8:16:6f:a2:27:34:08:16:3f:87:
11:2c:13:f2:0e:a0:0b:28:e4:8a:47:32:77:f0:75:
34:84:60:51:fd:3f:8f:93:8e:43:1b:4a:44:e1:1b:
77:c1:6f:f1:a3:61:d7:99:1a:70:be:98:9e:1d:f0:
63:a7:a6:0f:2b:38:8a:8e:9c:50:0e:b9:6f:4d:a7:
52:cf:bd:20:02:2b:a1:cc:c3:32:94:e3:9f:14:45:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2F:E9:07:2D:1D:8F:6F:04:40:40:0B:56:46:DE:BC:87:C8:30:C7
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2y_pBy0dj28EQEALVkbevIfIMMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.234.0/24
82.152.241.0/24
82.153.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fa:08:09:64:b8:12:b8:c1:89:12:ac:e7:01:c7:4d:c5:a6:
a9:da:d0:a2:eb:7f:42:56:00:cf:3e:02:dd:d9:40:51:df:d5:
37:80:09:d6:99:42:9f:7f:e9:8e:9c:b8:21:f6:6a:3b:78:0b:
00:ae:2f:69:58:4a:0e:ae:c1:d5:1a:b3:c8:7f:ea:97:26:fc:
53:ce:d9:7a:54:e8:a7:dc:4f:d5:04:cd:f0:5b:6d:d5:03:aa:
87:8a:19:e3:64:d6:36:c2:9c:4e:3e:2e:40:de:ec:ac:01:06:
cb:30:0b:54:66:e3:2d:74:3b:ec:29:73:2d:a2:9f:d9:ca:80:
da:01:fb:2d:eb:e3:ad:12:47:5d:82:18:0a:9f:05:ee:5f:ca:
69:ca:89:61:0f:27:6d:0c:a2:23:28:98:a1:60:a6:8c:2b:d3:
54:fd:e9:24:c8:a4:d4:f3:9d:ea:a9:63:18:88:77:dc:70:15:
d2:b9:17:c6:29:75:89:fe:fb:b6:8e:8e:fd:b5:6a:87:12:74:
b5:02:42:fe:20:2e:30:fc:e3:79:81:d1:d3:3e:32:99:88:8c:
41:ab:30:2c:50:b4:d3:df:db:6d:06:0f:47:12:b8:5a:c9:0e:
d2:9d:86:13:fa:70:fb:0f:34:ff:78:15:55:60:01:51:0c:a2:
05:97:b9:08
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ+UKmrLwBN/Cfx2/x5cz+u2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzI0MTI0NzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjJmZTkwNzJkMWQ4ZjZmMDQ0MDQwMGI1NjQ2ZGViYzg3YzgzMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8AQjN2EfAqQup4nolQMbmSdBw7o
x+QmWN4/lo49mHYKG0DexUsYdnoxqNFM4dY5sHlohQrrQa+qin+ehhHwN4Z2UIaq
Vxoj2i3P3lmhIK2shOBGkOFa+IX+skjjCjrLkJE75JqRuFTHL4T80vAlGWxnhwdQ
bhV1+cmjeC+WOC0qAP11OKLXqqcnO0FtDJQQAG0ag9fodhPbDaySNL1vA1erTqi5
4QkhB7gWb6InNAgWP4cRLBPyDqALKOSKRzJ38HU0hGBR/T+Pk45DG0pE4Rt3wW/x
o2HXmRpwvpieHfBjp6YPKziKjpxQDrlvTadSz70gAiuhzMMylOOfFEWHGQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNsv6QctHY9vBEBAC1ZG3ryHyDDHMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvMnlfcEJ5MGRqMjhFUUVBTFZrYmV2SWZJTU1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUpjqAwQA
UpjxAwQAUpm/MA0GCSqGSIb3DQEBCwUAA4IBAQAL+ggJZLgSuMGJEqznAcdNxaap
2tCi639CVgDPPgLd2UBR39U3gAnWmUKff+mOnLgh9mo7eAsAri9pWEoOrsHVGrPI
f+qXJvxTztl6VOin3E/VBM3wW23VA6qHihnjZNY2wpxOPi5A3uysAQbLMAtUZuMt
dDvsKXMtop/ZyoDaAfst6+OtEkddghgKnwXuX8ppyolhDydtDKIjKJihYKaMK9NU
/ekkyKTU853qqWMYiHfccBXSuRfGKXWJ/vu2jo79tWqHEnS1AkL+IC4w/ON5gdHT
PjKZiIxBqzAsULTT39ttBg9HErhayQ7SnYYT+nD7DzT/eBVVYAFRDKIFl7kI
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:39:20 2026 by rpki-client