Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PK5e9gZJ-3AGUHdDVD0UdWG-plA.roa
File: PK5e9gZJ-3AGUHdDVD0UdWG-plA.roa (raw, json)
Hash identifier: nOXpYcGREzfwnkjcSKbzoBVgTZ5rlpyL6dmiGMFVyHM=
Subject key identifier: 3C:AE:5E:F6:06:49:FB:70:06:50:77:43:54:3D:14:75:61:BE:A6:50
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0481692E7F30842CCD201AAC9F9061F00
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PK5e9gZJ-3AGUHdDVD0UdWG-plA.roa
Signing time: Fri 28 Aug 2026 11:17:14 +0000
ROA not before: Fri 28 Aug 2026 11:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400031
IP address blocks: 82.153.35.0/24 maxlen: 24
82.153.134.0/24 maxlen: 24
82.153.207.0/24 maxlen: 24
82.153.217.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.51.0/24 maxlen: 24
89.213.112.0/24 maxlen: 24
89.213.114.0/24 maxlen: 24
89.213.117.0/24 maxlen: 24
89.213.121.0/24 maxlen: 24
89.213.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:16:92:e7:f3:08:42:cc:d2:01:aa:c9:f9:06:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 28 11:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cae5ef60649fb7006507743543d147561bea650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a5:2a:57:eb:b7:c0:8e:bb:3f:97:e4:f4:d4:
7b:f1:6a:3c:1b:df:57:f2:d6:ec:fa:5d:9b:cd:c0:
63:e7:69:81:43:dd:9a:50:5a:0d:b7:cc:58:1e:e8:
db:fd:1d:c1:c8:c9:87:a3:03:27:33:1c:f8:83:7f:
41:95:4d:68:1b:11:c8:23:1b:00:4d:44:87:f7:06:
40:43:1b:c0:74:b4:e9:04:ea:ff:df:e6:98:ff:6f:
84:ae:7e:8a:36:a8:9c:59:fa:3a:c6:d6:67:3d:2b:
2c:1b:9f:c0:92:a6:dc:fb:f5:17:5c:cd:48:88:9f:
68:7d:fb:e1:78:dd:a0:bd:f0:eb:d5:e4:7c:ef:6b:
6d:b3:56:e2:47:75:55:e7:6b:ca:c4:d6:92:6f:d3:
87:19:f6:2d:1f:eb:1c:8b:42:90:69:50:4e:3f:cb:
de:36:85:c1:1d:3f:64:9b:89:bd:00:40:c2:24:79:
29:2f:c0:6d:f2:96:98:c4:46:23:a0:b1:7a:db:fd:
54:5a:cc:e6:94:0d:12:72:92:a4:6c:8e:e6:ba:59:
f3:00:43:c8:4c:a3:23:25:6c:29:e1:2e:74:99:12:
5f:f0:0b:2d:1b:26:27:76:83:e3:79:1e:82:ea:80:
7f:8e:db:51:3e:59:63:57:53:c7:8a:32:e1:3a:3d:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AE:5E:F6:06:49:FB:70:06:50:77:43:54:3D:14:75:61:BE:A6:50
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PK5e9gZJ-3AGUHdDVD0UdWG-plA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.35.0/24
82.153.134.0/24
82.153.207.0/24
82.153.217.0/24
82.153.255.0/24
89.213.51.0/24
89.213.112.0/24
89.213.114.0/24
89.213.117.0/24
89.213.121.0/24
89.213.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:6d:6a:7a:08:cb:db:af:ec:64:59:70:35:15:74:73:b4:26:
c5:89:38:fa:08:2a:b5:73:0a:43:f6:69:7d:8a:d8:67:52:7a:
e7:8d:7a:5c:36:e6:b9:92:f8:a8:a9:be:30:2e:25:a7:45:da:
7e:f4:e2:7a:33:6a:bd:96:15:ca:8a:c0:82:9f:a2:cd:90:a6:
87:f5:80:15:63:cf:75:0c:8b:28:d5:7d:91:e9:35:3b:90:3b:
45:05:5b:a5:6d:22:fe:cb:90:cc:b7:50:da:bf:e0:36:ee:04:
fa:7c:0f:42:8e:7d:77:d7:5c:ee:8a:e1:77:32:61:35:63:c0:
7d:f6:68:ea:38:bb:e8:b0:b8:5a:53:91:a5:ae:99:10:29:c8:
44:ce:7e:8a:c0:d0:51:12:94:58:56:07:c6:5d:db:97:33:f6:
3a:c4:11:e8:bc:a4:9a:c2:f9:61:d8:ec:c0:f0:91:d5:73:ff:
fe:4b:dc:97:95:91:14:49:f9:09:28:2f:b0:20:7a:c7:61:9a:
be:60:a4:cd:d4:66:66:7d:6e:17:39:76:5c:cd:80:d1:a3:ee:
0e:d2:7f:4c:50:ff:dc:83:8b:4c:e8:76:e8:df:f4:61:76:6f:
cb:08:93:93:7e:94:b2:a8:56:ee:ca:9a:e3:be:21:ae:15:c9:
13:33:d2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:26:57 2026 by rpki-client