Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RrSmw05eXqvgr-Ih-wYAeKg-2Hc.roa
File: RrSmw05eXqvgr-Ih-wYAeKg-2Hc.roa (raw, json)
Hash identifier: JVn5/zlZrKb/v7NeO5nMRtdAbs78DwSVdlTnXDVBzuI=
Subject key identifier: 46:B4:A6:C3:4E:5E:5E:AB:E0:AF:E2:21:FB:06:00:78:A8:3E:D8:77
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0481690B40BDF493012F5E927CBA9B709
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RrSmw05eXqvgr-Ih-wYAeKg-2Hc.roa
Signing time: Fri 28 Aug 2026 11:17:13 +0000
ROA not before: Fri 28 Aug 2026 11:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56264
IP address blocks: 81.168.42.0/24 maxlen: 24
81.168.43.0/24 maxlen: 24
81.168.60.0/24 maxlen: 24
81.168.78.0/24 maxlen: 24
82.152.28.0/24 maxlen: 24
82.152.83.0/24 maxlen: 24
82.152.115.0/24 maxlen: 24
82.152.120.0/24 maxlen: 24
82.152.130.0/24 maxlen: 24
82.152.196.0/24 maxlen: 24
82.152.201.0/24 maxlen: 24
82.152.202.0/24 maxlen: 24
82.152.203.0/24 maxlen: 24
82.152.204.0/24 maxlen: 24
82.152.205.0/24 maxlen: 24
82.152.206.0/24 maxlen: 24
82.152.207.0/24 maxlen: 24
82.152.249.0/24 maxlen: 24
82.152.250.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.254.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.51.0/24 maxlen: 24
82.153.154.0/24 maxlen: 24
89.213.52.0/24 maxlen: 24
89.213.53.0/24 maxlen: 24
89.213.54.0/24 maxlen: 24
89.213.55.0/24 maxlen: 24
89.213.56.0/24 maxlen: 24
89.213.57.0/24 maxlen: 24
89.213.59.0/24 maxlen: 24
89.213.60.0/24 maxlen: 24
89.213.61.0/24 maxlen: 24
89.213.97.0/24 maxlen: 24
89.213.99.0/24 maxlen: 24
89.213.104.0/24 maxlen: 24
89.213.105.0/24 maxlen: 24
89.213.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:16:90:b4:0b:df:49:30:12:f5:e9:27:cb:a9:b7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 28 11:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46b4a6c34e5e5eabe0afe221fb060078a83ed877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:d0:a8:88:72:bc:fb:05:2e:31:22:27:27:
cb:fb:68:61:85:23:de:70:67:f6:e7:5c:6f:63:c9:
52:bc:cb:ad:66:63:6d:92:e5:97:63:8e:66:ad:2c:
0f:a5:e9:b8:65:be:d3:1f:e6:ba:6d:0e:06:10:d9:
3a:a9:b6:79:90:e3:9b:e8:56:76:72:3d:c1:2e:06:
1a:45:5a:a3:d2:35:87:f0:af:1c:b2:6f:04:a1:dc:
1b:e6:2b:49:c5:d0:d6:09:29:da:9f:74:8e:bf:a0:
a7:f2:91:13:1f:13:06:ae:7f:bb:17:b4:6f:1d:ee:
4c:f5:9a:8a:7a:77:d9:fa:30:8b:31:65:d1:e9:53:
17:bb:b8:a1:01:5e:29:c9:3f:7a:a3:91:da:23:9c:
09:b0:b3:ef:fb:f5:10:8a:ba:c5:cb:0d:d2:27:b4:
06:d7:b7:d4:db:32:51:63:99:86:58:ff:2f:1c:b6:
9f:23:8f:d9:c3:49:e6:4c:48:8d:91:e4:5d:15:41:
8b:88:61:53:09:2c:78:27:63:07:71:2d:bb:ec:82:
05:0a:a2:59:2d:f2:94:8d:25:74:4e:ae:aa:1a:eb:
e8:04:c2:d9:ad:18:e4:6e:cf:c7:39:02:c8:80:c2:
6a:2c:ce:d6:eb:6a:9b:78:4d:01:33:4e:d2:4d:52:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B4:A6:C3:4E:5E:5E:AB:E0:AF:E2:21:FB:06:00:78:A8:3E:D8:77
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RrSmw05eXqvgr-Ih-wYAeKg-2Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.42.0/23
81.168.60.0/24
81.168.78.0/24
82.152.28.0/24
82.152.83.0/24
82.152.115.0/24
82.152.120.0/24
82.152.130.0/24
82.152.196.0/24
82.152.201.0-82.152.207.255
82.152.249.0-82.152.255.255
82.153.51.0/24
82.153.154.0/24
89.213.52.0-89.213.57.255
89.213.59.0-89.213.61.255
89.213.97.0/24
89.213.99.0/24
89.213.104.0/23
89.213.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:71:03:db:d3:82:b6:14:9b:2e:6d:44:a4:a1:74:cb:62:f8:
ea:13:04:f7:4f:4d:98:8a:22:9d:a9:96:c1:48:df:37:1a:a8:
e6:e8:35:c6:bf:05:e1:36:e9:b1:b3:e5:2d:f2:6d:d9:1f:6b:
0e:fa:7c:18:e1:88:d8:6d:95:22:9f:93:7c:ce:01:e1:f9:f8:
18:8f:23:c8:af:00:9d:54:8b:f5:a7:2b:36:eb:41:12:26:19:
6f:8a:b3:91:3a:62:00:f8:46:d8:92:77:f2:c1:59:9f:22:a0:
ac:e5:ed:f9:61:1e:7d:f2:b5:3f:d4:37:e5:97:31:e1:dd:e7:
16:62:4d:11:88:db:69:91:3e:d7:73:69:84:5d:1c:a2:c1:88:
43:09:e5:c1:0a:1f:f7:e0:79:4e:d6:70:b2:a6:01:96:18:bc:
e7:20:6a:f2:44:cb:89:00:49:a7:ff:0e:fa:1a:9b:ce:88:c3:
d0:4f:de:80:52:e3:49:be:c7:a7:ad:12:d6:56:48:2a:16:40:
f4:13:c0:70:78:1a:89:09:50:57:9d:dd:f4:44:56:fc:39:39:
a4:51:ff:88:70:5d:70:54:a5:a1:d8:b3:9b:5d:58:67:62:93:
79:98:12:70:bd:04:da:d9:c2:21:d9:9e:93:88:09:cd:f6:00:
f3:5e:27:d1
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAaBIFpC0C99JMBL16SfLqbcJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODI4MTExNzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmI0YTZjMzRlNWU1ZWFiZTBhZmUyMjFmYjA2MDA3OGE4M2VkODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaPQqIhyvPsFLjEiJyfL+2hhhSPe
cGf251xvY8lSvMutZmNtkuWXY45mrSwPpem4Zb7TH+a6bQ4GENk6qbZ5kOOb6FZ2
cj3BLgYaRVqj0jWH8K8csm8Eodwb5itJxdDWCSnan3SOv6Cn8pETHxMGrn+7F7Rv
He5M9ZqKenfZ+jCLMWXR6VMXu7ihAV4pyT96o5HaI5wJsLPv+/UQirrFyw3SJ7QG
17fU2zJRY5mGWP8vHLafI4/Zw0nmTEiNkeRdFUGLiGFTCSx4J2MHcS277IIFCqJZ
LfKUjSV0Tq6qGuvoBMLZrRjkbs/HOQLIgMJqLM7W62qbeE0BM07STVIh2wIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFEa0psNOXl6r4K/iIfsGAHioPth3MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUnJTbXcwNWVYcXZnci1JaC13WUFlS2ctMkhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGuBggrBgEFBQcBBwEB/wSBnjCBmzCBmAQCAAEwgZEDBAFR
qCoDBABRqDwDBABRqE4DBABSmBwDBABSmFMDBABSmHMDBABSmHgDBABSmIIDBABS
mMQwDAMEAFKYyQMEBFKYwDALAwQAUpj5AwMAUpgDBABSmTMDBABSmZowDAMEAlnV
NAMEAVnVODAMAwQAWdU7AwQBWdU8AwQAWdVhAwQAWdVjAwQBWdVoAwQAWdVrMA0G
CSqGSIb3DQEBCwUAA4IBAQBdcQPb04K2FJsubUSkoXTLYvjqEwT3T02YiiKdqZbB
SN83Gqjm6DXGvwXhNumxs+Ut8m3ZH2sO+nwY4YjYbZUin5N8zgHh+fgYjyPIrwCd
VIv1pys260ESJhlvirOROmIA+EbYknfywVmfIqCs5e35YR598rU/1DfllzHh3ecW
Yk0RiNtpkT7Xc2mEXRyiwYhDCeXBCh/34HlO1nCypgGWGLznIGryRMuJAEmn/w76
GpvOiMPQT96AUuNJvsenrRLWVkgqFkD0E8BweBqJCVBXnd30RFb8OTmkUf+IcF1w
VKWh2LObXVhnYpN5mBJwvQTa2cIh2Z6TiAnN9gDzXifR
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:02:13 2026 by rpki-client