Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VlW9U5Peobh4q3bRU45RzYcjaUk.roa
File: VlW9U5Peobh4q3bRU45RzYcjaUk.roa (raw, json)
Hash identifier: ioDhshlRogVaCjCspXvENa33vssRSGmLYErw7fzwSFM=
Subject key identifier: 56:55:BD:53:93:DE:A1:B8:78:AB:76:D1:53:8E:51:CD:87:23:69:49
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E87348B066EBFE0DA381DE97A57E1765F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VlW9U5Peobh4q3bRU45RzYcjaUk.roa
Signing time: Tue 02 Jun 2026 07:20:27 +0000
ROA not before: Tue 02 Jun 2026 07:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 37.98.147.0/24 maxlen: 24
80.240.95.0/24 maxlen: 24
82.152.56.0/24 maxlen: 24
82.152.60.0/24 maxlen: 24
82.152.69.0/24 maxlen: 24
82.152.78.0/24 maxlen: 24
82.152.80.0/24 maxlen: 24
82.152.112.0/24 maxlen: 24
82.152.113.0/24 maxlen: 24
82.152.119.0/24 maxlen: 24
82.152.123.0/24 maxlen: 24
82.152.124.0/24 maxlen: 24
82.152.125.0/24 maxlen: 24
82.152.126.0/24 maxlen: 24
82.152.135.0/24 maxlen: 24
82.152.137.0/24 maxlen: 24
82.152.185.0/24 maxlen: 24
82.152.235.0/24 maxlen: 24
82.152.237.0/24 maxlen: 24
82.152.239.0/24 maxlen: 24
82.153.47.0/24 maxlen: 24
82.153.48.0/24 maxlen: 24
82.153.59.0/24 maxlen: 24
82.153.87.0/24 maxlen: 24
82.153.141.0/24 maxlen: 24
82.153.176.0/24 maxlen: 24
82.153.183.0/24 maxlen: 24
82.153.188.0/24 maxlen: 24
82.153.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:34:8b:06:6e:bf:e0:da:38:1d:e9:7a:57:e1:76:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 2 07:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5655bd5393dea1b878ab76d1538e51cd87236949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:74:cb:62:97:ed:94:85:37:68:ed:7a:a3:
75:b5:91:9c:40:c7:3f:1a:b5:8c:b4:02:e0:88:51:
3c:ad:b3:b4:b5:e6:a8:af:49:6b:4b:7a:02:4b:70:
ab:e9:83:5d:ec:c1:a0:89:c7:69:af:1e:35:a3:c1:
35:5f:eb:93:21:f9:66:48:43:35:e9:df:88:d6:de:
f1:be:7c:5c:a3:72:47:d3:68:3c:18:11:1d:f7:6e:
f1:32:31:27:96:64:2d:86:b9:a2:7a:c6:b6:ab:fb:
7b:07:00:0f:48:0d:02:d8:6e:55:82:37:ee:b3:57:
5b:93:7c:94:46:01:36:b4:a4:9a:95:32:0f:19:93:
1a:ef:b9:34:80:e3:09:04:b0:4b:bc:91:54:7a:f6:
4c:95:ac:dd:94:39:ec:43:bf:01:b8:8a:6f:23:49:
52:a0:a1:16:75:dc:14:16:fb:92:d1:cb:18:92:a4:
84:1a:33:89:48:57:72:89:e6:e7:c0:48:7b:e6:57:
f3:ac:f7:83:19:23:c7:67:a1:2f:fa:8a:9b:8e:9a:
9b:3d:a5:f1:5c:0c:4f:e3:9f:6f:ee:db:02:d6:0e:
b1:57:74:6b:69:01:2a:5a:52:57:e6:e8:df:3a:4c:
9a:eb:9e:c5:f6:5e:62:d7:a5:85:48:db:65:ab:eb:
f3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:55:BD:53:93:DE:A1:B8:78:AB:76:D1:53:8E:51:CD:87:23:69:49
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VlW9U5Peobh4q3bRU45RzYcjaUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.147.0/24
80.240.95.0/24
82.152.56.0/24
82.152.60.0/24
82.152.69.0/24
82.152.78.0/24
82.152.80.0/24
82.152.112.0/23
82.152.119.0/24
82.152.123.0-82.152.126.255
82.152.135.0/24
82.152.137.0/24
82.152.185.0/24
82.152.235.0/24
82.152.237.0/24
82.152.239.0/24
82.153.47.0-82.153.48.255
82.153.59.0/24
82.153.87.0/24
82.153.141.0/24
82.153.176.0/24
82.153.183.0/24
82.153.188.0/24
82.153.214.0/24
Signature Algorithm: sha256WithRSAEncryption
15:04:a4:a6:41:34:ea:3f:d9:69:cd:e8:85:b9:7a:55:19:5d:
ed:34:10:40:ab:e9:16:6b:1f:aa:3e:5b:f6:c2:42:33:b5:ea:
e6:52:d0:f2:68:e0:4f:c7:8d:0c:f9:04:5c:55:68:9e:69:d4:
87:5c:20:21:1d:ba:cd:da:a9:0a:b5:a3:9f:2b:98:21:c7:99:
6f:24:12:1f:74:a0:c4:e0:09:62:18:47:a5:ec:d7:c2:e4:62:
e2:54:fd:7a:7a:37:d9:1e:8f:56:44:b0:b0:fb:4f:2a:d7:00:
66:d7:50:21:9a:67:e6:f2:9a:fd:5b:2c:f5:13:79:3d:c1:47:
d8:66:93:c3:2d:59:7e:7c:2b:c8:90:fa:8d:6e:2d:bb:83:52:
2e:9a:f1:1e:ff:59:03:21:c6:29:21:44:64:97:cd:5c:95:36:
c2:cf:7a:b2:3d:46:51:8e:13:09:fc:ba:0f:02:57:0a:1c:0e:
77:76:55:00:d1:3b:1c:c3:63:5b:0c:53:75:53:95:59:2e:e1:
d0:20:56:77:a7:e7:f8:04:65:f0:10:4a:b4:a3:cf:86:7e:5f:
a2:ed:75:bf:30:90:68:25:e5:a3:e3:ac:88:a7:92:aa:9c:4d:
ea:7a:2b:af:dc:e2:0c:f9:94:18:9b:55:5b:cf:f9:e7:af:30:
29:3e:a5:35
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAZ6HNIsGbr/g2jgd6XpX4XZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNjAyMDcyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjU1YmQ1MzkzZGVhMWI4NzhhYjc2ZDE1MzhlNTFjZDg3MjM2OTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7x0y2KX7ZSFN2jteqN1tZGcQMc/
GrWMtALgiFE8rbO0teaor0lrS3oCS3Cr6YNd7MGgicdprx41o8E1X+uTIflmSEM1
6d+I1t7xvnxco3JH02g8GBEd927xMjEnlmQthrmiesa2q/t7BwAPSA0C2G5Vgjfu
s1dbk3yURgE2tKSalTIPGZMa77k0gOMJBLBLvJFUevZMlazdlDnsQ78BuIpvI0lS
oKEWddwUFvuS0csYkqSEGjOJSFdyiebnwEh75lfzrPeDGSPHZ6Ev+oqbjpqbPaXx
XAxP459v7tsC1g6xV3RraQEqWlJX5ujfOkya657F9l5i16WFSNtlq+vzjQIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFFZVvVOT3qG4eKt20VOOUc2HI2lJMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvVmxXOVU1UGVvYmg0cTNiUlU0NVJ6WWNqYVVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG9BggrBgEFBQcBBwEB/wSBrTCBqjCBpwQCAAEwgaADBAAl
YpMDBABQ8F8DBABSmDgDBABSmDwDBABSmEUDBABSmE4DBABSmFADBAFSmHADBABS
mHcwDAMEAFKYewMEAFKYfgMEAFKYhwMEAFKYiQMEAFKYuQMEAFKY6wMEAFKY7QME
AFKY7zAMAwQAUpkvAwQAUpkwAwQAUpk7AwQAUplXAwQAUpmNAwQAUpmwAwQAUpm3
AwQAUpm8AwQAUpnWMA0GCSqGSIb3DQEBCwUAA4IBAQAVBKSmQTTqP9lpzeiFuXpV
GV3tNBBAq+kWax+qPlv2wkIztermUtDyaOBPx40M+QRcVWieadSHXCAhHbrN2qkK
taOfK5ghx5lvJBIfdKDE4AliGEel7NfC5GLiVP16ejfZHo9WRLCw+08q1wBm11Ah
mmfm8pr9Wyz1E3k9wUfYZpPDLVl+fCvIkPqNbi27g1IumvEe/1kDIcYpIURkl81c
lTbCz3qyPUZRjhMJ/LoPAlcKHA53dlUA0Tscw2NbDFN1U5VZLuHQIFZ3p+f4BGXw
EEq0o8+Gfl+i7XW/MJBoJeWj46yIp5KqnE3qeiuv3OIM+ZQYm1Vbz/nnrzApPqU1
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:24 2026 by rpki-client