Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZudWoub7q0BCX6qeo6KxfLmtqvQ.roa
File: ZudWoub7q0BCX6qeo6KxfLmtqvQ.roa (raw, json)
Hash identifier: vNofxWyxav3uKLdywip/8rKGAnalw6PYCW9ZHZpxrsk=
Subject key identifier: 66:E7:56:A2:E6:FB:AB:40:42:5F:AA:9E:A3:A2:B1:7C:B9:AD:AA:F4
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FA7E38C1162DD6365D9EC867F7FCD0140
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZudWoub7q0BCX6qeo6KxfLmtqvQ.roa
Signing time: Tue 28 Jul 2026 08:42:15 +0000
ROA not before: Tue 28 Jul 2026 08:42:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134135
IP address blocks: 82.152.61.0/24 maxlen: 24
82.152.71.0/24 maxlen: 24
82.152.72.0/24 maxlen: 24
82.152.92.0/24 maxlen: 24
82.152.127.0/24 maxlen: 24
82.153.41.0/24 maxlen: 24
82.153.42.0/24 maxlen: 24
82.153.53.0/24 maxlen: 24
82.153.58.0/24 maxlen: 24
82.153.80.0/24 maxlen: 24
82.153.86.0/24 maxlen: 24
82.153.90.0/24 maxlen: 24
82.153.91.0/24 maxlen: 24
82.153.144.0/24 maxlen: 24
82.153.155.0/24 maxlen: 24
82.153.180.0/24 maxlen: 24
82.153.203.0/24 maxlen: 24
82.163.15.0/24 maxlen: 24
89.213.49.0/24 maxlen: 24
89.213.64.0/24 maxlen: 24
89.213.70.0/24 maxlen: 24
89.213.71.0/24 maxlen: 24
89.213.73.0/24 maxlen: 24
89.213.74.0/24 maxlen: 24
89.213.77.0/24 maxlen: 24
89.213.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:e3:8c:11:62:dd:63:65:d9:ec:86:7f:7f:cd:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 28 08:42:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66e756a2e6fbab40425faa9ea3a2b17cb9adaaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:24:26:80:ef:ea:7d:5f:1a:a3:1e:42:0b:
0f:2d:01:7a:4d:fb:96:05:d7:ec:e4:5d:aa:38:68:
81:99:c6:a2:52:56:08:cd:de:0f:4d:57:5d:2c:0b:
e1:c3:91:13:60:96:90:9f:12:a7:a1:0d:71:05:22:
7c:09:06:db:27:15:4c:dd:27:aa:87:5f:38:a6:47:
a8:2f:84:05:04:01:14:7a:09:85:cb:d4:7a:60:94:
9e:71:9c:1f:e1:d6:aa:c6:4b:bc:4a:77:28:f2:2c:
c3:f5:71:56:d4:69:0d:89:6f:a3:eb:fa:d6:95:e9:
82:21:11:68:f4:34:5e:24:69:fe:0f:6c:5e:58:d7:
ae:da:5c:c1:95:0a:fd:a9:fc:f9:5e:20:5f:09:d6:
78:35:b4:61:d9:b0:9c:b8:75:ba:71:c2:71:5a:49:
e9:6c:fb:8d:cc:10:32:8e:9b:cf:94:11:4d:d2:4a:
17:48:2a:45:ed:46:01:4d:10:b2:07:70:9f:3a:d2:
23:89:5f:97:33:e0:7a:76:cb:72:86:5b:60:fb:88:
78:82:ab:d2:77:6f:4e:fb:76:bb:5b:f6:49:11:a9:
41:14:4d:d0:2e:da:09:86:2d:4d:3f:fe:1a:75:99:
51:5b:f3:d6:46:9b:05:07:bc:5c:64:60:7d:cb:d8:
57:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E7:56:A2:E6:FB:AB:40:42:5F:AA:9E:A3:A2:B1:7C:B9:AD:AA:F4
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZudWoub7q0BCX6qeo6KxfLmtqvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.61.0/24
82.152.71.0-82.152.72.255
82.152.92.0/24
82.152.127.0/24
82.153.41.0-82.153.42.255
82.153.53.0/24
82.153.58.0/24
82.153.80.0/24
82.153.86.0/24
82.153.90.0/23
82.153.144.0/24
82.153.155.0/24
82.153.180.0/24
82.153.203.0/24
82.163.15.0/24
89.213.49.0/24
89.213.64.0/24
89.213.70.0/23
89.213.73.0-89.213.74.255
89.213.77.0/24
89.213.79.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:15:50:7a:e4:9d:1d:b8:fb:77:21:a2:9b:42:89:5a:b7:eb:
f5:29:3d:84:46:8a:31:af:2f:16:fe:8c:f0:e2:d6:5b:1e:94:
1d:e8:b1:73:c2:60:de:b0:5d:a6:ec:6c:b4:c4:bc:91:71:d1:
ed:30:a8:1f:ae:48:04:8f:7b:db:a9:0f:a6:a8:6a:7f:a4:d5:
86:d2:f5:ba:4b:de:af:ff:34:f0:fb:44:ec:67:6b:79:1e:5d:
41:8e:f3:c5:21:6e:b1:22:fb:09:7b:6d:e4:fb:4a:c8:a6:34:
99:31:bd:86:b1:9a:39:ac:4c:25:ea:ff:03:ba:3b:a1:c3:f3:
97:10:c4:4b:51:93:c7:bc:4f:e2:f8:d4:63:ff:af:d7:4b:fc:
95:05:a2:eb:0e:34:21:aa:82:e8:b4:dd:e1:d5:28:6c:3f:f4:
5e:15:56:bc:c4:9a:f5:61:c1:5e:30:1f:7f:81:99:05:1f:57:
4e:c1:b2:d2:8e:d5:b3:7d:dd:7f:80:93:cb:0c:b1:d9:f6:f3:
1d:4d:55:56:71:8f:13:4a:d9:5c:76:7f:2c:50:56:3b:9a:f5:
fa:b5:03:a6:32:41:ef:86:57:f4:27:2c:27:82:5e:e7:e9:0a:
0f:d0:48:bf:31:7d:46:3d:44:20:c9:e0:ed:8c:14:a1:dd:5c:
e4:a9:ef:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:44:05 2026 by rpki-client