Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aI9KcWEW58qcvvlIxHy0_1UAf7k.roa
File: aI9KcWEW58qcvvlIxHy0_1UAf7k.roa (raw, json)
Hash identifier: eXCzsVqNyfOEx/iVu3n3vwvqukpjsAd8kcgTNvQkkpM=
Subject key identifier: 68:8F:4A:71:61:16:E7:CA:9C:BE:F9:48:C4:7C:B4:FF:55:00:7F:B9
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FA7E38E7A79CE290B8A2347CB0B7D5005
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aI9KcWEW58qcvvlIxHy0_1UAf7k.roa
Signing time: Tue 28 Jul 2026 08:42:15 +0000
ROA not before: Tue 28 Jul 2026 08:42:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400031
IP address blocks: 82.152.140.0/24 maxlen: 24
82.153.35.0/24 maxlen: 24
82.153.134.0/24 maxlen: 24
82.153.207.0/24 maxlen: 24
82.153.217.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.50.0/24 maxlen: 24
89.213.51.0/24 maxlen: 24
89.213.112.0/24 maxlen: 24
89.213.114.0/24 maxlen: 24
89.213.117.0/24 maxlen: 24
89.213.121.0/24 maxlen: 24
89.213.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:e3:8e:7a:79:ce:29:0b:8a:23:47:cb:0b:7d:50:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 28 08:42:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=688f4a716116e7ca9cbef948c47cb4ff55007fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:95:42:4e:79:65:b2:71:1e:4d:f9:bd:83:ae:
e0:01:3b:c6:43:7a:95:e7:66:c7:20:dd:da:ae:b1:
5f:50:45:6a:11:bd:0a:4b:ab:0a:a7:05:0a:30:9e:
e5:14:7e:ee:e8:eb:04:23:87:3d:8b:e5:48:8a:02:
72:c7:82:97:0a:55:ef:ec:9d:c2:39:6b:52:ca:ce:
72:0f:df:47:2b:52:55:60:17:63:10:7d:e4:5a:89:
3f:12:0c:84:34:64:9a:c7:c0:8f:70:e7:bc:66:04:
53:2c:66:03:52:30:9c:db:04:62:03:51:49:89:c3:
a6:33:07:a5:30:90:d7:fa:3c:99:38:b8:d3:47:2c:
fc:0c:7b:3b:fb:f0:aa:52:da:6f:96:04:bc:42:be:
d8:3b:cf:2a:15:28:43:de:cf:02:f7:88:eb:35:cc:
8b:6a:91:54:16:fd:4b:d2:67:b8:f0:97:cc:7d:77:
d1:f0:1e:0b:9c:a7:be:72:ce:2f:9e:5f:4f:62:4b:
67:34:d9:5e:46:9b:30:ad:5b:fa:a6:48:d9:77:b9:
07:05:b3:0e:c0:d7:a0:86:3c:8f:b5:25:2d:d7:af:
a9:51:27:21:23:5c:73:89:7b:d8:9f:e0:98:08:a5:
2a:da:13:d1:b0:76:7e:5d:11:3d:ae:00:24:18:ba:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:4A:71:61:16:E7:CA:9C:BE:F9:48:C4:7C:B4:FF:55:00:7F:B9
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aI9KcWEW58qcvvlIxHy0_1UAf7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.140.0/24
82.153.35.0/24
82.153.134.0/24
82.153.207.0/24
82.153.217.0/24
82.153.255.0/24
89.213.50.0/23
89.213.112.0/24
89.213.114.0/24
89.213.117.0/24
89.213.121.0/24
89.213.127.0/24
Signature Algorithm: sha256WithRSAEncryption
57:cd:11:7c:17:d3:b9:01:8f:36:db:36:3c:66:ae:4a:00:b4:
52:02:52:23:1e:05:d5:21:63:96:45:91:43:59:5e:9d:76:93:
e5:d4:f7:91:16:e5:ab:69:84:c9:56:b9:41:dc:0e:f8:27:03:
9f:ed:e5:12:d7:51:47:95:8e:57:d3:4f:a9:a8:aa:0a:8c:6a:
d9:28:7d:9e:ba:95:80:43:3c:e8:e8:ea:c7:4b:a6:0a:7f:3f:
bf:12:f6:ad:7b:e8:f8:33:d5:0b:80:65:73:ab:58:17:a7:6a:
9d:dd:7f:ca:4d:18:64:ab:86:15:34:9a:62:73:af:96:e5:58:
44:33:df:4e:68:8a:2e:b9:af:f4:1f:cb:46:89:70:00:b6:3f:
06:33:9f:c5:9e:ef:90:b9:51:bf:47:df:98:7a:98:aa:58:cf:
a9:96:fe:11:9b:ac:22:f8:8c:5b:64:16:fb:ff:5c:a5:5a:57:
de:02:99:c5:f9:fd:d9:7a:ce:86:ad:23:5d:c0:9a:bb:a7:ce:
30:00:7b:29:01:c0:c4:33:9f:d3:00:2a:2e:bf:34:92:5b:4e:
cd:88:83:da:3d:e2:79:4d:a5:7f:a5:86:03:ee:2d:f8:84:cc:
1b:b1:7e:96:d4:a7:3e:10:34:19:53:0c:98:b0:61:93:d7:bb:
89:e2:f3:68
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZ+n4456ec4pC4ojR8sLfVAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzI4MDg0MjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODhmNGE3MTYxMTZlN2NhOWNiZWY5NDhjNDdjYjRmZjU1MDA3ZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZVCTnllsnEeTfm9g67gATvGQ3qV
52bHIN3arrFfUEVqEb0KS6sKpwUKMJ7lFH7u6OsEI4c9i+VIigJyx4KXClXv7J3C
OWtSys5yD99HK1JVYBdjEH3kWok/EgyENGSax8CPcOe8ZgRTLGYDUjCc2wRiA1FJ
icOmMwelMJDX+jyZOLjTRyz8DHs7+/CqUtpvlgS8Qr7YO88qFShD3s8C94jrNcyL
apFUFv1L0me48JfMfXfR8B4LnKe+cs4vnl9PYktnNNleRpswrVv6pkjZd7kHBbMO
wNeghjyPtSUt16+pUSchI1xziXvYn+CYCKUq2hPRsHZ+XRE9rgAkGLo6KwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFGiPSnFhFufKnL75SMR8tP9VAH+5MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYUk5S2NXRVc1OHFjdnZsSXhIeTBfMVVBZjdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAUpiMAwQA
UpkjAwQAUpmGAwQAUpnPAwQAUpnZAwQAUpn/AwQBWdUyAwQAWdVwAwQAWdVyAwQA
WdV1AwQAWdV5AwQAWdV/MA0GCSqGSIb3DQEBCwUAA4IBAQBXzRF8F9O5AY822zY8
Zq5KALRSAlIjHgXVIWOWRZFDWV6ddpPl1PeRFuWraYTJVrlB3A74JwOf7eUS11FH
lY5X00+pqKoKjGrZKH2eupWAQzzo6OrHS6YKfz+/Evate+j4M9ULgGVzq1gXp2qd
3X/KTRhkq4YVNJpic6+W5VhEM99OaIouua/0H8tGiXAAtj8GM5/Fnu+QuVG/R9+Y
epiqWM+plv4Rm6wi+IxbZBb7/1ylWlfeApnF+f3Zes6GrSNdwJq7p84wAHspAcDE
M5/TACouvzSSW07NiIPaPeJ5TaV/pYYD7i34hMwbsX6W1Kc+EDQZUwyYsGGT17uJ
4vNo
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:42:50 2026 by rpki-client