Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AnDRtce25TL5w3jQsitqxB7XRuE.roa
File: AnDRtce25TL5w3jQsitqxB7XRuE.roa (raw, json)
Hash identifier: vXxgzlRs/ufyERnpN6KoSLBiq8oTRn8xT70ds55f93o=
Subject key identifier: 02:70:D1:B5:C7:B6:E5:32:F9:C3:78:D0:B2:2B:6A:C4:1E:D7:46:E1
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0C2D19022B762F153F22F3CE2FC7A45D7
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AnDRtce25TL5w3jQsitqxB7XRuE.roa
Signing time: Mon 21 Sep 2026 07:15:08 +0000
ROA not before: Mon 21 Sep 2026 07:15:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 82.152.10.0/24 maxlen: 24
82.152.70.0/24 maxlen: 24
82.153.34.0/24 maxlen: 24
82.153.37.0/24 maxlen: 24
82.153.132.0/24 maxlen: 24
109.176.244.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
213.210.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:d1:90:22:b7:62:f1:53:f2:2f:3c:e2:fc:7a:45:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 21 07:15:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0270d1b5c7b6e532f9c378d0b22b6ac41ed746e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:95:e2:b2:d6:7a:37:6a:72:ec:b8:85:e5:
dc:fa:6c:9d:1d:13:c5:e4:9a:21:95:2d:39:49:55:
1d:50:8a:a2:2b:a4:80:c2:3e:5e:71:d5:66:98:0d:
f6:1e:44:f6:95:4b:5a:f2:67:22:90:b6:4b:3d:a4:
6f:c8:92:e1:cf:43:9b:63:a8:5b:59:f8:83:b9:fc:
b1:23:ad:34:76:ef:48:0a:f1:d4:db:27:00:f9:7c:
98:ba:b1:17:0d:10:61:b4:0e:1d:bd:c8:79:d1:84:
41:2d:f8:bc:5f:6a:28:1f:5d:ba:b8:b9:b9:d5:9f:
58:c6:52:07:bb:53:11:a4:19:e0:73:73:86:43:97:
b7:bb:64:71:4a:dd:31:c1:70:74:60:13:14:c2:3e:
0b:3e:77:5f:d7:a7:c5:af:d9:e9:d6:f4:20:77:19:
a8:b4:87:a7:97:d3:d9:be:c9:7d:ca:b4:b0:95:ed:
07:ad:fe:17:fc:f9:1b:c6:d3:0a:0d:0b:aa:b4:27:
ae:59:af:0f:41:f5:22:6a:b5:13:3c:8f:61:dd:63:
b6:7f:97:33:fe:42:8c:5c:94:aa:4e:0e:37:ea:0f:
66:a8:0c:96:61:04:c4:f9:1b:b7:64:9d:38:bd:fe:
cd:93:85:91:04:a0:24:da:3c:63:9a:22:90:16:2b:
3f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:70:D1:B5:C7:B6:E5:32:F9:C3:78:D0:B2:2B:6A:C4:1E:D7:46:E1
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AnDRtce25TL5w3jQsitqxB7XRuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.10.0/24
82.152.70.0/24
82.153.34.0/24
82.153.37.0/24
82.153.132.0/24
109.176.244.0/24
109.176.247.0/24
109.176.251.0/24
213.210.62.0/24
Signature Algorithm: sha256WithRSAEncryption
11:83:12:9a:6c:8c:70:a2:cb:94:64:ac:73:01:38:79:2e:38:
b9:30:72:1f:5a:fd:76:7b:fc:22:8c:57:21:a2:d3:bf:73:92:
f2:ff:d6:cf:ef:95:6c:7f:dd:35:46:8c:1b:43:fa:3e:51:a3:
1e:de:9c:7a:a3:98:a4:8e:7f:34:5c:2f:29:a6:6b:74:91:b2:
93:b4:08:49:d3:da:c0:25:b8:92:90:60:1b:0c:97:01:a8:aa:
9a:cc:ce:58:81:ff:c5:6c:cb:17:f1:8b:0b:61:1f:ed:a2:af:
fc:a4:45:7a:d6:5f:68:ab:31:ba:9b:48:ae:6c:fb:43:5a:a1:
53:29:f8:e6:1b:ed:5e:21:ab:71:36:f8:3b:28:01:8b:ce:39:
84:9f:ea:c2:d8:a9:54:9c:ff:c3:b0:76:64:53:cf:ff:48:e5:
48:fa:50:67:29:fd:1e:b5:14:4e:a1:e7:82:3e:2d:4b:d7:6a:
bd:ee:91:f8:bc:18:c9:44:2d:09:e5:e4:90:0f:31:13:2e:7c:
b5:ef:b7:b6:b3:69:c3:34:55:b0:75:a4:11:48:60:6e:64:d9:
8a:ca:f6:41:ef:86:61:c2:c1:24:ca:b3:62:0b:c7:4d:4a:78:
88:2a:ff:26:2a:7a:62:f5:4c:95:4c:fd:19:f8:d7:f9:0b:50:
15:1c:99:24
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAaDC0ZAit2LxU/IvPOL8ekXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwOTIxMDcxNTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjcwZDFiNWM3YjZlNTMyZjljMzc4ZDBiMjJiNmFjNDFlZDc0NmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbaV4rLWejdqcuy4heXc+mydHRPF
5JohlS05SVUdUIqiK6SAwj5ecdVmmA32HkT2lUta8mcikLZLPaRvyJLhz0ObY6hb
WfiDufyxI600du9ICvHU2ycA+XyYurEXDRBhtA4dvch50YRBLfi8X2ooH126uLm5
1Z9YxlIHu1MRpBngc3OGQ5e3u2RxSt0xwXB0YBMUwj4LPndf16fFr9np1vQgdxmo
tIenl9PZvsl9yrSwle0Hrf4X/PkbxtMKDQuqtCeuWa8PQfUiarUTPI9h3WO2f5cz
/kKMXJSqTg436g9mqAyWYQTE+Ru3ZJ04vf7Nk4WRBKAk2jxjmiKQFis/kQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFAJw0bXHtuUy+cN40LIrasQe10bhMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvQW5EUnRjZTI1VEw1dzNqUXNpdHF4QjdYUnVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAUpgKAwQA
UphGAwQAUpkiAwQAUpklAwQAUpmEAwQAbbD0AwQAbbD3AwQAbbD7AwQA1dI+MA0G
CSqGSIb3DQEBCwUAA4IBAQARgxKabIxwosuUZKxzATh5Lji5MHIfWv12e/wijFch
otO/c5Ly/9bP75Vsf901RowbQ/o+UaMe3px6o5ikjn80XC8ppmt0kbKTtAhJ09rA
JbiSkGAbDJcBqKqazM5Ygf/FbMsX8YsLYR/toq/8pEV61l9oqzG6m0iubPtDWqFT
KfjmG+1eIatxNvg7KAGLzjmEn+rC2KlUnP/DsHZkU8//SOVI+lBnKf0etRROoeeC
Pi1L12q97pH4vBjJRC0J5eSQDzETLny177e2s2nDNFWwdaQRSGBuZNmKyvZB74Zh
wsEkyrNiC8dNSniIKv8mKnpi9UyVTP0Z+Nf5C1AVHJkk
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:08:47 2026 by rpki-client