Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EBUpEeJFZRKtp_fFK0k5U1J8TFs.roa
File: EBUpEeJFZRKtp_fFK0k5U1J8TFs.roa (raw, json)
Hash identifier: C6gRnzXYiLtEjsI+4CImILt89EeVVWzkxcBpL/z9CwY=
Subject key identifier: 10:15:29:11:E2:45:65:12:AD:A7:F7:C5:2B:49:39:53:52:7C:4C:5B
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F842305CE24354B0052E20A8A6A0D1563
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EBUpEeJFZRKtp_fFK0k5U1J8TFs.roa
Signing time: Tue 21 Jul 2026 10:05:15 +0000
ROA not before: Tue 21 Jul 2026 10:05:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 81.5.160.0/24 maxlen: 24
81.5.161.0/24 maxlen: 24
82.152.60.0/24 maxlen: 24
82.152.63.0/24 maxlen: 24
82.152.69.0/24 maxlen: 24
82.152.220.0/24 maxlen: 24
82.152.223.0/24 maxlen: 24
82.153.151.0/24 maxlen: 24
82.153.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:23:05:ce:24:35:4b:00:52:e2:0a:8a:6a:0d:15:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 21 10:05:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10152911e2456512ada7f7c52b493953527c4c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:e9:30:43:b4:ca:c9:e2:d9:69:2f:c8:00:
91:d6:78:93:86:be:53:70:0d:47:87:d8:29:88:e4:
99:1f:3f:10:03:20:cb:fa:83:9e:a5:25:48:b3:34:
cb:ab:a2:b1:35:91:a8:f3:5f:4b:00:7c:0e:32:21:
ae:56:c2:ad:c6:35:fe:b2:0e:c5:8d:69:31:04:ff:
ce:28:20:dc:18:cf:f9:67:0e:0d:09:d4:8d:bc:ed:
e1:68:e2:65:9d:e8:cb:7a:bd:c7:71:c2:4d:72:4c:
1b:c8:2a:dc:f7:13:68:b9:c4:a4:b8:3d:48:c9:17:
a5:ff:ce:d6:15:0e:48:37:61:e1:80:82:1a:c5:da:
b0:fd:6a:53:42:29:25:c9:42:47:d4:c1:f4:c0:55:
92:95:dc:20:d8:78:67:96:f2:17:92:57:d9:fb:75:
71:93:e9:b5:01:cc:3d:dc:2e:ef:a5:9c:c5:22:a2:
51:58:e1:89:c6:21:15:4f:90:49:f4:76:eb:b5:b0:
ab:40:e1:ba:6a:75:8b:41:0c:da:62:57:1b:c9:fc:
00:42:1c:75:4d:e2:5c:34:bb:54:44:41:43:39:ab:
5c:de:e9:fd:15:8d:3f:c9:ae:57:60:20:9a:65:94:
f2:5e:44:f9:cc:88:7e:84:6e:03:a0:68:73:14:f3:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:15:29:11:E2:45:65:12:AD:A7:F7:C5:2B:49:39:53:52:7C:4C:5B
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EBUpEeJFZRKtp_fFK0k5U1J8TFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.160.0/23
82.152.60.0/24
82.152.63.0/24
82.152.69.0/24
82.152.220.0/24
82.152.223.0/24
82.153.151.0/24
82.153.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:50:a4:65:c8:46:2f:2f:8c:7d:4d:32:6d:c9:28:f6:cb:f4:
5c:02:bf:0a:74:d4:ad:57:4b:71:c8:d6:98:10:9f:8f:0f:6e:
72:88:94:fd:04:e6:d9:de:4a:cf:1f:8c:18:74:07:5f:e8:67:
72:55:c7:ad:55:6d:63:d6:75:b9:24:58:11:6e:98:be:1c:77:
17:88:10:f8:1b:09:7e:3e:8e:c6:83:a6:4a:13:87:ab:51:dc:
71:c7:25:08:01:a7:f6:f2:88:84:12:93:e7:29:d8:a3:53:3a:
d4:a9:f5:32:b3:f5:00:e5:53:40:bc:54:f5:39:d5:fd:fc:da:
06:19:6f:3e:b4:9e:a5:33:ff:11:a7:9f:58:64:39:10:a0:04:
af:73:24:ea:b9:5f:32:a5:e4:6a:63:39:56:68:cf:52:89:52:
a6:b0:24:87:dd:9c:df:7f:75:6c:1d:c5:0e:6c:6d:0f:b5:d2:
b1:37:97:9f:ef:07:7b:95:3f:b3:95:90:f5:65:b5:5d:ff:ce:
ca:2f:89:29:94:c4:0f:47:6a:ac:ba:95:5d:2d:5f:1d:c7:a2:
5a:54:c4:4a:d8:8e:de:d1:43:96:f2:bc:4f:c9:32:f3:65:b1:
9f:5c:12:42:e6:50:f9:2f:89:fc:3d:c8:d6:57:64:dd:bd:c5:
f7:7f:8a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:00 2026 by rpki-client