Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YbHL6cQcrsv7zIBqMiJhqI0Lmew.roa
File: YbHL6cQcrsv7zIBqMiJhqI0Lmew.roa (raw, json)
Hash identifier: ZHpViD4KGmh12S1tKaWNtNR8bRM1ejW+vpsZLgLO+II=
Subject key identifier: 61:B1:CB:E9:C4:1C:AE:CB:FB:CC:80:6A:32:22:61:A8:8D:0B:99:EC
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A05BF4525220AB48D0E79A10F59801C96A
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YbHL6cQcrsv7zIBqMiJhqI0Lmew.roa
Signing time: Tue 01 Sep 2026 07:52:13 +0000
ROA not before: Tue 01 Sep 2026 07:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 82.152.78.0/24 maxlen: 24
82.152.80.0/24 maxlen: 24
82.152.112.0/24 maxlen: 24
82.152.113.0/24 maxlen: 24
82.152.119.0/24 maxlen: 24
82.152.123.0/24 maxlen: 24
82.152.124.0/24 maxlen: 24
82.152.126.0/24 maxlen: 24
82.152.135.0/24 maxlen: 24
82.152.185.0/24 maxlen: 24
82.152.235.0/24 maxlen: 24
82.152.237.0/24 maxlen: 24
82.152.239.0/24 maxlen: 24
82.153.47.0/24 maxlen: 24
82.153.48.0/24 maxlen: 24
82.153.59.0/24 maxlen: 24
82.153.87.0/24 maxlen: 24
82.153.176.0/24 maxlen: 24
82.153.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:f4:52:52:20:ab:48:d0:e7:9a:10:f5:98:01:c9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 1 07:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61b1cbe9c41caecbfbcc806a322261a88d0b99ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:d0:b8:49:70:02:97:43:da:cb:c4:96:8e:
3e:50:aa:54:29:fc:30:2e:ea:2c:3e:07:31:28:8d:
36:c5:7f:c1:1a:33:df:44:2c:b5:89:1c:5c:58:c8:
9f:45:dc:cb:7a:b7:8c:e9:95:9b:56:59:7d:b7:a6:
88:e2:10:79:50:8d:b7:ae:69:33:a0:f6:a0:92:b0:
46:6d:fb:d8:10:1e:de:0f:fd:6b:9f:40:cd:15:7e:
dd:68:47:a4:00:06:2b:59:ca:ba:e3:df:7d:aa:66:
e6:2b:01:4b:2c:7d:7a:6a:a1:e0:4e:3d:2f:4f:c1:
12:2a:36:27:74:45:48:c5:8c:7c:48:49:5a:8b:67:
7e:e9:30:54:ca:f2:a5:a8:53:85:c5:53:3f:c6:e1:
83:b6:f0:e7:19:4c:2c:ec:37:f9:aa:d9:77:d1:15:
aa:4d:59:a2:e2:94:58:91:4a:57:8e:ef:0c:30:c1:
ab:e2:4f:1b:eb:1d:e0:91:5a:89:d1:68:7a:8a:31:
96:36:19:d9:74:52:e6:fe:3d:70:9a:7c:8a:44:91:
1e:34:03:b7:d0:c1:6a:58:bb:62:15:3e:5f:45:f7:
6c:7c:82:e9:95:0b:8b:4d:28:52:f7:49:34:f7:a9:
87:28:be:0e:9e:97:12:b4:5e:24:1c:2b:fd:25:dd:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B1:CB:E9:C4:1C:AE:CB:FB:CC:80:6A:32:22:61:A8:8D:0B:99:EC
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YbHL6cQcrsv7zIBqMiJhqI0Lmew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.78.0/24
82.152.80.0/24
82.152.112.0/23
82.152.119.0/24
82.152.123.0-82.152.124.255
82.152.126.0/24
82.152.135.0/24
82.152.185.0/24
82.152.235.0/24
82.152.237.0/24
82.152.239.0/24
82.153.47.0-82.153.48.255
82.153.59.0/24
82.153.87.0/24
82.153.176.0/24
82.153.188.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d4:8d:bc:e5:80:70:f7:41:b6:9c:49:71:09:b3:2a:c2:0b:
63:6e:87:f7:16:58:d0:6b:43:17:ef:2a:a9:4c:16:7a:98:9c:
d9:0b:3c:1b:84:40:8d:69:89:d4:37:00:08:ba:01:c0:55:76:
1d:b1:d1:1e:46:73:77:4a:d0:be:d3:25:32:99:25:e8:dc:85:
c3:c8:39:9e:bf:36:17:28:6b:c7:8a:64:9b:20:49:9f:52:71:
ed:2a:22:32:42:73:88:0b:b0:0f:57:a7:91:f3:ee:05:41:00:
e4:26:b4:cf:fa:e8:e6:97:31:cb:9a:51:c8:57:85:f0:fc:7c:
c9:cf:1b:f6:bf:80:4d:9a:89:61:e6:6c:73:00:53:18:de:f8:
d3:81:a0:7f:09:d3:01:03:39:05:37:f4:c4:c2:e3:a3:23:c5:
83:ff:ed:8f:16:ff:78:b5:00:e4:9a:73:8c:3e:57:c9:02:e8:
8c:a7:01:60:9e:3b:f5:b4:1b:7f:28:ab:43:be:39:61:18:61:
87:36:fb:f1:ad:6c:25:f7:20:e6:85:33:59:a5:35:94:a1:57:
d4:af:1d:c6:8f:e3:6b:f9:bb:0c:2d:ad:69:16:d8:65:10:73:
e5:4c:01:f0:ae:e9:53:b9:81:b7:da:7e:10:44:03:85:51:86:
09:70:fc:88
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISAaBb9FJSIKtI0OeaEPWYAclqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwOTAxMDc1MjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWIxY2JlOWM0MWNhZWNiZmJjYzgwNmEzMjIyNjFhODhkMGI5OWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3nQuElwApdD2svElo4+UKpUKfww
LuosPgcxKI02xX/BGjPfRCy1iRxcWMifRdzLereM6ZWbVll9t6aI4hB5UI23rmkz
oPagkrBGbfvYEB7eD/1rn0DNFX7daEekAAYrWcq64999qmbmKwFLLH16aqHgTj0v
T8ESKjYndEVIxYx8SElai2d+6TBUyvKlqFOFxVM/xuGDtvDnGUws7Df5qtl30RWq
TVmi4pRYkUpXju8MMMGr4k8b6x3gkVqJ0Wh6ijGWNhnZdFLm/j1wmnyKRJEeNAO3
0MFqWLtiFT5fRfdsfILplQuLTShS90k096mHKL4OnpcStF4kHCv9Jd2JxQIDAQAB
o4ICdDCCAnAwHQYDVR0OBBYEFGGxy+nEHK7L+8yAajIiYaiNC5nsMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvWWJITDZjUWNyc3Y3eklCcU1pSmhxSTBMbWV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMEAFKYTgME
AFKYUAMEAVKYcAMEAFKYdzAMAwQAUph7AwQAUph8AwQAUph+AwQAUpiHAwQAUpi5
AwQAUpjrAwQAUpjtAwQAUpjvMAwDBABSmS8DBABSmTADBABSmTsDBABSmVcDBABS
mbADBABSmbwwDQYJKoZIhvcNAQELBQADggEBAHLUjbzlgHD3QbacSXEJsyrCC2Nu
h/cWWNBrQxfvKqlMFnqYnNkLPBuEQI1pidQ3AAi6AcBVdh2x0R5Gc3dK0L7TJTKZ
JejchcPIOZ6/Nhcoa8eKZJsgSZ9Sce0qIjJCc4gLsA9Xp5Hz7gVBAOQmtM/66OaX
McuaUchXhfD8fMnPG/a/gE2aiWHmbHMAUxje+NOBoH8J0wEDOQU39MTC46MjxYP/
7Y8W/3i1AOSac4w+V8kC6IynAWCeO/W0G38oq0O+OWEYYYc2+/GtbCX3IOaFM1ml
NZShV9SvHcaP42v5uwwtrWkW2GUQc+VMAfCu6VO5gbfafhBEA4VRhglw/Ig=
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:17:24 2026 by rpki-client