Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_JYfkqlgA1e4I-n50t9BsaVE124.roa
File: _JYfkqlgA1e4I-n50t9BsaVE124.roa (raw, json)
Hash identifier: 1ot6Y/Nw5AwHc/CPrPnUOID2ENPti9pmxoCXLowsSP8=
Subject key identifier: FC:96:1F:92:A9:60:03:57:B8:23:E9:F9:D2:DF:41:B1:A5:44:D7:6E
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A186B97881476F814DC3D194CF0AFF9603
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_JYfkqlgA1e4I-n50t9BsaVE124.roa
Signing time: Thu 29 Oct 2026 08:14:24 +0000
ROA not before: Thu 29 Oct 2026 08:14:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39521
IP address blocks: 82.152.78.0/24 maxlen: 24
82.152.80.0/24 maxlen: 24
82.152.112.0/24 maxlen: 24
82.152.119.0/24 maxlen: 24
82.152.123.0/24 maxlen: 24
82.152.124.0/24 maxlen: 24
82.152.126.0/24 maxlen: 24
82.152.135.0/24 maxlen: 24
82.152.185.0/24 maxlen: 24
82.153.59.0/24 maxlen: 24
82.153.87.0/24 maxlen: 24
82.153.176.0/24 maxlen: 24
82.153.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:b9:78:81:47:6f:81:4d:c3:d1:94:cf:0a:ff:96:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 29 08:14:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc961f92a9600357b823e9f9d2df41b1a544d76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:a9:4d:21:7a:54:81:ac:cc:a4:7a:64:42:
2c:9a:fd:65:0c:af:d0:c9:19:cb:ce:54:f2:e5:ee:
ac:48:18:77:ef:ef:9b:46:bc:30:bc:18:fe:82:91:
74:af:31:b5:58:2c:06:3c:5b:70:01:6b:8d:6c:0c:
e0:25:7c:55:17:ef:59:93:b9:69:04:36:82:64:cf:
b6:53:d8:f6:cb:a6:a5:59:66:f3:a0:a1:f2:af:d8:
dc:68:89:04:95:6b:42:90:5d:a4:cd:02:f6:93:78:
10:d3:6e:a0:76:c4:4f:5f:1c:8d:b5:af:08:aa:01:
5f:45:8e:b4:af:03:03:aa:26:d2:81:29:56:9e:26:
bc:7a:8a:2e:60:36:6b:11:69:4d:ee:e7:02:bb:9d:
9b:13:ba:4f:8b:3d:c9:96:d5:6e:c0:b7:05:33:27:
37:48:e0:c8:e6:e1:ad:69:1d:ed:78:ae:12:ee:3f:
21:2e:be:30:f9:97:d7:e3:47:06:b2:5e:35:5b:0d:
6f:07:70:d9:e8:28:9a:7f:e8:e6:65:79:29:4c:e8:
38:f4:39:e2:cb:9b:4e:a2:61:30:a0:5c:dc:7a:bb:
b1:d4:c1:99:61:d8:01:72:4e:3c:6d:2c:5e:4b:f4:
09:f6:31:67:7a:d8:7c:b1:08:a0:1a:66:d7:41:4a:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:96:1F:92:A9:60:03:57:B8:23:E9:F9:D2:DF:41:B1:A5:44:D7:6E
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_JYfkqlgA1e4I-n50t9BsaVE124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.78.0/24
82.152.80.0/24
82.152.112.0/24
82.152.119.0/24
82.152.123.0-82.152.124.255
82.152.126.0/24
82.152.135.0/24
82.152.185.0/24
82.153.59.0/24
82.153.87.0/24
82.153.176.0/24
82.153.188.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c4:a1:39:37:a7:93:d0:a6:58:fc:1a:e7:6c:cc:10:5b:4c:
4e:ca:35:41:b7:8b:de:63:54:6b:d0:63:96:56:47:e4:79:1e:
66:02:20:2b:b3:75:b3:fd:07:71:3e:9e:ba:b2:fc:06:b3:96:
e3:47:bf:14:2e:16:18:20:f2:a9:d2:f1:28:76:04:45:14:45:
e3:bf:92:0c:49:c6:74:f3:36:ed:30:bd:ba:d1:c9:37:d8:fd:
60:99:8d:68:5c:f9:32:da:b8:a2:e8:1e:4f:86:dd:94:ef:f7:
30:30:0e:d8:8d:2a:5d:44:3d:b7:97:6f:91:42:f2:d3:74:7b:
79:7d:52:7f:7f:93:62:ff:9f:02:27:0d:83:81:e7:cc:7b:07:
e2:4c:62:e6:3a:95:31:00:72:c6:a9:85:73:ba:c7:2c:90:af:
f2:6e:1e:df:33:af:5f:a2:6f:6d:1a:d2:27:2e:b4:25:5a:78:
09:18:0f:2e:42:82:4c:5f:21:62:8f:5e:dd:29:42:8c:84:cb:
22:54:ef:f3:e8:6a:4e:64:f1:fe:d8:81:b1:4e:fa:39:91:20:
be:5b:97:c4:5e:ca:a7:bc:7a:c2:2b:70:f7:f7:fb:15:58:e3:
11:53:bb:44:38:11:9c:62:fb:52:90:38:39:32:a9:1c:84:e5:
74:2d:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:39:15 2026 by rpki-client