Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aI4Lw_-agdOKQiqMkYTFBreZaOg.roa
File: aI4Lw_-agdOKQiqMkYTFBreZaOg.roa (raw, json)
Hash identifier: gkYe8WbA55Z/x6kzwh/9WfiYZMdgKn0vDMoghoOe/EU=
Subject key identifier: 68:8E:0B:C3:FF:9A:81:D3:8A:42:2A:8C:91:84:C5:06:B7:99:68:E8
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F4B285DC68107449900489615750A4D42
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aI4Lw_-agdOKQiqMkYTFBreZaOg.roa
Signing time: Fri 10 Jul 2026 08:32:44 +0000
ROA not before: Fri 10 Jul 2026 08:32:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 37.252.25.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.140.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
82.153.249.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:28:5d:c6:81:07:44:99:00:48:96:15:75:0a:4d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 10 08:32:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=688e0bc3ff9a81d38a422a8c9184c506b79968e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:f4:35:00:29:59:d7:54:80:e3:6d:de:a5:
89:31:5b:d2:16:f1:11:30:ac:3f:1b:fb:3d:cc:c6:
6d:b1:b1:4a:fc:52:28:f9:8d:81:2a:c1:43:cd:ae:
c3:60:0f:e7:36:0e:f9:3f:34:ff:ec:4f:3c:4e:b2:
df:e6:3e:fe:39:3f:3c:9a:b8:a6:e8:68:2c:00:03:
df:57:27:ed:0a:15:02:4b:f3:b5:5e:d7:9a:c1:1b:
d2:b1:6a:63:b3:59:b0:f4:ae:f9:88:f2:69:c7:f0:
bf:4e:b8:96:e7:d0:70:7a:a3:13:d8:fe:e8:b5:6e:
5b:bf:d4:fd:ad:08:70:fa:75:ee:06:a5:3f:cc:bf:
14:a6:6e:e9:e7:76:aa:cc:5e:97:88:8f:8f:6c:b3:
d7:e3:6d:13:71:7b:35:cc:29:d1:84:ef:74:0c:0e:
b7:72:21:95:30:56:1e:3b:80:71:07:0b:23:b2:57:
a9:5c:16:06:93:13:60:85:c6:56:d8:3e:36:3d:4f:
ca:83:c3:95:b3:4b:d5:f5:42:00:11:0d:1f:67:75:
af:63:69:97:4c:27:e0:b2:de:d7:45:90:06:75:c9:
b1:37:aa:5a:bf:92:2f:74:f7:5d:ad:6a:59:6d:2d:
c1:7c:e9:0a:cf:8d:1c:60:92:47:8c:ff:0d:8e:a4:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8E:0B:C3:FF:9A:81:D3:8A:42:2A:8C:91:84:C5:06:B7:99:68:E8
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aI4Lw_-agdOKQiqMkYTFBreZaOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.25.0/24
81.5.156.0/24
81.168.41.0/24
82.153.137.0/24
82.153.139.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.240.0/24
82.153.249.0-82.153.250.255
Signature Algorithm: sha256WithRSAEncryption
29:0e:65:ac:83:eb:f1:e5:d4:73:a4:90:72:d3:12:c6:82:9d:
e5:4a:57:c0:16:72:ac:bf:5e:ae:7b:0e:6b:ae:70:54:a8:b5:
b9:e4:f2:ec:ec:47:c6:b6:f4:c6:ab:b2:f5:42:f3:25:35:12:
e3:e0:b2:60:de:13:78:69:cb:cb:fe:71:ad:4a:72:e8:69:b5:
bf:c3:ae:4c:0b:e9:ff:ac:20:1f:ea:a8:37:e2:f2:97:68:0c:
43:64:03:5e:76:b6:05:37:63:ab:4d:b2:4a:6e:b0:4a:3a:a4:
b7:e8:d1:db:39:4e:98:d4:60:b3:c2:67:c2:85:34:48:58:34:
4a:85:f4:98:d8:bb:f3:8f:d0:d1:f7:b5:46:f3:8b:23:65:d4:
6b:8f:68:bb:92:53:48:56:89:22:f3:4f:db:bd:cc:fa:cb:73:
f2:f3:2c:b4:32:1e:19:6d:7c:e4:80:b3:64:3e:2c:65:4b:24:
5f:e1:85:df:f6:84:f9:f8:80:97:6c:03:c2:0f:aa:10:b0:33:
f2:6a:cf:9c:fd:1a:26:b3:56:50:e7:52:70:a4:5e:80:33:69:
82:4e:74:e8:da:89:9b:86:0b:1b:e1:82:a7:1b:c7:5f:ba:c5:
ec:76:e8:9b:23:32:8c:e6:c0:a7:ef:36:4e:72:fc:23:4e:40:
8b:89:5c:dc
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZ9LKF3GgQdEmQBIlhV1Ck1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzEwMDgzMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODhlMGJjM2ZmOWE4MWQzOGE0MjJhOGM5MTg0YzUwNmI3OTk2OGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvT0NQApWddUgONt3qWJMVvSFvER
MKw/G/s9zMZtsbFK/FIo+Y2BKsFDza7DYA/nNg75PzT/7E88TrLf5j7+OT88mrim
6GgsAAPfVyftChUCS/O1XteawRvSsWpjs1mw9K75iPJpx/C/TriW59BweqMT2P7o
tW5bv9T9rQhw+nXuBqU/zL8Upm7p53aqzF6XiI+PbLPX420TcXs1zCnRhO90DA63
ciGVMFYeO4BxBwsjslepXBYGkxNghcZW2D42PU/Kg8OVs0vV9UIAEQ0fZ3WvY2mX
TCfgst7XRZAGdcmxN6pav5IvdPddrWpZbS3BfOkKz40cYJJHjP8NjqTfaQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFGiOC8P/moHTikIqjJGExQa3mWjoMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYUk0THdfLWFnZE9LUWlxTWtZVEZCcmVaYU9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQAJfwZAwQA
UQWcAwQAUagpAwQAUpmJMAwDBABSmYsDBABSmYwDBABSmd0DBABSmd8DBABSmfAw
DAMEAFKZ+QMEAFKZ+jANBgkqhkiG9w0BAQsFAAOCAQEAKQ5lrIPr8eXUc6SQctMS
xoKd5UpXwBZyrL9ernsOa65wVKi1ueTy7OxHxrb0xquy9ULzJTUS4+CyYN4TeGnL
y/5xrUpy6Gm1v8OuTAvp/6wgH+qoN+Lyl2gMQ2QDXna2BTdjq02ySm6wSjqkt+jR
2zlOmNRgs8JnwoU0SFg0SoX0mNi784/Q0fe1RvOLI2XUa49ou5JTSFaJIvNP273M
+stz8vMstDIeGW185ICzZD4sZUskX+GF3/aE+fiAl2wDwg+qELAz8mrPnP0aJrNW
UOdScKRegDNpgk506NqJm4YLG+GCpxvHX7rF7HbomyMyjObAp+82TnL8I05Ai4lc
3A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:56 2026 by rpki-client