Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/g_O_l8sRSE7oMr0-0NZCC-wurjM.roa
File: g_O_l8sRSE7oMr0-0NZCC-wurjM.roa (raw, json)
Hash identifier: 0oWsR6OkXtav3VNanICqYYCoE0XKvqJH39fXb7atum8=
Subject key identifier: 83:F3:BF:97:CB:11:48:4E:E8:32:BD:3E:D0:D6:42:0B:EC:2E:AE:33
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0C2D190EECB3D61005507D98E5180B6CF
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/g_O_l8sRSE7oMr0-0NZCC-wurjM.roa
Signing time: Mon 21 Sep 2026 07:15:09 +0000
ROA not before: Mon 21 Sep 2026 07:15:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 82.153.218.0/24 maxlen: 24
89.213.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:d1:90:ee:cb:3d:61:00:55:07:d9:8e:51:80:b6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 21 07:15:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83f3bf97cb11484ee832bd3ed0d6420bec2eae33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:50:85:bb:8e:30:8c:be:24:09:93:53:38:df:
1f:5f:ea:bb:5f:b7:c2:43:79:2c:16:41:99:e1:7d:
d4:41:e3:62:1d:81:c6:99:a4:83:50:59:bb:bc:e4:
e0:11:2b:cb:3a:6c:bf:0e:4f:a8:a5:ac:1b:79:6e:
c9:a8:63:a5:f0:35:82:9c:89:67:8e:3b:0c:86:82:
0e:3c:f5:37:fe:a8:cd:65:c7:dc:39:1b:88:bd:4b:
57:b8:c6:c6:68:fd:10:8b:62:76:fc:8a:63:67:a7:
91:69:32:58:d3:0f:32:94:50:f0:00:cf:24:60:4d:
a1:3e:85:4e:63:aa:38:59:48:92:f8:c0:83:79:2c:
af:b1:28:8b:25:13:33:b5:3d:d5:04:2d:91:ec:71:
74:44:7e:ee:c4:4e:47:84:ec:90:47:43:a3:e1:b5:
3a:42:b0:50:93:da:5f:ed:5c:c2:d3:ce:83:d7:c6:
60:a9:12:eb:fc:ad:ff:85:65:7b:ca:47:a1:3e:bf:
7c:c2:e9:4f:93:9b:7e:fb:2d:b4:df:ad:90:52:af:
b0:c9:b8:4c:0e:3c:55:a4:05:12:44:e6:98:3c:c3:
07:dd:c5:8d:16:70:65:b3:99:e3:5f:15:7e:6e:37:
d8:87:6d:df:e6:7b:fd:83:51:24:46:b8:11:c0:59:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F3:BF:97:CB:11:48:4E:E8:32:BD:3E:D0:D6:42:0B:EC:2E:AE:33
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/g_O_l8sRSE7oMr0-0NZCC-wurjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.218.0/24
89.213.50.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d1:b8:55:47:8b:6a:9e:2a:ba:41:08:17:40:b0:75:84:07:
d5:1c:53:4d:d0:e7:e2:d1:d7:96:70:e9:92:90:f0:40:2e:59:
02:7c:f1:4f:cb:6a:be:a3:51:ab:cc:42:f7:17:6a:d6:9e:6b:
af:64:1f:28:b3:66:86:dd:86:3b:d7:00:20:2a:2e:ed:a8:52:
45:d2:b7:69:45:e6:16:e9:97:ba:12:88:9a:95:04:ef:f5:55:
8d:19:93:f0:8f:0a:26:ef:3a:0e:7e:e5:81:19:1c:14:98:49:
0a:5a:04:83:60:f8:51:49:94:dc:18:2d:30:b6:5f:6d:c6:45:
66:66:96:8f:00:db:85:ba:7b:bc:24:00:a9:28:8c:b5:39:ef:
37:8b:9a:33:88:2c:3e:1d:26:af:57:ea:ce:98:2d:6d:3a:04:
97:2f:e6:08:91:31:46:9b:52:28:05:5c:f6:f4:aa:e6:93:d9:
ce:3a:fe:e5:1b:99:81:40:0d:94:37:7e:0e:00:a6:8a:dc:5c:
38:57:2b:a0:5e:bd:8d:d1:07:03:9e:8e:49:b6:f9:6e:b0:b4:
df:e2:df:02:4b:87:a8:73:c0:7f:28:a8:6c:cb:65:19:d3:e9:
70:8f:fa:8f:ba:f3:4d:47:93:f7:f1:f3:ea:bb:4c:48:28:d3:
06:66:69:c0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDC0ZDuyz1hAFUH2Y5RgLbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwOTIxMDcxNTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2YzYmY5N2NiMTE0ODRlZTgzMmJkM2VkMGQ2NDIwYmVjMmVhZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilCFu44wjL4kCZNTON8fX+q7X7fC
Q3ksFkGZ4X3UQeNiHYHGmaSDUFm7vOTgESvLOmy/Dk+opawbeW7JqGOl8DWCnIln
jjsMhoIOPPU3/qjNZcfcORuIvUtXuMbGaP0Qi2J2/IpjZ6eRaTJY0w8ylFDwAM8k
YE2hPoVOY6o4WUiS+MCDeSyvsSiLJRMztT3VBC2R7HF0RH7uxE5HhOyQR0Oj4bU6
QrBQk9pf7VzC086D18ZgqRLr/K3/hWV7ykehPr98wulPk5t++y20362QUq+wybhM
DjxVpAUSROaYPMMH3cWNFnBls5njXxV+bjfYh23f5nv9g1EkRrgRwFn6cwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIPzv5fLEUhO6DK9PtDWQgvsLq4zMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZ19PX2w4c1JTRTdvTXIwLTBOWkNDLXd1cmpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpnaAwQA
WdUyMA0GCSqGSIb3DQEBCwUAA4IBAQBQ0bhVR4tqniq6QQgXQLB1hAfVHFNN0Ofi
0deWcOmSkPBALlkCfPFPy2q+o1GrzEL3F2rWnmuvZB8os2aG3YY71wAgKi7tqFJF
0rdpReYW6Ze6EoialQTv9VWNGZPwjwom7zoOfuWBGRwUmEkKWgSDYPhRSZTcGC0w
tl9txkVmZpaPANuFunu8JACpKIy1Oe83i5oziCw+HSavV+rOmC1tOgSXL+YIkTFG
m1IoBVz29Krmk9nOOv7lG5mBQA2UN34OAKaK3Fw4VyugXr2N0QcDno5JtvlusLTf
4t8CS4eoc8B/KKhsy2UZ0+lwj/qPuvNNR5P38fPqu0xIKNMGZmnA
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:53:16 2026 by rpki-client