Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hSAJxwVQgmMcAJXLotofWjGY42U.roa
File: hSAJxwVQgmMcAJXLotofWjGY42U.roa (raw, json)
Hash identifier: 2kVGElwDtOUmtmmVkjnHXZhcYNP7sa5EX659iTkma2o=
Subject key identifier: 85:20:09:C7:05:50:82:63:1C:00:95:CB:A2:DA:1F:5A:31:98:E3:65
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A07FCC2A68EC210D20A61A9C7BB4C29940
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hSAJxwVQgmMcAJXLotofWjGY42U.roa
Signing time: Tue 08 Sep 2026 06:54:41 +0000
ROA not before: Tue 08 Sep 2026 06:54:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213948
IP address blocks: 82.152.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:cc:2a:68:ec:21:0d:20:a6:1a:9c:7b:b4:c2:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 8 06:54:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=852009c7055082631c0095cba2da1f5a3198e365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:09:85:5a:f4:07:e7:4a:a2:fe:0d:d7:dd:
41:1b:ba:f2:3d:0a:46:cb:9d:89:c0:47:7e:32:17:
6b:c3:d3:18:c1:c6:a2:5d:0c:2c:77:9f:08:dc:ad:
24:43:30:b0:5e:fe:ec:1d:94:dc:3b:18:c6:67:5a:
7a:21:a6:33:38:9f:70:4f:07:ec:3f:e7:7a:ca:bd:
17:ac:51:5d:27:e9:51:b6:00:26:cc:17:c7:e9:bd:
d5:e8:58:f6:b8:2c:3a:67:ba:11:6f:90:cd:ec:82:
50:c2:91:bd:de:90:df:0a:de:2b:76:37:b1:d2:c7:
b8:49:d3:df:4f:49:69:4b:08:eb:65:49:5c:3a:0f:
f8:25:e7:7e:d4:44:ac:0d:84:5a:bb:a2:42:eb:8b:
5b:fa:74:4e:fa:c9:74:9c:ee:b8:06:f3:50:f2:c6:
49:4c:c6:f7:50:57:6e:78:eb:78:13:21:cf:d7:2c:
9b:77:89:4c:2b:31:32:03:c3:69:8e:ce:1a:9e:b1:
39:80:08:80:ba:7b:07:f8:18:0b:e6:e3:fe:9e:57:
3c:be:cd:52:f1:f0:7d:8c:74:ed:c1:94:0e:a9:61:
48:ba:27:c0:1e:b5:6a:43:dc:82:a2:6d:00:81:93:
3a:dd:d9:fd:84:34:db:b9:04:f7:a5:cf:db:2f:25:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:20:09:C7:05:50:82:63:1C:00:95:CB:A2:DA:1F:5A:31:98:E3:65
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hSAJxwVQgmMcAJXLotofWjGY42U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.222.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c6:b4:da:63:46:61:41:65:ec:ee:58:0d:7a:5c:74:ab:9e:
83:b2:32:5f:73:3c:91:23:ef:5f:23:44:26:6f:99:86:44:4e:
2e:06:49:0b:48:61:50:f8:fd:14:7d:38:0e:d6:64:50:30:cb:
85:f0:25:f8:a5:19:cb:53:17:04:e7:e7:85:49:21:bf:ee:da:
4c:f2:dc:16:43:7f:4f:9f:83:3a:c1:b0:24:51:b0:e3:e6:5f:
1a:6f:d5:7b:a3:05:63:4b:a2:14:33:e8:ea:1f:fc:e0:f2:19:
35:44:c6:f6:f1:67:f4:a0:d7:36:c2:a8:c6:37:aa:f3:c9:05:
42:cc:dc:d3:24:1c:30:22:3f:74:88:c0:60:b9:ad:e3:0c:93:
0e:f8:bf:ba:91:95:87:85:7f:19:6d:90:bb:24:27:b2:c4:9e:
d1:a4:19:a4:f7:2b:71:4e:22:63:89:45:ad:dc:d8:7e:5a:92:
e7:48:2e:d7:ae:86:93:18:33:c4:fb:4a:e7:28:fc:5a:c6:f2:
c9:1d:d5:88:cc:d3:00:97:e5:d5:ae:cc:54:60:69:c4:51:1f:
d5:58:be:88:80:9f:7d:19:9b:59:7a:bc:cb:3e:71:52:3f:f3:
d1:a9:d4:45:7b:a4:84:e4:a8:a2:77:ef:36:9e:33:c9:2e:6e:
c8:3b:b7:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB/zCpo7CENIKYanHu0wplAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwOTA4MDY1NDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTIwMDljNzA1NTA4MjYzMWMwMDk1Y2JhMmRhMWY1YTMxOThlMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1MJhVr0B+dKov4N191BG7ryPQpG
y52JwEd+Mhdrw9MYwcaiXQwsd58I3K0kQzCwXv7sHZTcOxjGZ1p6IaYzOJ9wTwfs
P+d6yr0XrFFdJ+lRtgAmzBfH6b3V6Fj2uCw6Z7oRb5DN7IJQwpG93pDfCt4rdjex
0se4SdPfT0lpSwjrZUlcOg/4Jed+1ESsDYRau6JC64tb+nRO+sl0nO64BvNQ8sZJ
TMb3UFdueOt4EyHP1yybd4lMKzEyA8Npjs4anrE5gAiAunsH+BgL5uP+nlc8vs1S
8fB9jHTtwZQOqWFIuifAHrVqQ9yCom0AgZM63dn9hDTbuQT3pc/bLyWPIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIUgCccFUIJjHACVy6LaH1oxmONlMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvaFNBSnh3VlFnbU1jQUpYTG90b2ZXakdZNDJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpjeMA0G
CSqGSIb3DQEBCwUAA4IBAQB5xrTaY0ZhQWXs7lgNelx0q56DsjJfczyRI+9fI0Qm
b5mGRE4uBkkLSGFQ+P0UfTgO1mRQMMuF8CX4pRnLUxcE5+eFSSG/7tpM8twWQ39P
n4M6wbAkUbDj5l8ab9V7owVjS6IUM+jqH/zg8hk1RMb28Wf0oNc2wqjGN6rzyQVC
zNzTJBwwIj90iMBgua3jDJMO+L+6kZWHhX8ZbZC7JCeyxJ7RpBmk9ytxTiJjiUWt
3Nh+WpLnSC7XroaTGDPE+0rnKPxaxvLJHdWIzNMAl+XVrsxUYGnEUR/VWL6IgJ99
GZtZerzLPnFSP/PRqdRFe6SE5Kiid+82njPJLm7IO7c3
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:27:20 2026 by rpki-client