Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lv6XDgH3lmZpCN7oMKlUYy7W4AU.roa
File: lv6XDgH3lmZpCN7oMKlUYy7W4AU.roa (raw, json)
Hash identifier: F0xSteQz3u4r6B5w4DUSg+0rBqFNIsOaJosZNnfDy4U=
Subject key identifier: 96:FE:97:0E:01:F7:96:66:69:08:DE:E8:30:A9:54:63:2E:D6:E0:05
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F7E84BA6BC291027F084E15E88D612098
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lv6XDgH3lmZpCN7oMKlUYy7W4AU.roa
Signing time: Mon 20 Jul 2026 07:54:15 +0000
ROA not before: Mon 20 Jul 2026 07:54:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 37.252.26.0/24 maxlen: 24
79.99.75.0/24 maxlen: 24
79.99.150.0/23 maxlen: 24
82.152.55.0/24 maxlen: 24
82.152.192.0/24 maxlen: 24
82.153.10.0/24 maxlen: 24
82.153.121.0/24 maxlen: 24
82.153.145.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.226.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
213.210.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:84:ba:6b:c2:91:02:7f:08:4e:15:e8:8d:61:20:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 20 07:54:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96fe970e01f796666908dee830a954632ed6e005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:b8:52:bc:a1:0a:64:50:74:66:d5:1c:c4:
d3:a1:0e:00:ce:9f:4c:fb:fd:52:eb:fe:19:2f:ab:
a7:9f:a3:f6:f9:32:a4:ef:30:d0:e6:9d:f8:88:31:
e0:f9:0a:f3:5d:8a:f9:05:14:89:b6:3e:9a:d2:da:
6e:74:bc:7a:29:6c:4d:67:7a:47:5b:77:97:2d:d3:
20:f6:0b:70:7e:93:40:f5:a4:e0:72:7c:2e:15:14:
f4:b1:11:9f:bd:62:d6:85:f3:2d:40:3b:8b:e0:47:
44:96:fd:2f:4f:a0:eb:31:5b:95:f6:80:6d:68:de:
f6:9c:67:ef:07:5a:0a:a3:c8:3e:d5:0d:10:05:7e:
aa:4b:f3:fd:ff:a1:f9:cd:2a:e6:81:76:ee:fc:bf:
3d:56:66:50:8e:43:7a:2c:eb:da:fd:94:71:06:fc:
47:5f:2c:e1:40:75:ad:d0:d3:fe:79:d3:bb:ed:d4:
f6:a4:f0:65:72:0f:e9:d4:6f:19:71:16:7f:06:12:
e4:28:d5:69:c3:79:74:55:9c:68:74:da:5b:94:4f:
c1:1d:0b:f8:b4:81:f0:e0:01:78:35:6c:09:5d:8e:
53:7e:d9:25:bb:97:33:ed:e5:3a:05:3d:56:cb:17:
65:30:8f:04:e4:09:92:d9:34:d6:3a:ff:df:8c:68:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FE:97:0E:01:F7:96:66:69:08:DE:E8:30:A9:54:63:2E:D6:E0:05
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lv6XDgH3lmZpCN7oMKlUYy7W4AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.26.0/24
79.99.75.0/24
79.99.150.0/23
82.152.55.0/24
82.152.192.0/24
82.153.10.0/24
82.153.121.0/24
82.153.145.0/24
82.163.10.0/23
89.213.226.0/24
109.176.30.0/24
109.176.208.0/24
213.210.41.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:82:c6:92:80:b6:c9:b6:8c:c6:19:3d:6d:97:15:40:e2:7c:
ad:50:0d:e8:c3:70:e5:76:d7:75:57:26:2f:af:c4:17:bd:a2:
b6:56:0c:54:50:7f:37:98:b0:79:91:92:7c:33:7f:f6:51:bc:
e6:86:34:02:3f:ff:fe:c0:83:19:9a:16:e2:d2:c4:ed:f7:71:
fc:7c:3a:b6:b9:13:2a:fb:7e:fe:43:85:44:ac:5d:7a:d5:e5:
7c:2f:7d:84:ff:e4:e0:01:33:2a:d3:cd:38:b4:63:e2:3c:54:
c0:04:e7:4d:d1:ed:77:f7:5a:7a:58:16:7c:bf:43:e8:88:0a:
ea:9d:15:06:3a:4e:7e:f7:12:90:0e:29:41:13:2a:ff:7d:1f:
9a:34:3e:7b:94:13:51:f4:2e:4a:a8:35:3b:ea:e0:0d:cc:fc:
b3:86:5e:59:5e:ef:cf:69:d5:21:70:b6:20:8e:d7:ce:8e:ae:
4f:77:33:79:8d:84:e6:9b:cc:95:b5:9b:1b:8d:86:12:de:68:
bd:41:55:1c:24:ff:4a:3f:9a:85:b7:4e:f0:8f:0c:3c:d5:eb:
2e:88:80:19:c5:82:d0:84:47:d1:2a:02:a2:6b:2b:5a:ea:2d:
7a:33:ec:b5:75:d1:84:d5:9c:cf:6b:b6:de:d4:8d:dc:3d:07:
f3:af:da:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:59:03 2026 by rpki-client