Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n1Xj8V4WBd_xmxVBjtlmV9aPk2E.roa
File: n1Xj8V4WBd_xmxVBjtlmV9aPk2E.roa (raw, json)
Hash identifier: FdgMFgxRtdzkDoev1jpOyc4UUKG0oRBsKGT03N0Q1M8=
Subject key identifier: 9F:55:E3:F1:5E:16:05:DF:F1:9B:15:41:8E:D9:66:57:D6:8F:93:61
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0D7D41668E2E8AD5324240AE682466BF3
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n1Xj8V4WBd_xmxVBjtlmV9aPk2E.roa
Signing time: Fri 25 Sep 2026 09:09:55 +0000
ROA not before: Fri 25 Sep 2026 09:09:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 82.152.78.0/24 maxlen: 24
82.152.80.0/24 maxlen: 24
82.152.112.0/24 maxlen: 24
82.152.119.0/24 maxlen: 24
82.152.123.0/24 maxlen: 24
82.152.124.0/24 maxlen: 24
82.152.126.0/24 maxlen: 24
82.152.135.0/24 maxlen: 24
82.152.185.0/24 maxlen: 24
82.152.235.0/24 maxlen: 24
82.152.237.0/24 maxlen: 24
82.152.239.0/24 maxlen: 24
82.153.47.0/24 maxlen: 24
82.153.48.0/24 maxlen: 24
82.153.59.0/24 maxlen: 24
82.153.87.0/24 maxlen: 24
82.153.176.0/24 maxlen: 24
82.153.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:d4:16:68:e2:e8:ad:53:24:24:0a:e6:82:46:6b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 25 09:09:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f55e3f15e1605dff19b15418ed96657d68f9361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:51:29:0d:73:3b:39:6a:73:a3:b5:b7:7b:
99:6d:fe:9f:0e:76:38:63:3b:d6:00:24:c5:82:c5:
cf:69:43:35:0b:6d:12:cb:db:d2:22:27:3d:86:d8:
c2:93:e5:cf:31:49:cf:3d:cf:a5:06:87:c7:7c:2d:
bf:24:c1:b5:04:4f:83:8f:7a:e1:c3:15:cf:ea:e1:
a2:13:71:b7:bc:bc:f6:97:ae:d0:44:c5:ab:45:ab:
04:73:33:1e:12:d9:6c:5c:57:42:e5:5b:2d:87:97:
ba:1c:97:bf:1a:1c:ff:83:64:11:32:f2:58:f1:bb:
47:69:cc:12:c3:f9:97:6e:e8:09:1d:fb:d0:44:bf:
b7:d5:e7:76:48:b1:ff:a8:ba:ee:6d:9a:84:67:1e:
05:d3:91:21:32:41:b3:01:7e:c9:2d:62:cd:56:5c:
35:1d:c7:3d:0c:db:64:f6:44:fd:66:75:b8:8f:75:
ca:33:1b:91:d9:8a:24:ac:68:c2:bd:63:a0:78:7b:
45:e1:57:92:d1:20:48:1e:3d:ff:0d:4c:a0:5f:88:
cd:5a:7e:60:e3:dc:26:53:e5:f8:62:a7:41:d8:f1:
7e:89:7e:6d:60:20:76:c6:95:b3:4a:ec:7c:6c:f4:
e5:71:d9:02:9e:4e:60:29:c1:b3:c7:69:5b:62:c3:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:55:E3:F1:5E:16:05:DF:F1:9B:15:41:8E:D9:66:57:D6:8F:93:61
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n1Xj8V4WBd_xmxVBjtlmV9aPk2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.78.0/24
82.152.80.0/24
82.152.112.0/24
82.152.119.0/24
82.152.123.0-82.152.124.255
82.152.126.0/24
82.152.135.0/24
82.152.185.0/24
82.152.235.0/24
82.152.237.0/24
82.152.239.0/24
82.153.47.0-82.153.48.255
82.153.59.0/24
82.153.87.0/24
82.153.176.0/24
82.153.188.0/24
Signature Algorithm: sha256WithRSAEncryption
54:80:b5:c1:4a:5d:41:19:9f:38:c5:55:0d:24:91:69:88:94:
76:f9:2f:33:cc:29:12:57:51:fc:dd:c0:d2:20:66:90:b6:cd:
b2:a9:b1:6c:97:0d:01:b3:9b:27:04:cc:2e:81:8e:7c:25:58:
f5:2b:2a:b0:a3:e3:91:ed:c5:e8:f9:a4:a0:f7:e3:f6:80:3c:
02:d6:ad:54:cc:fe:c5:27:e8:13:f0:54:c4:5f:49:03:28:98:
b1:92:44:29:f4:2a:50:b0:cf:04:0e:1a:81:d3:15:1f:c8:14:
fc:b3:da:6b:12:8e:79:63:7a:de:d1:15:6a:19:2c:35:de:20:
64:05:4c:d6:cd:8b:4e:5e:57:dc:62:f9:47:25:9b:18:f6:32:
3e:c6:04:d8:10:de:a5:a6:81:30:c3:2a:5c:9f:e1:9b:e7:67:
7a:b2:50:31:33:b5:3d:12:e5:3c:82:23:24:58:b5:c4:95:04:
28:07:8f:52:98:6c:17:cd:6f:4b:85:c8:84:8f:dd:1d:5e:d7:
3a:29:42:92:c2:55:9e:fb:65:bd:c4:7a:22:a3:8e:16:d1:fa:
8b:99:0b:f6:88:78:dd:1f:bf:14:88:b4:ca:ef:b8:22:6d:fb:
97:95:96:5f:5a:dd:60:51:51:3e:01:6e:00:79:63:34:93:21:
1c:52:82:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:35:58 2026 by rpki-client