Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oG-gWQzBNRMjX7Gvlcj9TdQs-fM.roa
File: oG-gWQzBNRMjX7Gvlcj9TdQs-fM.roa (raw, json)
Hash identifier: /odJdLEI0kUCykHDKjLbRsM/qVG/Nk4Ht9qf+Mn+jwI=
Subject key identifier: A0:6F:A0:59:0C:C1:35:13:23:5F:B1:AF:95:C8:FD:4D:D4:2C:F9:F3
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F41440615269D63E49E6F9535D24D5F8C
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oG-gWQzBNRMjX7Gvlcj9TdQs-fM.roa
Signing time: Wed 08 Jul 2026 10:26:44 +0000
ROA not before: Wed 08 Jul 2026 10:26:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 37.98.145.0/24 maxlen: 24
77.107.88.0/24 maxlen: 24
79.99.146.0/24 maxlen: 24
80.240.94.0/24 maxlen: 24
81.168.80.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.153.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:44:06:15:26:9d:63:e4:9e:6f:95:35:d2:4d:5f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 8 10:26:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a06fa0590cc13513235fb1af95c8fd4dd42cf9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:d6:03:30:8c:af:16:4e:1d:37:c8:21:b7:
eb:a3:0d:60:4a:90:9c:e6:d2:00:c2:0c:0b:db:ba:
7d:a5:5a:35:06:8c:28:3d:6a:9a:7b:e0:5c:c7:fa:
7d:2d:23:42:52:af:60:93:0d:ee:2b:a1:5b:e0:cf:
62:76:99:68:9b:87:65:63:f6:92:81:93:f7:3b:8e:
ad:54:21:76:be:0f:a4:af:2f:56:ce:1c:b8:6d:ac:
72:be:10:42:71:2b:26:20:f9:0c:ba:0d:0c:25:ce:
d6:b4:07:40:df:ca:e5:03:f5:2f:7d:fc:9f:c5:8c:
2a:9b:6a:ec:e7:4c:e3:1e:d8:75:b9:46:d1:1e:2e:
1d:f5:50:55:db:a2:b0:69:fa:73:a1:56:b7:8e:1b:
a9:69:bb:30:33:5c:85:57:35:8e:a5:0b:dc:37:bb:
65:50:02:f6:cd:7d:c6:5a:9d:b3:5d:c4:57:6f:27:
82:82:9e:c8:e0:43:bb:12:26:8e:a0:3d:8b:1d:91:
1f:8e:a3:eb:bf:76:d9:2a:eb:5c:26:a3:e4:87:96:
f8:79:f1:59:c8:65:62:f4:6b:99:47:b4:c8:2b:45:
76:ea:e0:1f:d8:31:ee:6b:b1:ec:c1:d6:ad:3e:18:
d1:b6:04:c9:41:33:07:85:bc:6b:30:df:9f:2f:ec:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6F:A0:59:0C:C1:35:13:23:5F:B1:AF:95:C8:FD:4D:D4:2C:F9:F3
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oG-gWQzBNRMjX7Gvlcj9TdQs-fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.145.0/24
77.107.88.0/24
79.99.146.0/24
80.240.94.0/24
81.168.80.0/24
82.152.8.0/24
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0/24
82.152.98.0/24
82.152.109.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.66.0/24
82.153.205.0/24
109.176.40.0-109.176.55.255
109.176.153.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:13:06:80:ef:6b:b9:52:af:a3:bd:b4:c7:c2:01:9e:19:df:
d1:80:b3:f3:b1:56:51:c5:44:f7:03:b7:b5:d0:3b:6f:a6:ab:
af:bc:2a:17:3c:23:b7:8f:f1:22:91:49:0e:7d:71:8a:36:fe:
d1:83:0e:15:13:f6:89:73:af:1b:76:10:94:0f:8e:80:82:96:
1e:bb:47:d6:ea:ae:ef:af:a3:63:ed:81:81:57:11:b5:6b:10:
9d:59:38:19:5f:2a:7e:b5:d5:5b:22:9d:2c:fc:74:ea:21:72:
60:00:0b:a4:7d:b3:ad:73:ca:4b:a3:97:3d:f7:e1:24:e8:f1:
4c:28:fb:e4:72:1a:a1:28:f5:95:02:e2:bd:9f:2f:4f:5b:4b:
73:48:e7:19:a4:c1:b9:96:74:8d:49:ee:cc:bd:6d:67:45:91:
cf:14:e5:7b:02:1d:0f:09:78:d3:8f:46:d3:55:73:fd:20:d3:
51:48:6d:50:40:68:cd:90:79:40:2b:61:85:d0:94:69:c9:37:
38:02:2e:14:30:bf:27:5e:26:08:66:fb:76:d1:b2:57:c6:2e:
4a:63:f8:c7:6d:19:fd:bf:58:57:73:ab:c0:48:31:92:16:58:
c2:e0:7a:9c:85:6e:ea:d4:a6:2d:4a:77:2a:45:7c:03:d7:25:
39:00:bb:da
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAZ9BRAYVJp1j5J5vlTXSTV+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzA4MTAyNjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDZmYTA1OTBjYzEzNTEzMjM1ZmIxYWY5NWM4ZmQ0ZGQ0MmNmOWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQXWAzCMrxZOHTfIIbfrow1gSpCc
5tIAwgwL27p9pVo1BowoPWqae+Bcx/p9LSNCUq9gkw3uK6Fb4M9idplom4dlY/aS
gZP3O46tVCF2vg+kry9Wzhy4baxyvhBCcSsmIPkMug0MJc7WtAdA38rlA/Uvffyf
xYwqm2rs50zjHth1uUbRHi4d9VBV26KwafpzoVa3jhupabswM1yFVzWOpQvcN7tl
UAL2zX3GWp2zXcRXbyeCgp7I4EO7EiaOoD2LHZEfjqPrv3bZKutcJqPkh5b4efFZ
yGVi9GuZR7TIK0V26uAf2DHua7HswdatPhjRtgTJQTMHhbxrMN+fL+wCkwIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFKBvoFkMwTUTI1+xr5XI/U3ULPnzMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvb0ctZ1dRekJOUk1qWDdHdmxjajlUZFFzLWZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4DBAAl
YpEDBABNa1gDBABPY5IDBABQ8F4DBABRqFADBABSmAgwDAMEAFKYOQMEAFKYOgME
AFKYSQMEAFKYSwMEAFKYYgMEAFKYbQMEAFKY4gMEAFKY8AMEAFKY8wMEAFKZQgME
AFKZzTAMAwQDbbAoAwQDbbAwAwQAbbCZAwQA1YKCAwQA1YKVAwQA1drWMA0GCSqG
SIb3DQEBCwUAA4IBAQAOEwaA72u5Uq+jvbTHwgGeGd/RgLPzsVZRxUT3A7e10Dtv
pquvvCoXPCO3j/EikUkOfXGKNv7Rgw4VE/aJc68bdhCUD46AgpYeu0fW6q7vr6Nj
7YGBVxG1axCdWTgZXyp+tdVbIp0s/HTqIXJgAAukfbOtc8pLo5c99+Ek6PFMKPvk
chqhKPWVAuK9ny9PW0tzSOcZpMG5lnSNSe7MvW1nRZHPFOV7Ah0PCXjTj0bTVXP9
INNRSG1QQGjNkHlAK2GF0JRpyTc4Ai4UML8nXiYIZvt20bJXxi5KY/jHbRn9v1hX
c6vASDGSFljC4HqchW7q1KYtSncqRXwD1yU5ALva
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:01 2026 by rpki-client