Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vyHBOi4c7KfT1h4uk3XY83juQl0.roa
File: vyHBOi4c7KfT1h4uk3XY83juQl0.roa (raw, json)
Hash identifier: c2xosuoyeBYXhBBDZyID7/j/aLGjNXFPQ3zAXsgRMtQ=
Subject key identifier: BF:21:C1:3A:2E:1C:EC:A7:D3:D6:1E:2E:93:75:D8:F3:78:EE:42:5D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DD93A4CEE677A01CFE6F490A457139720
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vyHBOi4c7KfT1h4uk3XY83juQl0.roa
Signing time: Wed 29 Apr 2026 12:32:49 +0000
ROA not before: Wed 29 Apr 2026 12:32:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213784
IP address blocks: 82.152.13.0/24 maxlen: 24
82.152.20.0/24 maxlen: 24
82.152.21.0/24 maxlen: 24
82.152.29.0/24 maxlen: 24
82.152.30.0/24 maxlen: 24
82.152.95.0/24 maxlen: 24
82.152.121.0/24 maxlen: 24
82.152.224.0/24 maxlen: 24
82.152.228.0/24 maxlen: 24
82.152.229.0/24 maxlen: 24
82.152.230.0/24 maxlen: 24
82.152.232.0/24 maxlen: 24
82.152.236.0/24 maxlen: 24
82.152.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:3a:4c:ee:67:7a:01:cf:e6:f4:90:a4:57:13:97:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 29 12:32:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf21c13a2e1ceca7d3d61e2e9375d8f378ee425d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:b0:7c:c4:aa:d9:e4:a6:42:47:46:ef:2a:
9f:fe:2b:32:73:1a:c0:d6:12:ed:68:f7:6a:54:7e:
70:72:1b:de:7c:48:c1:6e:49:4d:d2:2f:ec:06:5a:
71:49:13:f3:85:1f:7e:78:3e:7b:60:02:a7:8b:90:
5d:5d:70:4a:72:43:22:af:72:e3:57:d3:1a:28:80:
c6:9c:ec:2c:04:76:06:28:10:d5:44:12:10:49:6a:
03:55:de:0d:eb:b0:d3:73:0b:ab:46:2d:30:f7:a7:
d4:1a:05:1f:84:d2:81:4a:d5:82:b0:b7:86:52:8c:
a6:f1:59:5f:dc:06:b7:43:67:c1:26:98:7d:e6:e2:
d0:af:13:c6:83:93:7a:b5:80:64:aa:8a:79:a4:74:
f7:f5:c9:32:36:49:44:d3:f4:9e:7d:90:e3:47:8a:
36:b0:e3:0d:45:85:8a:f7:19:a7:29:cf:de:dd:ae:
7d:35:fd:d7:3e:3b:f8:cc:7c:f5:28:8d:91:c4:09:
69:48:46:ea:41:d8:b8:30:ef:4d:84:64:cd:8d:ad:
5a:ac:83:11:2e:0b:89:3e:4f:a2:d9:09:66:2a:38:
aa:8d:d4:4c:18:ca:f6:3e:04:02:ce:9b:8e:04:13:
2e:9c:bb:a9:3a:88:c4:3b:02:1b:17:c8:c9:15:a4:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:21:C1:3A:2E:1C:EC:A7:D3:D6:1E:2E:93:75:D8:F3:78:EE:42:5D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vyHBOi4c7KfT1h4uk3XY83juQl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.13.0/24
82.152.20.0/23
82.152.29.0-82.152.30.255
82.152.95.0/24
82.152.121.0/24
82.152.224.0/24
82.152.228.0-82.152.230.255
82.152.232.0/24
82.152.236.0/24
82.152.246.0/24
Signature Algorithm: sha256WithRSAEncryption
15:af:d6:2a:38:6e:3c:17:8d:19:6d:9f:16:48:38:0e:5a:de:
f7:50:0c:d0:a0:af:9e:d9:b2:53:51:bd:a6:f5:e1:3f:4f:c6:
e4:19:91:44:b2:54:a2:0e:78:0c:21:d7:cc:66:39:8b:d1:ee:
ed:19:9b:40:9f:e1:67:44:55:7c:be:16:a8:bd:67:d8:a9:56:
bd:37:88:15:af:53:83:a0:38:87:fc:26:18:9c:cc:02:4e:0e:
55:77:18:86:b6:d1:eb:ab:bb:4a:3b:b2:ca:c0:7a:65:6d:52:
0b:c8:27:16:b0:08:0b:0e:11:62:df:a3:dc:df:47:da:26:53:
7e:bb:88:b4:01:3e:5c:d7:38:0d:35:86:3d:db:b6:04:6c:40:
27:47:74:ae:e7:ee:e9:67:2d:b7:ef:a6:b9:63:72:b7:93:63:
1c:df:9d:a3:63:e9:05:c2:62:dc:23:5b:24:d6:a5:7f:bc:ba:
72:fe:d1:fb:57:ff:4e:5b:46:60:3e:89:2e:00:88:3f:3e:64:
e9:a2:64:f8:f0:5c:b8:62:ae:4a:69:80:c8:14:de:24:fb:58:
fe:15:a5:d6:8a:46:fa:e7:20:1a:56:3c:f7:80:1e:95:7f:a5:
6c:a7:40:da:a7:f2:34:98:8f:70:a9:57:a9:59:28:b0:03:7e:
f4:68:50:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:39 2026 by rpki-client