Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zbNZiF0k2AxFt8mS4UROa-__uYM.roa
File: zbNZiF0k2AxFt8mS4UROa-__uYM.roa (raw, json)
Hash identifier: Z23tKY9tg+l/wFvXob3U0VWyX9uhPB9bjc5WyVNbHlw=
Subject key identifier: CD:B3:59:88:5D:24:D8:0C:45:B7:C9:92:E1:44:4E:6B:EF:FF:B9:83
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F8423074BF583CEBC1618FA175BEC8CEA
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zbNZiF0k2AxFt8mS4UROa-__uYM.roa
Signing time: Tue 21 Jul 2026 10:05:15 +0000
ROA not before: Tue 21 Jul 2026 10:05:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 81.5.161.0/24 maxlen: 24
82.152.60.0/24 maxlen: 24
82.152.63.0/24 maxlen: 24
82.152.69.0/24 maxlen: 24
82.152.220.0/24 maxlen: 24
82.152.223.0/24 maxlen: 24
82.153.151.0/24 maxlen: 24
82.153.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:23:07:4b:f5:83:ce:bc:16:18:fa:17:5b:ec:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 21 10:05:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdb359885d24d80c45b7c992e1444e6befffb983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:96:56:db:3c:a4:bd:75:09:51:8d:d4:24:
bb:4f:1f:ab:81:09:d7:0d:07:72:f0:40:74:0e:66:
54:9c:73:61:26:2b:3a:52:70:dd:a7:13:6a:75:2d:
0e:31:43:71:25:e4:0c:ca:f7:1e:59:b5:c1:14:b8:
90:00:49:93:a6:16:d2:06:2e:fa:8b:75:55:84:14:
76:b1:d9:b3:c7:a9:49:66:6a:9b:fb:4b:ec:e2:28:
e7:40:ba:21:8d:30:b5:13:cb:7b:e6:77:ce:2f:cd:
c9:31:91:ae:34:c4:e6:17:62:51:f2:c1:09:cd:0d:
27:a7:6b:5f:6a:85:a5:3c:bf:19:4c:af:15:e3:1a:
f6:07:ff:44:ed:72:2e:41:e4:15:b5:c9:45:e0:b9:
a6:1c:59:8c:04:c4:4c:ce:6f:d7:2b:c3:ab:47:00:
e7:04:37:f2:89:c9:d3:1d:ff:69:0d:5d:39:d2:f7:
74:3f:c8:88:48:bf:d9:cf:d3:eb:5a:31:00:e7:36:
a4:09:6e:75:7d:c9:5e:3e:d5:12:6e:65:66:cb:d9:
d4:fc:30:c4:0e:69:1d:1f:ef:a6:01:de:07:8b:13:
ef:6c:0c:3a:96:01:15:23:fb:e2:3d:d9:69:87:36:
71:10:1f:a4:26:78:64:40:c5:1a:ce:9b:83:5d:1d:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B3:59:88:5D:24:D8:0C:45:B7:C9:92:E1:44:4E:6B:EF:FF:B9:83
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zbNZiF0k2AxFt8mS4UROa-__uYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.161.0/24
82.152.60.0/24
82.152.63.0/24
82.152.69.0/24
82.152.220.0/24
82.152.223.0/24
82.153.151.0/24
82.153.234.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c6:e4:8c:da:53:82:22:a4:c8:bb:bc:af:f3:0d:16:79:7e:
d0:dd:fb:07:f2:94:e0:b9:8c:31:9d:96:6f:90:8f:4b:3e:7f:
79:c4:f9:0a:3a:e4:c0:bb:1a:ef:19:b7:63:65:b2:75:2c:72:
87:fb:7d:07:04:4f:bb:bc:8d:c2:a1:5f:10:78:9e:d3:ed:63:
16:cd:ed:c4:0c:76:22:5d:ae:1f:fb:19:4f:aa:8d:4a:13:83:
e6:10:54:4b:6c:26:92:c8:64:be:4b:ab:19:5b:0e:d0:79:b8:
ee:48:68:5b:d5:31:e3:af:08:1e:f0:74:dc:06:f5:75:e8:25:
82:2d:4b:65:45:37:83:c6:d1:6c:6c:f0:6d:b8:70:9e:9e:d7:
5a:04:2e:1c:d2:7f:ba:4d:c3:a8:5c:6c:05:2f:94:6f:1a:e1:
a4:a8:78:2f:c6:67:4c:79:5d:d7:ad:0b:cf:11:6f:ce:2a:cb:
29:7b:d9:20:96:61:23:cb:51:01:fb:7c:7c:fb:f2:78:f8:10:
bd:76:be:1b:76:bc:e6:c6:d5:ba:ce:71:eb:86:41:ba:12:46:
c0:18:4b:d5:62:5a:b8:a4:2d:51:20:29:58:42:4f:74:ba:21:
08:fe:53:f9:fd:5e:07:70:cb:5b:55:d0:bd:26:e7:69:f9:dd:
5e:28:bb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:36 2026 by rpki-client