Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-1Bal7XjuONAwv2c77IOTaSDCog.roa
File: 1-1Bal7XjuONAwv2c77IOTaSDCog.roa (raw, json)
Hash identifier: cCjpWOy/VB5sXNjMualYl7I1qqb3bG4Ztgn+V/FuwRg=
Subject key identifier: FB:50:5A:97:B5:E3:B8:E3:40:C2:FD:9C:EF:B2:0E:4D:A4:83:0A:88
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A01F9BF267AC0CE39CF7F6879D0A04F79F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-1Bal7XjuONAwv2c77IOTaSDCog.roa
Signing time: Thu 20 Aug 2026 14:38:28 +0000
ROA not before: Thu 20 Aug 2026 14:38:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 109.176.15.0/24 maxlen: 24
213.130.134.0/24 maxlen: 24
213.130.156.0/24 maxlen: 24
213.130.157.0/24 maxlen: 24
213.218.237.0/24 maxlen: 24
213.218.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:9b:f2:67:ac:0c:e3:9c:f7:f6:87:9d:0a:04:f7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 20 14:38:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb505a97b5e3b8e340c2fd9cefb20e4da4830a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:ee:d5:6d:7e:e9:01:48:20:9a:58:53:e4:
69:cf:2b:99:76:96:ee:70:e7:dc:dd:a2:7d:fe:ca:
2f:26:d9:70:50:4a:59:28:12:96:dc:4b:36:85:3d:
87:92:83:37:38:9a:71:f1:fb:62:37:a4:f1:11:0f:
74:f4:3a:b9:2e:1a:e5:4c:6e:df:de:04:4c:00:e5:
10:bf:6b:27:55:c2:cd:2a:72:d2:6d:9b:48:be:8e:
d4:a2:a7:d5:38:c7:d2:87:bf:94:6b:3f:da:b1:58:
41:28:8c:bb:5b:4d:ea:a0:15:3c:d2:bf:e1:64:6c:
b6:6d:96:fc:43:04:64:0f:c4:bc:18:54:5f:2c:e9:
0d:60:38:9e:e7:ed:ce:7d:a5:48:53:ff:44:8a:60:
87:d7:51:2d:94:14:b8:7f:8e:5a:b8:9a:ef:10:a4:
ef:13:bb:2e:89:8d:e1:b0:9e:cc:4a:72:c9:d2:19:
42:e8:d2:ff:52:5b:fd:6f:ba:6a:1b:8f:b1:7e:fb:
bb:33:60:09:08:9c:04:fb:48:8e:78:94:90:af:55:
a8:1c:73:5e:4d:20:a1:39:83:58:2d:df:50:95:97:
29:45:5f:5a:e7:8e:99:bc:ef:82:ba:74:de:21:b7:
a4:37:93:bd:13:a8:1c:9a:1c:c7:e9:5d:33:45:c0:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:50:5A:97:B5:E3:B8:E3:40:C2:FD:9C:EF:B2:0E:4D:A4:83:0A:88
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-1Bal7XjuONAwv2c77IOTaSDCog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.15.0/24
213.130.134.0/24
213.130.156.0/23
213.218.237.0/24
213.218.255.0/24
Signature Algorithm: sha256WithRSAEncryption
51:37:8c:64:0b:58:ff:f1:c7:10:9c:95:d2:27:bc:d2:ff:91:
6a:98:ea:20:90:c2:71:0b:62:0c:98:b9:ec:e7:80:68:db:88:
82:05:0c:c2:fb:a7:8b:d0:0d:d2:c1:ac:5e:bd:d7:37:78:09:
39:2b:df:16:79:76:88:ea:cb:5c:cf:b0:fb:73:24:06:36:9a:
9c:55:9e:9b:42:af:29:35:83:4d:0f:89:14:d8:f5:70:fe:ac:
04:d4:0d:d0:47:45:82:31:8d:65:7d:29:90:58:c4:50:f3:cc:
ad:cc:66:7a:e8:b1:e4:45:7d:f5:f1:63:16:d1:9c:6c:ca:ce:
d7:1c:3e:82:ce:a9:57:af:de:c1:fe:66:4a:60:cc:0b:4b:f7:
d6:60:4f:dd:82:a9:25:80:cb:2e:77:c0:bd:7d:f1:10:e1:34:
59:61:3d:38:c9:56:94:ca:6f:08:90:cf:d6:f5:08:b7:59:2f:
6e:ad:a7:e2:90:01:59:06:79:71:90:63:6c:55:ae:e0:bc:43:
86:25:e1:61:65:db:7c:68:9b:ce:a6:eb:aa:69:79:d6:aa:fc:
52:6e:8b:58:cb:55:c9:6f:dd:9d:f9:44:fd:f3:7c:0b:02:84:
e6:ee:95:27:ad:a9:93:ec:00:d7:bb:41:0f:a8:a6:79:ad:ff:
54:ab:92:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAfm/JnrAzjnPf2h50KBPefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODIwMTQzODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjUwNWE5N2I1ZTNiOGUzNDBjMmZkOWNlZmIyMGU0ZGE0ODMwYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshDu1W1+6QFIIJpYU+RpzyuZdpbu
cOfc3aJ9/sovJtlwUEpZKBKW3Es2hT2HkoM3OJpx8ftiN6TxEQ909Dq5LhrlTG7f
3gRMAOUQv2snVcLNKnLSbZtIvo7UoqfVOMfSh7+Uaz/asVhBKIy7W03qoBU80r/h
ZGy2bZb8QwRkD8S8GFRfLOkNYDie5+3OfaVIU/9EimCH11EtlBS4f45auJrvEKTv
E7suiY3hsJ7MSnLJ0hlC6NL/Ulv9b7pqG4+xfvu7M2AJCJwE+0iOeJSQr1WoHHNe
TSChOYNYLd9QlZcpRV9a546ZvO+CunTeIbekN5O9E6gcmhzH6V0zRcAX4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtQWpe147jjQML9nO+yDk2kgwqIMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvMS0xQmFsN1hqdU9OQXd2MmM3N0lPVGFTRENvZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGEvNDlkYzAwLTk3ZTItNDYyOC1hZTM5LTQxMjI4ZTM5ZmY3
Yy8xL3ZsdUtLeEJ0TTBzTWJHSGhkNnBpOUVfZzQ3WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAG2wDwME
ANWChgMEAdWCnAMEANXa7QMEANXa/zANBgkqhkiG9w0BAQsFAAOCAQEAUTeMZAtY
//HHEJyV0ie80v+RapjqIJDCcQtiDJi57OeAaNuIggUMwvuni9AN0sGsXr3XN3gJ
OSvfFnl2iOrLXM+w+3MkBjaanFWem0KvKTWDTQ+JFNj1cP6sBNQN0EdFgjGNZX0p
kFjEUPPMrcxmeuix5EV99fFjFtGcbMrO1xw+gs6pV6/ewf5mSmDMC0v31mBP3YKp
JYDLLnfAvX3xEOE0WWE9OMlWlMpvCJDP1vUIt1kvbq2n4pABWQZ5cZBjbFWu4LxD
hiXhYWXbfGibzqbrqml51qr8Um6LWMtVyW/dnflE/fN8CwKE5u6VJ62pk+wA17tB
D6imea3/VKuSig==
-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:12 2026 by rpki-client