Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-MzoxDoo9BWMDH9VLZPUXrlZrWA.roa
File: 1-MzoxDoo9BWMDH9VLZPUXrlZrWA.roa (raw, json)
Hash identifier: /j1xZXJMiZGVV2lrBHpWzPC/lQv3tZl1ait4+5YNfdI=
Subject key identifier: F8:CC:E8:C4:3A:28:F4:15:8C:0C:7F:55:2D:93:D4:5E:B9:59:AD:60
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FEFAF56E439794DA9B669931A9F0963B0
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-MzoxDoo9BWMDH9VLZPUXrlZrWA.roa
Signing time: Tue 11 Aug 2026 07:17:53 +0000
ROA not before: Tue 11 Aug 2026 07:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216405
IP address blocks: 82.152.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:af:56:e4:39:79:4d:a9:b6:69:93:1a:9f:09:63:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 11 07:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8cce8c43a28f4158c0c7f552d93d45eb959ad60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:39:68:be:f9:05:92:a5:e5:53:08:3c:33:
2b:50:fd:6d:06:05:11:8f:c2:44:78:45:4e:43:99:
01:72:53:b4:78:d6:72:48:78:7c:1e:52:8e:74:c8:
10:c8:b1:98:78:d8:02:5e:67:5b:bc:1e:e5:4c:69:
33:a5:45:4b:88:c8:86:e0:a6:01:14:23:06:d8:0c:
fa:75:ff:78:02:ce:a0:74:c4:a3:03:6b:df:62:5d:
bf:ca:14:53:62:94:c2:32:03:98:e8:1f:48:35:22:
5c:9c:d6:1c:33:fa:e6:9a:cf:15:f9:ea:3b:3b:80:
81:ab:8e:12:0e:9e:05:ef:37:e5:18:02:d2:42:9a:
64:42:2f:b9:09:98:68:08:e4:59:4d:98:87:ad:4c:
65:d9:60:59:8c:e7:9b:04:fc:b2:dc:f2:71:00:66:
12:e3:4d:bd:e3:ac:80:8d:98:96:06:e7:8b:f9:35:
1a:93:b6:7c:2a:ab:6f:0f:5f:85:87:13:21:94:f8:
4f:eb:2e:80:13:6d:7a:d9:1e:3f:61:a7:3d:78:ed:
1e:56:d3:f6:63:24:de:88:af:f7:79:06:7e:92:58:
f7:9b:03:80:1f:98:01:a9:6e:f9:1e:27:82:33:5b:
13:bd:a4:c8:8e:49:46:5a:5c:7f:25:1b:62:d5:d5:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CC:E8:C4:3A:28:F4:15:8C:0C:7F:55:2D:93:D4:5E:B9:59:AD:60
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-MzoxDoo9BWMDH9VLZPUXrlZrWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.102.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b8:0f:d8:1e:0f:5a:45:10:06:fe:8b:dd:4e:b0:d5:3a:df:
4f:98:ed:1a:b8:5b:bd:a6:b5:a8:6d:5d:ba:de:29:13:25:a4:
5c:6a:12:f7:48:4f:23:bd:30:ea:24:e7:b9:38:d4:f4:98:d9:
d0:c8:e3:c3:00:8a:ab:5b:6c:ae:13:1a:1f:d5:a1:3e:23:ec:
69:6c:3b:80:ed:a3:a4:38:d8:32:02:9f:ae:f9:53:75:5b:d0:
f6:d5:f5:2a:21:11:33:bf:98:a7:3e:d4:ef:3b:f7:26:81:45:
e8:75:1a:b6:b7:96:d6:04:02:dc:c5:f3:18:f3:70:30:f6:02:
69:a2:08:5b:08:6e:2f:06:0c:fe:3a:58:78:7c:9c:0c:cd:8c:
a7:f5:13:d1:e1:ed:fb:cd:dc:fd:e9:72:3a:ed:56:99:85:37:
68:d8:0b:7b:c7:f1:db:6d:21:e4:a1:bc:10:4f:52:0d:ff:5f:
5e:05:c9:34:2f:9a:76:a4:3e:94:87:a0:d2:d7:88:d0:3a:1c:
af:c3:22:0a:74:5f:fd:8a:2e:01:d4:5a:b4:53:1e:b4:2b:b9:
be:92:ae:0c:46:c7:05:a5:d8:f8:b4:e8:46:65:4a:37:e8:56:
cb:e7:0e:1d:bd:1b:a8:da:71:c0:31:ab:47:bb:21:26:59:00:
62:73:2d:39
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ/vr1bkOXlNqbZpkxqfCWOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODExMDcxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGNjZThjNDNhMjhmNDE1OGMwYzdmNTUyZDkzZDQ1ZWI5NTlhZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWM5aL75BZKl5VMIPDMrUP1tBgUR
j8JEeEVOQ5kBclO0eNZySHh8HlKOdMgQyLGYeNgCXmdbvB7lTGkzpUVLiMiG4KYB
FCMG2Az6df94As6gdMSjA2vfYl2/yhRTYpTCMgOY6B9INSJcnNYcM/rmms8V+eo7
O4CBq44SDp4F7zflGALSQppkQi+5CZhoCORZTZiHrUxl2WBZjOebBPyy3PJxAGYS
402946yAjZiWBueL+TUak7Z8KqtvD1+FhxMhlPhP6y6AE2162R4/Yac9eO0eVtP2
YyTeiK/3eQZ+klj3mwOAH5gBqW75HieCM1sTvaTIjklGWlx/JRti1dWiFQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPjM6MQ6KPQVjAx/VS2T1F65Wa1gMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvMS1Nem94RG9vOUJXTURIOVZMWlBVWHJsWnJXQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGEvNDlkYzAwLTk3ZTItNDYyOC1hZTM5LTQxMjI4ZTM5ZmY3
Yy8xL3ZsdUtLeEJ0TTBzTWJHSGhkNnBpOUVfZzQ3WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFKYZjAN
BgkqhkiG9w0BAQsFAAOCAQEADrgP2B4PWkUQBv6L3U6w1TrfT5jtGrhbvaa1qG1d
ut4pEyWkXGoS90hPI70w6iTnuTjU9JjZ0MjjwwCKq1tsrhMaH9WhPiPsaWw7gO2j
pDjYMgKfrvlTdVvQ9tX1KiERM7+Ypz7U7zv3JoFF6HUatreW1gQC3MXzGPNwMPYC
aaIIWwhuLwYM/jpYeHycDM2Mp/UT0eHt+83c/elyOu1WmYU3aNgLe8fx220h5KG8
EE9SDf9fXgXJNC+adqQ+lIeg0teI0Docr8MiCnRf/YouAdRatFMetCu5vpKuDEbH
BaXY+LToRmVKN+hWy+cOHb0bqNpxwDGrR7shJlkAYnMtOQ==
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:10 2026 by rpki-client