Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1g9SpLDT1wR7bWFgDRn4OnFTqbo.roa
File: 1g9SpLDT1wR7bWFgDRn4OnFTqbo.roa (raw, json)
Hash identifier: SQf6XougLuJOm4S2Ag2WwA9UDrQVfb/2937gUb6Dpew=
Subject key identifier: D6:0F:52:A4:B0:D3:D7:04:7B:6D:61:60:0D:19:F8:3A:71:53:A9:BA
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FFA009FED51425C3A96B114F83152C2A8
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1g9SpLDT1wR7bWFgDRn4OnFTqbo.roa
Signing time: Thu 13 Aug 2026 07:22:52 +0000
ROA not before: Thu 13 Aug 2026 07:22:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 37.98.145.0/24 maxlen: 24
77.107.88.0/24 maxlen: 24
79.99.146.0/24 maxlen: 24
80.240.94.0/24 maxlen: 24
81.168.32.0/24 maxlen: 24
81.168.80.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.197.0/24 maxlen: 24
82.152.200.0/24 maxlen: 24
82.152.211.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
89.213.66.0/24 maxlen: 24
89.213.67.0/24 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.153.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:00:9f:ed:51:42:5c:3a:96:b1:14:f8:31:52:c2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 13 07:22:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d60f52a4b0d3d7047b6d61600d19f83a7153a9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:27:00:9c:f8:29:19:d2:7f:fd:02:74:7b:
94:25:90:b1:86:65:a6:cc:97:2a:18:c2:12:6e:79:
7f:67:ce:09:a2:11:9a:eb:88:57:a3:bf:94:8e:c3:
ea:44:85:f4:f7:c5:79:bc:8e:94:08:97:95:7b:38:
54:cf:d2:ae:54:ac:80:c4:16:05:50:79:97:75:d0:
96:14:ef:41:c0:0c:ee:a8:fc:93:8f:b8:89:9d:8e:
c0:c9:f8:22:09:c2:c9:42:1c:05:76:c7:ed:50:c0:
7d:e9:a6:75:58:73:29:35:42:ab:51:63:c0:71:ef:
3e:93:f3:11:66:ee:9c:a8:d6:db:e8:f0:28:5a:ed:
8c:7e:77:bb:2f:80:64:ee:67:3d:0a:ec:ba:14:b0:
83:ce:9f:3c:88:e2:80:d9:92:45:8b:6c:eb:44:d3:
c1:04:eb:22:b1:03:33:d3:92:9a:ad:ca:4c:6a:6d:
74:0b:50:e1:80:e7:45:1b:e1:e9:6b:c4:ac:38:2b:
fb:bb:bf:f6:7c:22:21:7d:bf:74:40:ec:2a:1f:25:
e8:e5:86:a6:d2:70:92:6f:8f:43:b5:c9:91:9d:3b:
06:9c:5f:2d:37:7a:11:c6:86:81:e9:65:45:a4:1a:
d7:08:4f:52:d3:5e:9b:81:83:b8:7b:d9:de:a8:66:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0F:52:A4:B0:D3:D7:04:7B:6D:61:60:0D:19:F8:3A:71:53:A9:BA
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1g9SpLDT1wR7bWFgDRn4OnFTqbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.145.0/24
77.107.88.0/24
79.99.146.0/24
80.240.94.0/24
81.168.32.0/24
81.168.80.0/24
82.152.8.0/24
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0/24
82.152.98.0/24
82.152.109.0/24
82.152.197.0/24
82.152.200.0/24
82.152.211.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.66.0/24
82.153.205.0/24
89.213.66.0/23
109.176.40.0-109.176.55.255
109.176.153.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
Signature Algorithm: sha256WithRSAEncryption
78:91:9c:f5:5d:1d:57:96:93:44:35:a7:87:77:ff:50:f3:48:
08:ae:85:81:95:84:7a:da:db:cf:e1:07:f4:5e:08:4b:d5:b1:
af:70:c9:e8:71:f1:f8:82:d9:95:e4:87:65:ba:16:7e:2c:3e:
3a:8b:61:01:8c:22:da:2b:b7:06:b2:58:43:0b:47:3c:21:d7:
2b:07:33:b9:e6:7f:27:91:34:6f:fc:58:12:32:9f:a7:9d:41:
f6:74:49:d4:95:44:67:24:a3:af:c5:d3:76:5f:32:42:28:a9:
fd:14:85:2d:c8:be:bd:c6:82:c3:9f:99:b6:8b:61:ae:50:4b:
c9:51:4c:bb:91:d8:79:5f:5b:c8:62:d7:93:d7:91:b5:9e:f7:
29:20:59:18:5c:26:93:8b:38:2e:2a:fa:2b:02:71:2a:2e:74:
e8:5d:d5:51:98:2b:ab:1d:91:50:c5:74:1b:6e:88:a1:5c:e9:
88:11:8c:19:6b:03:0d:b2:c2:e5:ad:e9:4d:c0:0f:b2:de:3f:
a8:5a:95:4a:9f:85:dc:aa:f2:4f:1e:74:51:d5:d2:17:ad:81:
69:e7:a4:78:f2:ac:06:2e:6d:25:5e:e6:17:64:b8:67:07:08:
84:45:d6:b5:43:48:e9:3a:9a:2b:c6:c8:f4:06:77:32:ef:55:
24:cf:d6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:17 2026 by rpki-client