Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/58EYQoQhFEHgy_cpYduUL9RAYHg.roa
File: 58EYQoQhFEHgy_cpYduUL9RAYHg.roa (raw, json)
Hash identifier: NKptU3QcOnPx9qfjt9S84aC6AI+U0GfW7VwpoHe1Vxw=
Subject key identifier: E7:C1:18:42:84:21:14:41:E0:CB:F7:29:61:DB:94:2F:D4:40:60:78
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23691C5A52C37851E787CFA30E7B7291
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/58EYQoQhFEHgy_cpYduUL9RAYHg.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 81.5.156.0/24 maxlen: 24
81.168.41.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.140.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
82.153.249.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1c:5a:52:c3:78:51:e7:87:cf:a3:0e:7b:72:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7c1184284211441e0cbf72961db942fd4406078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:41:ab:81:3e:82:7a:96:e9:7f:c4:9c:a7:
77:1b:24:e0:e4:a2:eb:1b:5c:a2:b3:07:13:7b:5e:
67:9f:3e:47:3d:47:6b:f0:15:e0:59:82:be:bb:74:
3f:0b:3f:79:f2:e4:a7:22:f4:d6:46:2d:36:35:31:
cf:9a:50:e6:37:4a:b5:2d:6f:cf:b2:bf:48:6c:f1:
c1:a3:4b:4d:b5:5c:18:18:5b:35:3d:80:13:94:d0:
77:21:ff:cc:ce:de:df:fb:24:b5:74:b2:13:0b:4b:
e7:ef:bf:df:08:26:c5:8f:1e:7f:80:01:76:fe:d7:
25:22:82:f8:00:26:2d:7c:ab:fe:3a:66:ec:c4:82:
c1:32:42:e4:68:22:e2:c6:5c:aa:58:07:e2:79:b9:
f4:82:fa:9e:d4:1f:3b:4a:cd:90:39:0e:23:cf:a6:
7f:33:96:7a:8c:e9:10:f3:f8:e4:8b:9d:0e:d7:26:
dd:97:7c:98:c7:3f:fb:8b:8e:d1:10:e1:b2:09:a2:
74:5b:1e:12:57:fb:4e:f7:c4:7c:49:0d:71:d9:45:
eb:ea:46:c3:68:03:23:3e:9c:53:90:f9:7e:f6:54:
cb:3b:86:6e:c9:18:f4:2a:c5:cd:d8:7b:68:f9:4a:
be:14:86:b6:65:ba:27:4f:e1:7a:d0:91:bd:cc:3e:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C1:18:42:84:21:14:41:E0:CB:F7:29:61:DB:94:2F:D4:40:60:78
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/58EYQoQhFEHgy_cpYduUL9RAYHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
82.153.137.0/24
82.153.139.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.240.0/24
82.153.249.0-82.153.250.255
Signature Algorithm: sha256WithRSAEncryption
36:73:a4:d6:21:9b:ac:57:a3:3d:a1:64:a3:fc:76:f8:7d:bd:
c1:1c:bd:55:84:4c:d7:e5:c3:2b:ac:b1:60:86:a5:4a:7a:36:
9d:f3:0e:1b:c5:cf:b5:35:2a:26:fc:9b:7d:72:c7:53:11:99:
79:6a:bd:c9:ea:65:c0:6b:2a:c0:fa:05:e3:df:c4:36:57:87:
18:74:8d:4c:77:9f:c8:22:ac:3c:6c:b5:40:bb:68:c3:ea:1d:
e4:56:62:9e:76:d3:88:cb:1a:ee:c3:44:f3:0c:4b:3f:a0:7b:
93:4c:68:fd:4f:f5:08:e7:85:53:8f:61:08:40:a8:a8:b0:03:
90:56:2e:85:90:75:ee:eb:69:86:fb:f6:cc:cd:8d:38:ae:3e:
0c:ca:3b:a3:70:84:ea:4c:4a:ec:ad:c5:a6:b4:aa:e6:5a:ef:
90:28:78:87:d2:e6:08:38:a5:21:ae:5a:e3:b1:0e:fe:9b:0d:
91:e7:fd:a8:6b:10:00:b8:7d:ea:eb:fe:2c:e8:04:3d:d1:c4:
73:1f:a0:19:40:a7:ce:c6:ea:95:35:18:d2:1d:46:81:05:49:
bb:9a:af:0e:dd:1f:d4:1d:4d:8c:23:d1:01:fe:72:12:f9:32:
56:d7:20:49:e5:3f:9f:3b:00:6d:67:ee:3b:c8:e6:13:1a:3b:
d7:69:7e:11
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZ8jaRxaUsN4UeeHz6MOe3KRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2MxMTg0Mjg0MjExNDQxZTBjYmY3Mjk2MWRiOTQyZmQ0NDA2MDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo1Bq4E+gnqW6X/EnKd3GyTg5KLr
G1yiswcTe15nnz5HPUdr8BXgWYK+u3Q/Cz958uSnIvTWRi02NTHPmlDmN0q1LW/P
sr9IbPHBo0tNtVwYGFs1PYATlNB3If/Mzt7f+yS1dLITC0vn77/fCCbFjx5/gAF2
/tclIoL4ACYtfKv+OmbsxILBMkLkaCLixlyqWAfiebn0gvqe1B87Ss2QOQ4jz6Z/
M5Z6jOkQ8/jki50O1ybdl3yYxz/7i47REOGyCaJ0Wx4SV/tO98R8SQ1x2UXr6kbD
aAMjPpxTkPl+9lTLO4ZuyRj0KsXN2Hto+Uq+FIa2ZbonT+F60JG9zD78UQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFOfBGEKEIRRB4Mv3KWHblC/UQGB4MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvNThFWVFvUWhGRUhneV9jcFlkdVVMOVJBWUhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAUQWcAwQA
UagpAwQAUpmJMAwDBABSmYsDBABSmYwDBABSmd0DBABSmd8DBABSmfAwDAMEAFKZ
+QMEAFKZ+jANBgkqhkiG9w0BAQsFAAOCAQEANnOk1iGbrFejPaFko/x2+H29wRy9
VYRM1+XDK6yxYIalSno2nfMOG8XPtTUqJvybfXLHUxGZeWq9yeplwGsqwPoF49/E
NleHGHSNTHefyCKsPGy1QLtow+od5FZinnbTiMsa7sNE8wxLP6B7k0xo/U/1COeF
U49hCECoqLADkFYuhZB17utphvv2zM2NOK4+DMo7o3CE6kxK7K3FprSq5lrvkCh4
h9LmCDilIa5a47EO/psNkef9qGsQALh96uv+LOgEPdHEcx+gGUCnzsbqlTUY0h1G
gQVJu5qvDt0f1B1NjCPRAf5yEvkyVtcgSeU/nzsAbWfuO8jmExo712l+EQ==
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:20:28 2026 by rpki-client