Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5JwaUSKR4OkAX-yV2Q255aMY1DQ.roa
File: 5JwaUSKR4OkAX-yV2Q255aMY1DQ.roa (raw, json)
Hash identifier: V85lyJyK+rFT8blBf10ZM/R16dHF41y2RHMJT2qOD6w=
Subject key identifier: E4:9C:1A:51:22:91:E0:E9:00:5F:EC:95:D9:0D:B9:E5:A3:18:D4:34
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0EC0C897643C424298FD6041AD07125B0
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5JwaUSKR4OkAX-yV2Q255aMY1DQ.roa
Signing time: Tue 29 Sep 2026 07:23:59 +0000
ROA not before: Tue 29 Sep 2026 07:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56264
IP address blocks: 81.168.42.0/24 maxlen: 24
81.168.43.0/24 maxlen: 24
81.168.60.0/24 maxlen: 24
81.168.78.0/24 maxlen: 24
82.152.28.0/24 maxlen: 24
82.152.83.0/24 maxlen: 24
82.152.115.0/24 maxlen: 24
82.152.120.0/24 maxlen: 24
82.152.130.0/24 maxlen: 24
82.152.196.0/24 maxlen: 24
82.152.201.0/24 maxlen: 24
82.152.202.0/24 maxlen: 24
82.152.203.0/24 maxlen: 24
82.152.204.0/24 maxlen: 24
82.152.205.0/24 maxlen: 24
82.152.206.0/24 maxlen: 24
82.152.207.0/24 maxlen: 24
82.152.249.0/24 maxlen: 24
82.152.250.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.254.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.51.0/24 maxlen: 24
82.153.154.0/24 maxlen: 24
89.213.52.0/24 maxlen: 24
89.213.53.0/24 maxlen: 24
89.213.54.0/24 maxlen: 24
89.213.55.0/24 maxlen: 24
89.213.56.0/24 maxlen: 24
89.213.57.0/24 maxlen: 24
89.213.59.0/24 maxlen: 24
89.213.60.0/24 maxlen: 24
89.213.61.0/24 maxlen: 24
89.213.97.0/24 maxlen: 24
89.213.99.0/24 maxlen: 24
89.213.104.0/24 maxlen: 24
89.213.105.0/24 maxlen: 24
89.213.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:0c:89:76:43:c4:24:29:8f:d6:04:1a:d0:71:25:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 29 07:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e49c1a512291e0e9005fec95d90db9e5a318d434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:19:82:37:f8:7f:e8:8e:90:d7:4a:c1:6c:
6d:ad:82:5a:fa:49:76:31:97:ac:52:16:1b:bd:e1:
bb:a5:1a:e8:17:b9:25:7b:45:1e:3f:e0:9a:3e:ef:
99:67:34:7e:5a:b7:0f:cd:b5:f1:90:0f:9e:d8:47:
6d:58:f6:2f:03:b5:9b:7b:77:fe:b0:82:ac:0b:5b:
b6:4b:45:5a:92:6c:b4:8b:d3:45:c4:7f:1a:51:5f:
07:2b:12:45:8b:5c:50:7f:7d:e8:28:3d:66:e9:bb:
4f:49:96:76:b8:4c:b6:ad:d8:68:e6:44:bf:0b:6c:
ee:2a:54:46:86:b7:e1:d0:ff:2a:e4:64:0a:3b:8d:
ce:83:ab:0e:da:d0:e8:44:0f:54:50:2a:fc:92:2d:
83:8e:41:e8:14:fa:39:c9:00:45:53:5c:0b:ce:1c:
59:9e:ec:0f:f8:18:38:fc:56:60:94:6d:21:76:16:
15:e6:e8:d1:d2:a6:99:39:b3:32:b8:67:ca:38:c4:
26:f4:78:b3:f4:87:fe:85:99:df:d9:17:9b:70:6a:
6a:bd:00:c9:8b:03:68:25:ef:2f:85:b2:fa:ff:66:
5f:90:b1:8e:a3:b3:b3:e6:ce:c2:73:90:69:9b:96:
c3:ef:a5:06:1a:c1:be:91:59:cf:f5:d2:8b:04:8a:
fc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9C:1A:51:22:91:E0:E9:00:5F:EC:95:D9:0D:B9:E5:A3:18:D4:34
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5JwaUSKR4OkAX-yV2Q255aMY1DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.42.0/23
81.168.60.0/24
81.168.78.0/24
82.152.28.0/24
82.152.83.0/24
82.152.115.0/24
82.152.120.0/24
82.152.130.0/24
82.152.196.0/24
82.152.201.0-82.152.207.255
82.152.249.0-82.152.251.255
82.152.253.0-82.152.255.255
82.153.51.0/24
82.153.154.0/24
89.213.52.0-89.213.57.255
89.213.59.0-89.213.61.255
89.213.97.0/24
89.213.99.0/24
89.213.104.0/23
89.213.107.0/24
Signature Algorithm: sha256WithRSAEncryption
59:5c:b9:54:e9:dc:a0:26:39:d0:95:6b:f7:9a:8e:2b:96:bc:
b8:1d:e2:26:39:cf:0d:fc:8f:9c:9a:8c:c6:17:48:7e:00:dd:
32:fd:07:e2:f4:b0:91:67:b3:bf:06:df:ee:9f:5a:82:87:57:
8a:69:8d:c5:4d:0b:ab:de:ba:20:13:0a:ab:4b:94:2f:a6:19:
04:bd:1d:1f:f3:1e:e1:39:01:1e:23:bc:47:b3:02:bb:63:ac:
78:41:79:e6:c3:cb:cc:e6:0e:b2:e7:16:15:31:d9:08:3d:17:
00:c4:99:4e:77:90:e8:a2:82:51:b3:9e:34:3b:74:c6:be:c4:
9d:c2:e6:ee:a3:05:c8:b8:22:49:e7:97:95:eb:74:64:73:45:
4d:c9:a5:dd:83:dd:a8:36:56:3b:b8:d0:d4:18:0d:b2:09:4d:
41:24:bd:a5:fd:b0:e3:bc:34:4a:89:82:d7:fe:7a:a0:41:13:
bd:02:00:cc:39:64:f1:34:56:8f:80:ed:49:b5:93:1c:bb:4b:
7a:a7:5a:d3:b2:fa:10:22:d5:70:3b:5f:8a:54:16:83:41:50:
05:26:fd:4a:3c:11:a6:5c:7f:7c:76:05:09:29:ba:0a:14:b4:
d8:1d:82:23:39:a0:05:32:cd:6c:12:76:d7:65:e1:fc:0c:e6:
a4:ec:71:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 5 13:02:24 2026 by rpki-client