Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5R71g1wQZrTxopdyQrtjWHiYl6k.roa
File: 5R71g1wQZrTxopdyQrtjWHiYl6k.roa (raw, json)
Hash identifier: Rq8n4HEKDCiu/cDq1pI8qYHWyg1D96S8IAuStbYUYBc=
Subject key identifier: E5:1E:F5:83:5C:10:66:B4:F1:A2:97:72:42:BB:63:58:78:98:97:A9
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23690495777A801D2F4EF8ABF402ECCC
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5R71g1wQZrTxopdyQrtjWHiYl6k.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213784
IP address blocks: 82.152.13.0/24 maxlen: 24
82.152.20.0/24 maxlen: 24
82.152.21.0/24 maxlen: 24
82.152.29.0/24 maxlen: 24
82.152.30.0/24 maxlen: 24
82.152.95.0/24 maxlen: 24
82.152.121.0/24 maxlen: 24
82.152.224.0/24 maxlen: 24
82.152.228.0/24 maxlen: 24
82.152.229.0/24 maxlen: 24
82.152.230.0/24 maxlen: 24
82.152.232.0/24 maxlen: 24
82.152.236.0/24 maxlen: 24
82.152.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:04:95:77:7a:80:1d:2f:4e:f8:ab:f4:02:ec:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e51ef5835c1066b4f1a2977242bb6358789897a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:d3:c1:4a:d8:31:8b:10:05:5a:78:42:d1:
e0:4d:53:22:ce:52:df:ed:6d:37:8e:e7:48:28:ee:
c0:9e:c7:df:6b:8c:6e:cf:7c:25:00:c9:2e:c3:35:
0e:13:11:99:ea:80:ff:ba:2f:3b:d7:01:34:ce:41:
aa:d7:10:bf:8a:f6:98:2a:01:0e:d4:eb:26:50:6d:
6a:66:be:46:80:e2:0d:31:44:1d:2a:9a:4b:ff:ea:
88:98:3f:0f:c3:21:a0:33:8a:ba:d3:6c:0c:96:8c:
d1:7b:d0:06:ac:f9:ad:7d:2f:2f:ed:ff:c4:aa:26:
8b:ff:07:67:7c:b8:1e:65:f7:5b:7c:b0:81:3b:f9:
9e:95:86:17:47:2d:7b:14:ef:71:70:c3:bb:b7:c9:
a2:12:38:61:0e:18:7b:41:b8:31:de:c9:6c:4e:f2:
3c:63:b8:8a:12:6f:f4:e5:f8:c2:7e:88:3f:a0:8c:
10:68:8b:ed:54:f2:5f:ac:b6:d0:cd:0e:89:c3:a9:
99:d6:20:35:35:06:03:52:aa:53:2c:91:ad:3a:c6:
82:44:dd:e3:4f:52:11:7e:f9:83:5a:2d:84:79:1e:
9a:33:50:29:c6:b8:bf:ee:a6:21:cf:97:e4:6f:a6:
46:80:3a:48:af:8b:6d:1b:f2:65:88:37:da:cc:81:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1E:F5:83:5C:10:66:B4:F1:A2:97:72:42:BB:63:58:78:98:97:A9
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5R71g1wQZrTxopdyQrtjWHiYl6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.13.0/24
82.152.20.0/23
82.152.29.0-82.152.30.255
82.152.95.0/24
82.152.121.0/24
82.152.224.0/24
82.152.228.0-82.152.230.255
82.152.232.0/24
82.152.236.0/24
82.152.246.0/24
Signature Algorithm: sha256WithRSAEncryption
83:1c:13:cc:b1:94:70:70:a5:09:69:1a:f1:b1:dc:a0:11:ba:
a6:0f:bc:04:40:12:ad:3e:7f:01:26:4d:19:f0:38:e8:61:c6:
51:89:98:89:cb:ea:80:29:82:bf:1f:b6:5c:b8:96:2d:88:0a:
44:9a:9d:b5:47:1a:14:75:64:4c:8b:63:17:ad:66:5d:e1:95:
56:17:78:a7:c3:91:aa:55:1e:fd:03:b8:1b:22:94:0b:fc:0a:
ab:9e:6f:9a:ee:a4:4e:04:bc:1b:3e:1e:d6:3c:2c:14:00:07:
08:b0:c5:85:c1:38:38:d0:81:c3:c2:ee:91:23:b9:44:23:8f:
f1:b3:7b:7a:cc:27:a5:90:76:d4:e5:5e:71:c0:29:88:4c:45:
5f:01:b5:39:bc:25:7f:64:8c:39:b1:ab:51:31:59:8f:b4:f0:
6b:ad:5a:65:69:72:1f:d1:65:60:f2:f5:ea:bf:74:71:6a:25:
df:0b:7e:f8:90:fe:91:92:dc:e6:01:da:ce:9f:23:08:6d:a0:
3a:a4:ff:8b:32:7e:5a:1c:94:10:ec:44:f5:79:01:e9:9f:ff:
e1:fe:eb:f5:2a:1a:e8:db:92:18:19:36:63:bf:51:b3:2d:db:
00:76:fa:d9:96:79:b1:ae:68:eb:37:fd:29:5d:b9:f9:cc:58:
03:cc:21:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:13 2026 by rpki-client