Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7E9WWqeu0bskSt21TxcorAizAwA.roa
File: 7E9WWqeu0bskSt21TxcorAizAwA.roa (raw, json)
Hash identifier: 5fMmX21MKGB90A7TjMU6+Oo8D2uVvHXGR4YFlWFOI94=
Subject key identifier: EC:4F:56:5A:A7:AE:D1:BB:24:4A:DD:B5:4F:17:28:AC:08:B3:03:00
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368C7931B422A9B1D4AF768B06B8C67
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7E9WWqeu0bskSt21TxcorAizAwA.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134135
IP address blocks: 81.168.18.0/24 maxlen: 24
82.152.61.0/24 maxlen: 24
82.152.71.0/24 maxlen: 24
82.152.72.0/24 maxlen: 24
82.152.92.0/24 maxlen: 24
82.152.127.0/24 maxlen: 24
82.153.41.0/24 maxlen: 24
82.153.42.0/24 maxlen: 24
82.153.53.0/24 maxlen: 24
82.153.58.0/24 maxlen: 24
82.153.80.0/24 maxlen: 24
82.153.86.0/24 maxlen: 24
82.153.90.0/24 maxlen: 24
82.153.91.0/24 maxlen: 24
82.153.144.0/24 maxlen: 24
82.153.155.0/24 maxlen: 24
82.153.180.0/24 maxlen: 24
82.153.203.0/24 maxlen: 24
82.163.15.0/24 maxlen: 24
89.213.49.0/24 maxlen: 24
89.213.64.0/24 maxlen: 24
89.213.70.0/24 maxlen: 24
89.213.71.0/24 maxlen: 24
89.213.73.0/24 maxlen: 24
89.213.74.0/24 maxlen: 24
89.213.77.0/24 maxlen: 24
89.213.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c7:93:1b:42:2a:9b:1d:4a:f7:68:b0:6b:8c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec4f565aa7aed1bb244addb54f1728ac08b30300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:1c:b7:37:ae:84:5f:28:d3:43:f6:6f:42:
dc:88:16:c3:29:a5:2a:e6:07:54:39:63:3c:dd:7c:
3f:fd:2f:48:15:37:45:f8:67:ea:86:b2:73:f5:b5:
d9:80:47:03:5b:d9:f1:ab:61:fc:29:72:b2:41:5d:
39:48:d4:80:d1:43:10:0c:c2:53:2a:55:fe:60:68:
5d:9f:10:fb:cc:3a:72:ca:03:f9:92:60:9f:10:5f:
ff:65:fd:c0:40:60:23:8d:39:7c:b5:15:a9:ed:ec:
69:4c:55:8e:44:f1:70:7a:08:0f:14:f8:ef:c7:d6:
ee:ac:2a:86:46:12:04:2a:6f:9d:ca:77:0a:1c:a8:
41:b2:1d:bd:da:6c:a5:a4:f1:6b:2f:a7:97:77:0c:
02:81:75:f2:e1:76:12:1a:bb:6a:4a:5c:2d:d3:71:
c1:aa:3f:bf:c3:fe:89:09:a2:10:15:e3:e0:59:d7:
63:b9:1f:be:93:93:bb:2d:ff:d3:fd:2d:40:3e:50:
cc:b8:d6:7f:55:58:70:44:c7:15:5b:90:8d:de:18:
e9:52:c3:47:4b:67:05:06:a2:69:50:9a:a6:2f:d4:
85:96:c7:53:58:04:81:fe:3f:2b:62:8f:0b:e0:d2:
5d:12:ed:47:71:9c:3a:55:45:7a:76:b7:9c:a3:e4:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4F:56:5A:A7:AE:D1:BB:24:4A:DD:B5:4F:17:28:AC:08:B3:03:00
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7E9WWqeu0bskSt21TxcorAizAwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.18.0/24
82.152.61.0/24
82.152.71.0-82.152.72.255
82.152.92.0/24
82.152.127.0/24
82.153.41.0-82.153.42.255
82.153.53.0/24
82.153.58.0/24
82.153.80.0/24
82.153.86.0/24
82.153.90.0/23
82.153.144.0/24
82.153.155.0/24
82.153.180.0/24
82.153.203.0/24
82.163.15.0/24
89.213.49.0/24
89.213.64.0/24
89.213.70.0/23
89.213.73.0-89.213.74.255
89.213.77.0/24
89.213.79.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ea:d5:61:5d:4d:59:e4:3a:c7:13:26:e3:7e:b6:09:ba:e2:
31:5f:7e:6f:96:fb:13:48:fa:1a:01:dd:c9:94:92:16:1e:7e:
54:9c:78:b3:6f:a5:66:ee:7f:40:59:a5:95:5c:73:c2:39:30:
87:13:36:3c:03:dd:11:20:5b:10:59:4d:db:d9:99:18:d5:59:
dd:67:86:da:30:7c:6a:ee:f7:0f:49:dd:8c:6f:2a:91:c4:0b:
b0:82:d2:68:f2:75:69:51:3c:39:56:61:26:f4:ba:1a:75:57:
58:56:c6:ce:81:30:67:34:38:5c:84:ad:1c:3e:03:e4:0f:a9:
c5:b4:8c:90:42:1f:55:95:cc:ba:08:e8:3d:10:25:d6:63:3a:
28:56:fa:59:11:c6:a8:b1:2e:94:7f:f8:0d:62:c7:80:38:1f:
18:a2:b1:5e:56:07:4d:bc:51:22:1d:a9:f2:dc:ea:a6:1d:a2:
72:cf:99:c4:b8:60:ca:83:09:21:f7:45:04:7d:75:4f:81:f7:
fb:85:78:9e:c9:01:ad:ed:6d:c3:b0:2f:2a:df:93:f3:26:0e:
7c:15:6d:1a:07:da:f0:54:2e:c9:6a:da:71:9e:58:64:f0:48:
ae:ab:34:6b:b4:3a:63:3c:55:1d:09:8d:dd:38:3e:ed:b2:0f:
cf:26:a7:12
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAZ8jaMeTG0Iqmx1K92iwa4xnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzRmNTY1YWE3YWVkMWJiMjQ0YWRkYjU0ZjE3MjhhYzA4YjMwMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTUctzeuhF8o00P2b0LciBbDKaUq
5gdUOWM83Xw//S9IFTdF+GfqhrJz9bXZgEcDW9nxq2H8KXKyQV05SNSA0UMQDMJT
KlX+YGhdnxD7zDpyygP5kmCfEF//Zf3AQGAjjTl8tRWp7expTFWORPFweggPFPjv
x9burCqGRhIEKm+dyncKHKhBsh292mylpPFrL6eXdwwCgXXy4XYSGrtqSlwt03HB
qj+/w/6JCaIQFePgWddjuR++k5O7Lf/T/S1APlDMuNZ/VVhwRMcVW5CN3hjpUsNH
S2cFBqJpUJqmL9SFlsdTWASB/j8rYo8L4NJdEu1HcZw6VUV6dreco+Q7xQIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFOxPVlqnrtG7JErdtU8XKKwIswMAMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvN0U5V1dxZXUwYnNrU3QyMVR4Y29yQWl6QXdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBABR
qBIDBABSmD0wDAMEAFKYRwMEAFKYSAMEAFKYXAMEAFKYfzAMAwQAUpkpAwQAUpkq
AwQAUpk1AwQAUpk6AwQAUplQAwQAUplWAwQBUplaAwQAUpmQAwQAUpmbAwQAUpm0
AwQAUpnLAwQAUqMPAwQAWdUxAwQAWdVAAwQBWdVGMAwDBABZ1UkDBABZ1UoDBABZ
1U0DBABZ1U8wDQYJKoZIhvcNAQELBQADggEBAGrq1WFdTVnkOscTJuN+tgm64jFf
fm+W+xNI+hoB3cmUkhYeflSceLNvpWbuf0BZpZVcc8I5MIcTNjwD3REgWxBZTdvZ
mRjVWd1nhtowfGru9w9J3YxvKpHEC7CC0mjydWlRPDlWYSb0uhp1V1hWxs6BMGc0
OFyErRw+A+QPqcW0jJBCH1WVzLoI6D0QJdZjOihW+lkRxqixLpR/+A1ix4A4Hxii
sV5WB028USIdqfLc6qYdonLPmcS4YMqDCSH3RQR9dU+B9/uFeJ7JAa3tbcOwLyrf
k/MmDnwVbRoH2vBULslq2nGeWGTwSK6rNGu0OmM8VR0Jjd04Pu2yD88mpxI=
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:16:53 2026 by rpki-client