Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AVuxY3KB2xQ1rqlSqrG3wj9_WQg.roa
File: AVuxY3KB2xQ1rqlSqrG3wj9_WQg.roa (raw, json)
Hash identifier: sWu3MC3/9GK6Lr1qk3lGpI3OJ9NaYg9G3yQ13NpBYVQ=
Subject key identifier: 01:5B:B1:63:72:81:DB:14:35:AE:A9:52:AA:B1:B7:C2:3F:7F:59:08
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC78A4F69A1515BAC8CFC156B5FE47AD3
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AVuxY3KB2xQ1rqlSqrG3wj9_WQg.roa
Signing time: Mon 03 Aug 2026 12:12:38 +0000
ROA not before: Mon 03 Aug 2026 12:12:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.76.0/23 maxlen: 24
82.152.79.0/24 maxlen: 24
82.152.86.0/23 maxlen: 24
82.152.88.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.38.0/24 maxlen: 24
82.153.56.0/24 maxlen: 24
82.153.61.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
82.153.83.0/24 maxlen: 24
82.153.84.0/24 maxlen: 24
82.153.132.0/24 maxlen: 24
82.153.186.0/24 maxlen: 24
82.153.201.0/24 maxlen: 24
82.153.239.0/24 maxlen: 24
89.213.98.0/24 maxlen: 24
89.213.232.0/23 maxlen: 24
89.213.234.0/23 maxlen: 24
89.213.236.0/23 maxlen: 24
109.176.27.0/24 maxlen: 24
109.176.32.0/21 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.56.0/21 maxlen: 24
109.176.235.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:8a:4f:69:a1:51:5b:ac:8c:fc:15:6b:5f:e4:7a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 12:12:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=015bb1637281db1435aea952aab1b7c23f7f5908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:60:5d:82:98:7d:40:1b:57:5f:af:29:11:
cd:83:74:1f:5a:1e:db:e5:92:b0:98:b7:2d:ff:d9:
29:f0:ef:8d:f2:de:be:9c:d1:b8:9e:be:c8:6b:60:
a0:74:b5:08:a9:16:bc:9b:55:d0:0a:6d:2b:c7:b3:
49:c3:46:57:2c:ab:5c:da:ec:3a:1a:0c:69:c5:ab:
48:2d:09:ca:31:68:09:23:f0:16:da:c8:0e:7b:ff:
27:00:f6:0e:b7:15:32:35:3a:5d:68:f6:b1:a9:3e:
9a:32:d3:18:a8:c5:b8:37:07:43:f4:2f:a4:9f:30:
fd:1d:07:5b:7b:39:7e:11:d0:95:86:3b:74:1e:0f:
ba:95:a7:98:c7:9b:82:ce:20:59:6b:39:b3:ab:d2:
62:2e:ea:32:33:b6:1c:1a:94:24:f2:10:e6:ab:f2:
b6:12:a7:7f:93:ee:c2:06:b2:91:93:40:c0:10:75:
04:cb:17:bb:3c:89:3b:99:21:9d:40:29:be:7d:df:
22:be:de:30:ef:0f:ba:ba:d1:bc:2e:de:c7:02:4e:
c6:9f:9a:d4:f7:11:a2:48:35:63:bb:be:a0:56:99:
76:a1:98:0e:9f:06:be:84:ed:d1:0c:92:dd:03:f4:
eb:a9:71:50:06:bc:59:4e:48:83:f8:c0:3b:c0:4c:
d0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5B:B1:63:72:81:DB:14:35:AE:A9:52:AA:B1:B7:C2:3F:7F:59:08
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AVuxY3KB2xQ1rqlSqrG3wj9_WQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0-82.152.77.255
82.152.79.0/24
82.152.86.0-82.152.88.255
82.152.109.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.38.0/24
82.153.56.0/24
82.153.61.0/24
82.153.79.0/24
82.153.83.0-82.153.84.255
82.153.132.0/24
82.153.186.0/24
82.153.201.0/24
82.153.239.0/24
89.213.98.0/24
89.213.232.0-89.213.237.255
109.176.27.0/24
109.176.32.0/19
109.176.235.0/24
109.176.247.0/24
109.176.251.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
213.218.231.0/24
217.145.65.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:64:3d:bf:45:57:b6:95:a7:e6:d6:84:da:01:14:d4:1c:06:
a6:6a:74:b4:6b:32:33:28:6c:09:30:fa:ec:5a:0a:83:2d:d0:
01:b9:0b:5a:0c:2b:7f:24:72:23:ee:dc:6a:be:ee:4e:ff:77:
76:2e:56:17:52:c7:fa:42:80:18:0b:1a:62:23:83:61:35:34:
d5:90:5e:78:0d:d7:56:15:da:95:bf:af:68:4e:c7:2a:5b:d7:
ad:ed:2f:be:71:43:23:39:8c:d7:37:df:86:0b:b3:0a:ae:13:
70:ef:69:fc:9c:86:15:fd:7c:74:f0:a1:50:b5:32:fb:ee:6c:
e5:a8:e3:49:17:fd:3f:11:ab:e1:c6:51:f7:51:ef:04:6d:60:
0a:5d:4f:9e:97:ec:7b:e9:40:8c:b4:7d:30:a5:43:2f:93:87:
9c:c4:3d:50:7e:6a:66:ff:f1:5e:41:64:f6:7f:bb:ee:18:84:
75:8e:9b:f5:07:11:91:cb:5c:ab:59:9f:b5:7a:8a:a3:89:00:
c6:bd:e0:c8:02:18:04:54:0a:8d:b2:71:e7:63:a3:c9:08:65:
03:a7:19:87:89:e9:2d:90:f9:02:bd:7e:e5:b1:e1:17:6c:bc:
8e:15:5e:c4:77:60:bc:e8:8d:90:d6:bd:f1:d2:8a:23:f4:5b:
f1:81:33:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:12 2026 by rpki-client