Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AY-wx8pThh61MQ7ZhgKdzKiJK6Y.roa
File: AY-wx8pThh61MQ7ZhgKdzKiJK6Y.roa (raw, json)
Hash identifier: MId/aLEMYvdjj5QfwaNwoi5MGjIxiCH4asJgvECWIdA=
Subject key identifier: 01:8F:B0:C7:CA:53:86:1E:B5:31:0E:D9:86:02:9D:CC:A8:89:2B:A6
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FD60935455D97CDE151C07EDCF74A3AA9
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AY-wx8pThh61MQ7ZhgKdzKiJK6Y.roa
Signing time: Thu 06 Aug 2026 07:45:55 +0000
ROA not before: Thu 06 Aug 2026 07:45:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213619
IP address blocks: 82.152.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:09:35:45:5d:97:cd:e1:51:c0:7e:dc:f7:4a:3a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 6 07:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=018fb0c7ca53861eb5310ed986029dcca8892ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c4:63:1b:81:04:89:e2:5c:d9:ab:b1:ca:7f:
c9:e1:10:cb:c6:52:3c:1f:89:2c:db:f8:85:72:42:
3b:c7:4b:67:f3:2e:48:ca:ec:db:93:2c:4c:7c:e0:
36:c2:c3:7e:a3:c0:89:ce:cb:53:4a:01:ce:16:1a:
4a:7a:2f:81:a3:da:74:da:1e:3f:1e:65:f7:45:51:
c8:9d:95:bf:a9:1b:d3:ad:ec:94:81:0a:e1:da:05:
d6:16:ec:5e:9b:1b:ab:4f:39:0c:de:1b:5b:83:c4:
44:e2:f9:36:f3:bf:be:ea:7f:d2:e8:9f:80:3c:d3:
a9:05:17:85:f3:02:96:1b:ab:11:db:b0:b0:54:b0:
a1:20:3f:af:d8:96:f8:75:0a:62:a7:32:45:6c:f7:
a2:e5:21:2b:35:63:3a:04:44:1e:70:db:24:40:67:
58:79:86:0b:b3:7b:ff:c0:b4:9b:a2:34:88:fb:98:
67:47:68:94:5d:59:06:fa:46:be:8d:16:5c:6e:07:
cd:5c:66:e4:92:3d:25:e8:19:83:91:ba:79:82:13:
37:f4:2e:91:da:44:d9:e4:ef:04:86:e5:ab:80:63:
27:12:64:39:9b:71:30:39:76:65:28:49:7f:60:0a:
ad:b3:69:d2:3a:e4:c5:15:c9:48:b2:52:20:89:89:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8F:B0:C7:CA:53:86:1E:B5:31:0E:D9:86:02:9D:CC:A8:89:2B:A6
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AY-wx8pThh61MQ7ZhgKdzKiJK6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.179.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:df:10:dc:b4:bf:5c:dc:69:e4:19:b6:bb:0b:02:2f:45:57:
05:24:0d:8a:5e:53:52:25:eb:e2:50:c3:7e:c2:41:06:0f:6d:
63:d9:a4:d3:12:f2:0d:01:31:48:88:8e:ba:74:ad:56:8c:8b:
08:2d:2f:0d:fe:c7:a6:29:2e:0c:98:03:69:89:25:8c:83:38:
16:8f:4d:4b:30:c2:6a:57:40:9c:96:81:8e:71:bc:b5:cd:3c:
b5:ed:83:1b:be:9e:70:41:25:ed:84:ca:64:91:cc:db:90:59:
20:c9:c3:5a:53:9e:17:47:10:0c:4f:5c:c8:27:f2:06:38:42:
76:be:d2:dd:06:7e:1c:2d:17:26:58:20:6b:64:29:d4:0b:d5:
4a:88:c1:17:03:73:5e:fa:64:91:da:bc:3d:e4:78:08:2e:da:
69:b8:bd:2a:e8:a1:ca:8f:c1:0e:c1:4c:e7:01:c6:db:fb:71:
fe:59:8c:57:9a:79:cf:18:27:40:0a:19:42:bd:9a:86:e4:f6:
f2:e3:f4:c7:b1:cb:22:9a:10:d0:fd:75:56:85:c5:58:78:4d:
8e:a4:8f:7d:8a:6d:94:fe:8c:d9:25:e6:6e:b4:76:7c:7c:56:
df:82:e4:76:50:39:1f:8e:d8:06:4e:a5:14:88:12:41:96:11:
df:fc:84:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/WCTVFXZfN4VHAftz3SjqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODA2MDc0NTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMThmYjBjN2NhNTM4NjFlYjUzMTBlZDk4NjAyOWRjY2E4ODkyYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cRjG4EEieJc2auxyn/J4RDLxlI8
H4ks2/iFckI7x0tn8y5IyuzbkyxMfOA2wsN+o8CJzstTSgHOFhpKei+Bo9p02h4/
HmX3RVHInZW/qRvTreyUgQrh2gXWFuxemxurTzkM3htbg8RE4vk287++6n/S6J+A
PNOpBReF8wKWG6sR27CwVLChID+v2Jb4dQpipzJFbPei5SErNWM6BEQecNskQGdY
eYYLs3v/wLSbojSI+5hnR2iUXVkG+ka+jRZcbgfNXGbkkj0l6BmDkbp5ghM39C6R
2kTZ5O8EhuWrgGMnEmQ5m3EwOXZlKEl/YAqts2nSOuTFFclIslIgiYnmoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAGPsMfKU4YetTEO2YYCncyoiSumMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvQVktd3g4cFRoaDYxTVE3WmhnS2R6S2lKSzZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpizMA0G
CSqGSIb3DQEBCwUAA4IBAQAc3xDctL9c3GnkGba7CwIvRVcFJA2KXlNSJeviUMN+
wkEGD21j2aTTEvINATFIiI66dK1WjIsILS8N/semKS4MmANpiSWMgzgWj01LMMJq
V0CcloGOcby1zTy17YMbvp5wQSXthMpkkczbkFkgycNaU54XRxAMT1zIJ/IGOEJ2
vtLdBn4cLRcmWCBrZCnUC9VKiMEXA3Ne+mSR2rw95HgILtppuL0q6KHKj8EOwUzn
Acbb+3H+WYxXmnnPGCdAChlCvZqG5Pby4/THscsimhDQ/XVWhcVYeE2OpI99im2U
/ozZJeZutHZ8fFbfguR2UDkfjtgGTqUUiBJBlhHf/ITs
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:28 2026 by rpki-client