Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BLt-X6md3kvoHfKT-pvzkhlD3Lk.roa
File: BLt-X6md3kvoHfKT-pvzkhlD3Lk.roa (raw, json)
Hash identifier: xX3cUrleexqLWe+oFnwAmov3lYiHfBXvn6ozs9Iekpk=
Subject key identifier: 04:BB:7E:5F:A9:9D:DE:4B:E8:1D:F2:93:FA:9B:F3:92:19:43:DC:B9
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368F2B14DE612D2067D597DBED6E89E
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BLt-X6md3kvoHfKT-pvzkhlD3Lk.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211439
IP address blocks: 37.252.28.0/24 maxlen: 24
79.99.149.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
109.176.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f2:b1:4d:e6:12:d2:06:7d:59:7d:be:d6:e8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04bb7e5fa99dde4be81df293fa9bf3921943dcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:33:52:4a:b5:e3:ba:ff:39:04:48:56:91:
b0:52:f5:01:b1:84:1b:d3:22:36:17:8e:e1:85:c5:
39:f3:e9:09:98:48:39:71:2c:d9:65:ab:9d:8c:09:
dc:91:b7:e6:01:ea:f3:11:f0:f6:04:52:c2:0c:c9:
7a:ee:f0:46:c5:e3:04:87:96:85:d9:da:6a:5e:1e:
61:74:89:2e:51:54:38:fa:82:10:04:7b:da:b8:b2:
5d:cb:ed:c4:07:b8:6e:43:26:ec:26:ef:d4:91:ba:
55:3a:1d:40:dd:e2:85:12:6b:4f:0b:2e:af:85:f8:
56:3f:3b:c1:19:d3:c7:42:14:d9:f7:e4:7d:e1:9b:
94:2a:5c:7b:4f:ef:8d:d4:97:5c:57:e7:e6:7f:0c:
b7:88:b0:2c:e7:d8:c7:98:da:f9:23:12:54:0c:3d:
29:5b:2b:cc:11:36:a8:78:2d:3d:8e:06:b3:6f:d0:
8f:e9:d8:3f:01:87:b3:63:e8:91:3c:7a:11:0d:bf:
b4:8f:3e:bb:29:ad:f8:ce:32:61:ce:79:76:00:1a:
ea:dd:20:b7:ec:6a:50:5e:8c:88:7a:8f:8a:49:db:
ec:8b:96:87:5d:ed:f1:4b:cd:82:a3:81:3e:12:1c:
a7:0c:f4:89:bd:eb:54:2b:bc:0d:81:1b:c8:24:81:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BB:7E:5F:A9:9D:DE:4B:E8:1D:F2:93:FA:9B:F3:92:19:43:DC:B9
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BLt-X6md3kvoHfKT-pvzkhlD3Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.28.0/24
79.99.149.0/24
82.153.1.0/24
109.176.212.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b7:4a:30:e9:12:ef:bf:f2:71:a5:c9:73:fe:fd:78:bc:c1:
56:bf:af:15:22:d9:23:00:d7:a6:5b:51:28:3a:ef:8a:de:d0:
d1:17:f5:ee:92:38:0c:a5:8e:af:cf:26:24:1f:de:d4:6c:1e:
3a:04:30:99:2e:c2:ca:83:a2:d6:d1:ee:02:12:54:34:a7:26:
b2:1f:71:38:d1:c4:26:05:61:13:eb:f1:0b:06:81:75:f1:15:
b6:20:c1:6e:8c:91:9c:7a:90:c0:b6:d7:6d:f4:10:6d:14:ff:
73:a7:0f:b0:3a:28:d8:b9:38:51:49:d7:a0:31:db:5c:19:2e:
c3:e5:00:f5:e4:d4:be:7c:1e:8c:3b:04:a7:b3:32:44:7a:ad:
a6:43:ea:1a:c2:72:a1:ba:29:28:2d:58:dc:ee:99:4a:64:5a:
4e:55:96:0c:2f:a5:52:0f:51:ea:de:70:77:50:96:e9:e3:08:
dc:2d:d0:65:d8:54:42:05:e3:1d:e1:37:20:a9:ae:e0:30:53:
b7:41:0f:64:55:08:73:d1:a9:db:c6:1a:33:39:d9:d9:63:2f:
96:cd:87:19:56:04:75:48:91:86:46:20:eb:49:b7:32:73:5c:
68:69:f1:d4:0a:f9:77:39:4c:f6:7d:88:62:9e:61:77:a8:98:
cb:e4:51:47
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ8jaPKxTeYS0gZ9WX2+1uieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGJiN2U1ZmE5OWRkZTRiZTgxZGYyOTNmYTliZjM5MjE5NDNkY2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTwzUkq147r/OQRIVpGwUvUBsYQb
0yI2F47hhcU58+kJmEg5cSzZZaudjAnckbfmAerzEfD2BFLCDMl67vBGxeMEh5aF
2dpqXh5hdIkuUVQ4+oIQBHvauLJdy+3EB7huQybsJu/UkbpVOh1A3eKFEmtPCy6v
hfhWPzvBGdPHQhTZ9+R94ZuUKlx7T++N1JdcV+fmfwy3iLAs59jHmNr5IxJUDD0p
WyvMETaoeC09jgazb9CP6dg/AYezY+iRPHoRDb+0jz67Ka34zjJhznl2ABrq3SC3
7GpQXoyIeo+KSdvsi5aHXe3xS82Co4E+EhynDPSJvetUK7wNgRvIJIE1+QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAS7fl+pnd5L6B3yk/qb85IZQ9y5MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvQkx0LVg2bWQza3ZvSGZLVC1wdnpraGxEM0xrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJfwcAwQA
T2OVAwQAUpkBAwQAbbDUMA0GCSqGSIb3DQEBCwUAA4IBAQBUt0ow6RLvv/Jxpclz
/v14vMFWv68VItkjANemW1EoOu+K3tDRF/XukjgMpY6vzyYkH97UbB46BDCZLsLK
g6LW0e4CElQ0pyayH3E40cQmBWET6/ELBoF18RW2IMFujJGcepDAttdt9BBtFP9z
pw+wOijYuThRSdegMdtcGS7D5QD15NS+fB6MOwSnszJEeq2mQ+oawnKhuikoLVjc
7plKZFpOVZYML6VSD1Hq3nB3UJbp4wjcLdBl2FRCBeMd4Tcgqa7gMFO3QQ9kVQhz
0anbxhozOdnZYy+WzYcZVgR1SJGGRiDrSbcyc1xoafHUCvl3OUz2fYhinmF3qJjL
5FFH
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:14 2026 by rpki-client