Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CHKzVKQsaROxr0xh1rY_ssgkF88.roa
File: CHKzVKQsaROxr0xh1rY_ssgkF88.roa (raw, json)
Hash identifier: +h4bcSQeOUULMWZWbZSBVz7hAytVk6BJ9zroImiM5yU=
Subject key identifier: 08:72:B3:54:A4:2C:69:13:B1:AF:4C:61:D6:B6:3F:B2:C8:24:17:CF
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A013C761737077DE1654A67C8E0469C820
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CHKzVKQsaROxr0xh1rY_ssgkF88.roa
Signing time: Tue 18 Aug 2026 07:30:28 +0000
ROA not before: Tue 18 Aug 2026 07:30:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 37.252.25.0/24 maxlen: 24
81.168.20.0/24 maxlen: 24
81.168.99.0/24 maxlen: 24
81.168.104.0/24 maxlen: 24
81.168.112.0/24 maxlen: 24
81.168.120.0/24 maxlen: 24
82.152.1.0/24 maxlen: 24
82.152.3.0/24 maxlen: 24
82.152.59.0/24 maxlen: 24
82.152.128.0/24 maxlen: 24
82.152.136.0/24 maxlen: 24
82.152.193.0/24 maxlen: 24
82.152.198.0/24 maxlen: 24
82.152.209.0/24 maxlen: 24
82.152.212.0/24 maxlen: 24
82.152.214.0/24 maxlen: 24
82.152.215.0/24 maxlen: 24
82.152.218.0/24 maxlen: 24
82.152.221.0/24 maxlen: 24
82.152.233.0/24 maxlen: 24
82.153.65.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
82.153.121.0/24 maxlen: 24
82.153.125.0/24 maxlen: 24
82.153.182.0/24 maxlen: 24
82.153.187.0/24 maxlen: 24
82.153.191.0/24 maxlen: 24
82.153.213.0/24 maxlen: 24
82.153.232.0/24 maxlen: 24
82.163.5.0/24 maxlen: 24
82.163.6.0/24 maxlen: 24
89.213.68.0/24 maxlen: 24
109.176.200.0/24 maxlen: 24
212.38.80.0/24 maxlen: 24
213.130.155.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
217.144.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 19:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:c7:61:73:70:77:de:16:54:a6:7c:8e:04:69:c8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 18 07:30:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0872b354a42c6913b1af4c61d6b63fb2c82417cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:e9:e3:0b:f2:69:84:5f:ff:d7:ea:de:e5:
a3:30:7e:73:f1:c5:f2:6d:a2:ba:3c:5c:b3:7f:dd:
31:43:f9:10:8f:72:53:63:91:a6:d4:7a:07:1f:0a:
64:28:bf:60:b8:4a:48:85:cc:7e:e4:9c:50:de:f4:
f8:b5:e6:03:4e:e4:01:ef:39:1e:6d:26:b5:2d:2e:
b1:33:4a:f2:08:28:5a:cc:1f:42:23:23:46:0c:05:
52:13:a9:02:9a:33:31:4b:8a:ac:79:93:3e:64:9f:
d1:77:09:60:ae:b6:77:8e:2d:85:e9:a4:54:02:56:
ae:18:af:7e:83:cf:e9:0b:49:ca:6b:d3:68:b2:65:
f9:37:27:a6:49:82:9a:45:3f:78:1d:91:64:e8:5f:
ff:9d:07:b8:a0:f6:b6:c1:19:0d:9d:f1:1d:9e:14:
64:31:63:a3:f8:c3:1c:5a:77:50:51:1a:83:df:66:
96:44:69:0a:cb:67:9a:16:eb:ef:c3:b3:1e:48:f6:
5d:f4:fb:a5:e1:34:97:8c:90:6d:23:f7:2d:fb:bf:
cc:12:13:a1:66:46:6b:bd:2f:fa:ca:3b:43:19:a7:
5b:dc:ec:5b:4f:4a:41:97:2a:35:b3:a0:01:97:d9:
3b:21:67:c1:94:00:c8:36:db:48:e1:b9:77:7d:a0:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:72:B3:54:A4:2C:69:13:B1:AF:4C:61:D6:B6:3F:B2:C8:24:17:CF
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CHKzVKQsaROxr0xh1rY_ssgkF88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.25.0/24
81.168.20.0/24
81.168.99.0/24
81.168.104.0/24
81.168.112.0/24
81.168.120.0/24
82.152.1.0/24
82.152.3.0/24
82.152.59.0/24
82.152.128.0/24
82.152.136.0/24
82.152.193.0/24
82.152.198.0/24
82.152.209.0/24
82.152.212.0/24
82.152.214.0/23
82.152.218.0/24
82.152.221.0/24
82.152.233.0/24
82.153.65.0/24
82.153.72.0/24
82.153.121.0/24
82.153.125.0/24
82.153.182.0/24
82.153.187.0/24
82.153.191.0/24
82.153.213.0/24
82.153.232.0/24
82.163.5.0-82.163.6.255
89.213.68.0/24
109.176.200.0/24
212.38.80.0/24
213.130.155.0/24
213.218.213.0/24
217.144.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:25:83:70:b9:11:29:aa:4f:24:be:e6:98:0a:ec:b0:4e:35:
4f:f5:7a:d1:15:4f:2f:e3:77:9f:0f:fa:c8:b5:b6:b4:92:ec:
1f:e1:b3:04:99:85:a3:1d:cf:23:7e:cf:ad:52:a8:0e:f9:7b:
ac:b9:d7:b8:52:5a:2e:c2:59:c7:52:48:3c:8c:68:4e:62:bb:
86:25:96:cc:b2:61:7a:b5:6f:6f:3a:ee:bd:e4:2b:d3:cf:c4:
44:c2:3a:b9:29:2b:ce:c0:0f:0a:0d:7a:be:6d:0d:7c:5b:f0:
c5:54:05:cf:52:88:05:aa:88:aa:d4:aa:0c:98:ba:5e:31:3e:
d1:8b:32:90:a0:b3:89:18:6b:af:5a:52:7e:a6:ee:4a:f1:d3:
65:a7:4e:19:03:7d:48:0c:63:8e:c0:50:b7:1d:9b:a9:bf:43:
4d:db:e0:db:ba:45:cd:ab:95:6a:9d:ce:e3:f2:d2:74:6d:a3:
8c:d1:6b:de:24:c2:3d:86:fc:ac:c4:e0:08:81:f9:3a:db:ab:
79:59:d5:61:0e:f1:15:7d:56:05:d1:c4:bc:92:1e:b7:31:43:
9f:8c:dc:fe:a0:53:24:ea:4c:af:34:4b:33:e4:84:fa:a8:aa:
61:c4:90:2a:15:0f:c1:c7:8b:37:e7:11:47:01:8f:96:cf:e8:
cd:4a:a6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 03:30:01 2026 by rpki-client