Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IuAjnxR61Y4RyNxPpjFiYftxzF4.roa
File: IuAjnxR61Y4RyNxPpjFiYftxzF4.roa (raw, json)
Hash identifier: uEIFOSKPe/3CmK6kvAhqoAQ3wSg9h33uCaGdpaG49H8=
Subject key identifier: 22:E0:23:9F:14:7A:D5:8E:11:C8:DC:4F:A6:31:62:61:FB:71:CC:5E
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368D6AD4AB158CED9B09F89691986F9
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IuAjnxR61Y4RyNxPpjFiYftxzF4.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197234
IP address blocks: 82.152.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d6:ad:4a:b1:58:ce:d9:b0:9f:89:69:19:86:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22e0239f147ad58e11c8dc4fa6316261fb71cc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:99:06:2e:c5:85:43:a8:18:c8:51:24:d0:81:
a2:9a:ff:e5:56:74:b7:75:26:6f:97:0b:8f:57:bb:
08:40:01:dc:ab:ea:d8:f0:dc:8d:ee:48:4f:ea:4c:
e5:2c:b9:9e:f3:c9:be:b1:dc:d8:c4:af:fe:f2:3f:
2b:75:33:91:80:b9:de:b1:de:a5:d5:6b:0c:8d:ab:
19:4b:1e:45:f5:d0:e2:66:d2:8a:78:5f:15:a1:4f:
f7:09:41:7e:8a:c4:23:b7:12:a8:ed:39:08:fb:e8:
32:fb:71:be:bf:12:a7:f8:fa:b8:57:04:e9:22:0e:
88:e4:d8:85:2c:37:19:90:db:96:ee:cd:28:45:f4:
84:e0:c2:14:2a:7b:dd:e7:b5:09:b6:99:68:83:f9:
db:db:42:4c:cc:c5:be:19:a9:48:91:a0:32:34:8e:
88:92:08:c9:7c:e6:f9:d0:12:36:67:b7:cb:1a:bc:
d3:6b:87:20:3a:71:d7:34:fe:52:94:d8:c5:d5:4d:
ef:f6:9b:cb:13:c2:68:97:56:1a:0e:e9:8d:e8:9b:
a2:2b:d4:b6:7a:84:55:fc:21:5d:ca:71:19:29:6d:
50:68:c7:70:ad:00:d7:8e:99:54:dc:b3:54:bf:b6:
fa:6e:7e:df:19:b0:48:57:34:e9:4f:5e:d5:b9:11:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E0:23:9F:14:7A:D5:8E:11:C8:DC:4F:A6:31:62:61:FB:71:CC:5E
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IuAjnxR61Y4RyNxPpjFiYftxzF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.94.0/24
Signature Algorithm: sha256WithRSAEncryption
77:60:e6:87:fc:8e:fb:76:05:7f:c1:a1:d6:96:27:ca:a8:93:
15:b7:b0:47:43:18:b0:95:93:67:98:c8:43:4a:56:84:a7:16:
5c:3b:53:46:7d:b3:4d:7c:4a:2b:ee:1b:41:5b:d7:5f:33:6b:
cc:03:62:90:ce:a5:ef:64:32:81:4e:bf:5d:e9:54:c0:e3:af:
14:7b:70:3a:8a:4f:58:94:ee:ef:f5:c5:b1:e2:8c:76:e0:1a:
b0:b1:b0:07:09:34:cf:31:fc:60:93:0f:f7:46:67:94:4d:3e:
6d:fa:4f:5d:75:c7:db:55:c0:82:54:b8:35:6f:b5:83:d9:91:
68:ea:dd:09:98:2f:64:9b:3c:95:1d:1e:79:97:f2:a8:3d:95:
44:1d:4d:de:c9:d3:de:19:81:7d:c8:6e:41:22:f4:c8:e0:c0:
11:18:df:58:19:e1:01:40:aa:ba:85:61:08:c3:43:e3:23:a2:
72:e3:c7:13:d8:ab:24:d2:b4:0a:c7:6c:04:49:dd:fe:4a:23:
dd:ef:07:37:da:7a:2f:cf:b1:4b:e7:5c:22:f9:b0:8d:38:c0:
60:d2:b3:91:fd:c3:2f:07:99:3a:85:78:8a:e7:bd:e6:cb:c4:
72:74:83:55:33:23:0e:69:f1:cc:c9:bf:e4:dd:3c:10:ee:26:
25:4d:58:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaNatSrFYztmwn4lpGYb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmUwMjM5ZjE0N2FkNThlMTFjOGRjNGZhNjMxNjI2MWZiNzFjYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZkGLsWFQ6gYyFEk0IGimv/lVnS3
dSZvlwuPV7sIQAHcq+rY8NyN7khP6kzlLLme88m+sdzYxK/+8j8rdTORgLnesd6l
1WsMjasZSx5F9dDiZtKKeF8VoU/3CUF+isQjtxKo7TkI++gy+3G+vxKn+Pq4VwTp
Ig6I5NiFLDcZkNuW7s0oRfSE4MIUKnvd57UJtplog/nb20JMzMW+GalIkaAyNI6I
kgjJfOb50BI2Z7fLGrzTa4cgOnHXNP5SlNjF1U3v9pvLE8Jol1YaDumN6JuiK9S2
eoRV/CFdynEZKW1QaMdwrQDXjplU3LNUv7b6bn7fGbBIVzTpT17VuREX5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCLgI58UetWOEcjcT6YxYmH7ccxeMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvSXVBam54UjYxWTRSeU54UHBqRmlZZnR4ekY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpheMA0G
CSqGSIb3DQEBCwUAA4IBAQB3YOaH/I77dgV/waHWlifKqJMVt7BHQxiwlZNnmMhD
SlaEpxZcO1NGfbNNfEor7htBW9dfM2vMA2KQzqXvZDKBTr9d6VTA468Ue3A6ik9Y
lO7v9cWx4ox24BqwsbAHCTTPMfxgkw/3RmeUTT5t+k9ddcfbVcCCVLg1b7WD2ZFo
6t0JmC9kmzyVHR55l/KoPZVEHU3eydPeGYF9yG5BIvTI4MARGN9YGeEBQKq6hWEI
w0PjI6Jy48cT2Ksk0rQKx2wESd3+SiPd7wc32novz7FL51wi+bCNOMBg0rOR/cMv
B5k6hXiK573my8RydINVMyMOafHMyb/k3TwQ7iYlTVhP
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:21 2026 by rpki-client