Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ka4ovUBMtJQcUDcCfiLNGsfINWQ.roa
File: Ka4ovUBMtJQcUDcCfiLNGsfINWQ.roa (raw, json)
Hash identifier: 8xexFjyPd6FcjysAzMPnSFnLDyE2wBWnQJODq/xVsWQ=
Subject key identifier: 29:AE:28:BD:40:4C:B4:94:1C:50:37:02:7E:22:CD:1A:C7:C8:35:64
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FFF697211CA880096E2C140642746F1E3
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ka4ovUBMtJQcUDcCfiLNGsfINWQ.roa
Signing time: Fri 14 Aug 2026 08:35:28 +0000
ROA not before: Fri 14 Aug 2026 08:35:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 77.93.138.0/23 maxlen: 24
77.107.95.0/24 maxlen: 24
81.168.58.0/24 maxlen: 24
81.168.65.0/24 maxlen: 24
81.168.125.0/24 maxlen: 24
82.152.11.0/24 maxlen: 24
82.152.117.0/24 maxlen: 24
82.153.122.0/24 maxlen: 24
109.176.91.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
213.130.138.0/24 maxlen: 24
213.210.11.0/24 maxlen: 24
213.210.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:69:72:11:ca:88:00:96:e2:c1:40:64:27:46:f1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 14 08:35:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29ae28bd404cb4941c5037027e22cd1ac7c83564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3f:4a:f3:10:83:fd:12:a3:eb:07:22:6f:65:
06:11:d3:db:56:57:11:b4:84:40:ba:2c:3a:2b:16:
6a:a5:c1:90:a7:56:b4:31:0b:10:33:c7:e3:0c:92:
76:83:78:68:5a:8b:4a:f3:72:f5:f1:b6:11:04:b3:
b2:1a:20:55:c7:1c:8e:7e:bf:b4:8f:9d:79:b0:d6:
f5:c1:86:aa:3c:b2:99:6b:9b:4c:3e:04:4a:08:a3:
6c:a2:19:12:73:0e:37:96:d2:4d:a6:ad:bb:89:10:
b0:be:ae:c4:e8:dd:2d:af:da:75:41:e9:67:a4:d3:
25:00:32:01:17:4e:5e:28:a3:3a:1e:8a:64:b6:5d:
d4:50:e0:ed:62:71:f2:19:b3:72:6b:73:a0:15:63:
1b:4e:e4:38:bf:fc:a6:8f:53:7a:56:ec:4a:08:04:
63:22:62:85:d2:e5:0a:fd:ce:21:80:32:cf:e6:cc:
0c:c6:91:03:8b:c4:9d:51:11:c1:1b:5f:49:d0:5c:
51:58:90:ab:d3:76:4f:a4:c1:2d:91:81:a2:eb:76:
51:08:02:34:ab:26:43:4c:bb:d8:44:a4:cc:38:47:
50:37:fa:5d:ab:a6:5c:ac:5a:f6:a4:0b:46:7c:26:
32:20:47:50:d3:55:7f:4f:7e:5f:d5:cc:d6:80:21:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AE:28:BD:40:4C:B4:94:1C:50:37:02:7E:22:CD:1A:C7:C8:35:64
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ka4ovUBMtJQcUDcCfiLNGsfINWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.138.0/23
77.107.95.0/24
81.168.58.0/24
81.168.65.0/24
81.168.125.0/24
82.152.11.0/24
82.152.117.0/24
82.153.122.0/24
109.176.91.0/24
212.38.81.0/24
213.130.138.0/24
213.210.11.0/24
213.210.48.0/23
Signature Algorithm: sha256WithRSAEncryption
77:00:68:92:8e:54:b3:48:24:d3:36:47:ce:27:bc:90:92:ea:
ac:fe:23:a1:31:24:85:89:91:43:93:05:51:53:ae:5f:7f:b6:
1b:f0:44:c7:3a:ce:e0:7d:01:9f:df:ec:5b:06:0f:26:4a:58:
ff:ea:7c:5a:c1:fc:be:84:b3:63:98:25:76:12:c2:2a:2b:78:
1d:42:a0:62:8d:b0:34:5f:af:32:5a:af:78:8e:6f:1e:78:64:
d8:bd:d9:50:18:53:3c:f9:0c:f0:fb:9f:d7:91:fb:83:d2:cf:
7f:6b:99:b3:0b:96:0d:fc:cd:a7:28:cd:df:fd:aa:cc:08:83:
16:bd:e8:70:c3:14:ac:3e:0a:03:d6:b5:9c:a3:dd:37:86:d7:
39:f1:70:e8:15:91:5e:67:72:1c:7a:75:52:b6:44:27:ae:e7:
59:4d:9e:b5:c0:92:7a:ca:06:84:e5:cc:b5:7f:f1:3d:a7:98:
c4:5b:e2:db:9e:b6:4f:60:18:94:b2:00:db:4a:61:6f:9b:0f:
94:16:bd:ab:6e:bd:09:38:82:9d:49:26:10:c7:0e:db:80:51:
88:e8:5f:f2:3f:f5:54:2f:b9:8f:75:51:eb:62:0f:87:95:fd:
04:48:4e:1e:4e:e7:c9:f8:c7:50:53:bd:be:00:41:6a:f4:99:
f8:25:c0:c4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZ//aXIRyogAluLBQGQnRvHjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODE0MDgzNTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWFlMjhiZDQwNGNiNDk0MWM1MDM3MDI3ZTIyY2QxYWM3YzgzNTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD9K8xCD/RKj6wcib2UGEdPbVlcR
tIRAuiw6KxZqpcGQp1a0MQsQM8fjDJJ2g3hoWotK83L18bYRBLOyGiBVxxyOfr+0
j515sNb1wYaqPLKZa5tMPgRKCKNsohkScw43ltJNpq27iRCwvq7E6N0tr9p1Qeln
pNMlADIBF05eKKM6Hopktl3UUODtYnHyGbNya3OgFWMbTuQ4v/ymj1N6VuxKCARj
ImKF0uUK/c4hgDLP5swMxpEDi8SdURHBG19J0FxRWJCr03ZPpMEtkYGi63ZRCAI0
qyZDTLvYRKTMOEdQN/pdq6ZcrFr2pAtGfCYyIEdQ01V/T35f1czWgCFDdwIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFCmuKL1ATLSUHFA3An4izRrHyDVkMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvS2E0b3ZVQk10SlFjVURjQ2ZpTE5Hc2ZJTldRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBTV2KAwQA
TWtfAwQAUag6AwQAUahBAwQAUah9AwQAUpgLAwQAUph1AwQAUpl6AwQAbbBbAwQA
1CZRAwQA1YKKAwQA1dILAwQB1dIwMA0GCSqGSIb3DQEBCwUAA4IBAQB3AGiSjlSz
SCTTNkfOJ7yQkuqs/iOhMSSFiZFDkwVRU65ff7Yb8ETHOs7gfQGf3+xbBg8mSlj/
6nxawfy+hLNjmCV2EsIqK3gdQqBijbA0X68yWq94jm8eeGTYvdlQGFM8+Qzw+5/X
kfuD0s9/a5mzC5YN/M2nKM3f/arMCIMWvehwwxSsPgoD1rWco903htc58XDoFZFe
Z3IcenVStkQnrudZTZ61wJJ6ygaE5cy1f/E9p5jEW+LbnrZPYBiUsgDbSmFvmw+U
Fr2rbr0JOIKdSSYQxw7bgFGI6F/yP/VUL7mPdVHrYg+Hlf0ESE4eTufJ+MdQU72+
AEFq9Jn4JcDE
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:10 2026 by rpki-client