Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Kpgy2DcxXzTHUqXOKkeNJ2IZkKs.roa
File: Kpgy2DcxXzTHUqXOKkeNJ2IZkKs.roa (raw, json)
Hash identifier: 3H/A5c0ufbkmTHG8RiKBvqdjAHWEFzSIvAvfB0Rgq5w=
Subject key identifier: 2A:98:32:D8:37:31:5F:34:C7:52:A5:CE:2A:47:8D:27:62:19:90:AB
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368CE28F052B2DF506BCFF8BA19EC55
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Kpgy2DcxXzTHUqXOKkeNJ2IZkKs.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149978
IP address blocks: 82.152.234.0/24 maxlen: 24
82.152.241.0/24 maxlen: 24
82.153.191.0/24 maxlen: 24
82.153.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ce:28:f0:52:b2:df:50:6b:cf:f8:ba:19:ec:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a9832d837315f34c752a5ce2a478d27621990ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:aa:62:60:a2:01:14:1e:f8:21:27:42:2a:
2d:22:e4:c2:68:36:f7:e4:12:90:1a:d5:29:0e:89:
a9:d4:52:ed:eb:01:e5:24:4e:6a:e7:7e:f0:f8:69:
79:2a:b9:85:58:c1:4b:4f:85:87:00:12:ba:99:dc:
80:34:6e:25:61:66:6c:4a:58:4b:bc:bb:2c:c7:66:
7b:19:13:b4:89:1b:70:79:ee:b3:87:71:1f:17:51:
7f:a4:d2:6c:3f:93:c6:04:b8:46:27:a2:b1:e0:82:
7e:1d:7b:d9:db:13:9e:a1:15:43:ff:e9:f6:8d:06:
75:c5:b9:12:38:1c:dc:57:ad:01:aa:8f:91:50:1a:
7e:48:ae:77:82:20:53:bd:22:fe:e8:48:3c:31:02:
da:2c:23:35:30:39:c3:a2:95:58:3e:2a:39:97:1d:
b7:33:27:61:92:ff:9d:e1:04:14:fa:d2:ab:e6:b0:
05:09:91:49:6f:58:43:6e:f7:05:c0:0e:09:74:0c:
06:0a:6e:32:0e:2e:69:cf:c5:78:b7:a7:78:84:9b:
67:d1:6f:ef:cf:d7:1b:72:bb:b2:45:56:f6:86:0d:
02:82:3c:da:3b:01:b3:a4:79:0b:1f:b5:43:68:02:
7b:e6:f3:79:46:23:2f:4d:80:0a:d1:39:06:2e:a9:
e2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:98:32:D8:37:31:5F:34:C7:52:A5:CE:2A:47:8D:27:62:19:90:AB
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Kpgy2DcxXzTHUqXOKkeNJ2IZkKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.234.0/24
82.152.241.0/24
82.153.191.0/24
82.153.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:77:d1:a8:d5:63:73:d2:93:b2:2d:be:02:2e:16:39:4a:57:
03:82:68:2c:0f:c0:e2:95:ba:59:f9:d5:96:0b:9f:40:77:44:
61:95:ee:e8:c9:90:b6:50:08:52:8c:22:77:6d:85:b8:1e:ed:
1e:43:d5:e1:9a:51:51:23:b7:12:89:ab:6b:14:87:65:da:07:
83:4f:46:09:b9:a5:03:71:8f:9d:ef:df:e5:66:ba:e0:5d:c2:
5a:12:78:79:1a:2c:88:54:55:ce:ac:6b:81:59:e3:f4:bb:59:
60:e3:e2:76:15:1a:9c:28:25:d0:4e:99:48:35:da:15:23:9d:
ac:36:21:c8:d3:1f:65:66:44:23:f7:46:aa:05:e1:43:28:ea:
f7:78:c0:81:38:bf:b8:71:c6:b4:69:d5:d8:a1:60:88:f4:a4:
a3:c1:6d:be:a1:b5:db:0e:ee:f0:8b:81:79:95:55:6b:f9:70:
35:6c:09:cf:49:ed:d3:97:5c:0f:4b:1e:2d:96:76:bd:b3:c3:
18:c6:3b:e9:21:86:c9:27:d6:71:7a:e2:99:5c:4a:8a:e8:1d:
10:bb:9b:1a:ec:5b:c2:67:5c:3b:f9:a0:70:7b:d7:6c:2d:93:
ca:3a:51:55:08:25:5b:0e:3a:8b:9e:39:4a:0e:fd:25:f4:e0:
59:f1:54:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:31 2026 by rpki-client