Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Kyusw8LJwQLjaiP3Q8Rnav59rNo.roa
File: Kyusw8LJwQLjaiP3Q8Rnav59rNo.roa (raw, json)
Hash identifier: /BNvaQFlVSJ6cA/He2XUBp+MmGJkhQAt0Ea4HZ7k+pA=
Subject key identifier: 2B:2B:AC:C3:C2:C9:C1:02:E3:6A:23:F7:43:C4:67:6A:FE:7D:AC:DA
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368B78B5D7D5F3218F06EC11F30CB13
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Kyusw8LJwQLjaiP3Q8Rnav59rNo.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42689
IP address blocks: 82.152.7.0/24 maxlen: 24
82.152.107.0/24 maxlen: 24
82.153.52.0/24 maxlen: 24
82.153.228.0/23 maxlen: 24
82.153.231.0/24 maxlen: 24
89.213.69.0/24 maxlen: 24
89.213.72.0/24 maxlen: 24
89.213.75.0/24 maxlen: 24
89.213.76.0/24 maxlen: 24
89.213.78.0/24 maxlen: 24
109.176.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b7:8b:5d:7d:5f:32:18:f0:6e:c1:1f:30:cb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b2bacc3c2c9c102e36a23f743c4676afe7dacda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:c8:a7:c5:c8:d5:f8:00:f2:69:a8:07:fe:
ae:64:d2:df:de:85:a6:d3:58:d0:9b:57:84:47:a5:
22:4d:18:d0:8c:73:50:4d:9e:6c:0f:31:b5:cc:07:
c6:3f:43:46:26:de:9b:de:a6:28:75:be:83:04:50:
eb:07:05:47:cf:39:7b:2d:da:81:2b:23:63:11:f7:
6e:68:9f:d2:30:e8:f0:0f:4e:90:ac:ee:e7:fa:4b:
75:0f:1a:eb:d6:6a:ad:23:47:ce:05:24:2a:c2:d2:
47:55:95:63:ee:59:16:96:59:78:87:90:37:1a:63:
fb:1d:61:5f:dd:00:d7:e4:4a:fb:7f:03:2a:ff:3b:
37:77:61:af:b8:0b:52:ad:73:3a:4b:ba:6b:60:df:
f9:4d:a6:64:dd:4b:f2:52:0f:e2:52:5c:3c:c5:53:
11:0b:dc:3e:76:1f:b8:e2:34:6f:47:a6:ec:ed:60:
fd:00:9d:26:5c:56:9d:7b:9c:9b:3f:91:34:dd:27:
40:2f:cb:ec:87:bc:f0:1a:5b:2a:72:05:cd:1b:9f:
aa:ca:57:a1:73:4f:89:6c:7e:3a:db:b5:b5:93:d5:
49:1c:b3:1e:b7:ae:aa:58:99:c1:41:d1:cf:c6:7f:
43:ba:e0:fe:44:f3:f9:15:70:bd:6e:da:d7:5d:04:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2B:AC:C3:C2:C9:C1:02:E3:6A:23:F7:43:C4:67:6A:FE:7D:AC:DA
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Kyusw8LJwQLjaiP3Q8Rnav59rNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.7.0/24
82.152.107.0/24
82.153.52.0/24
82.153.228.0/23
82.153.231.0/24
89.213.69.0/24
89.213.72.0/24
89.213.75.0-89.213.76.255
89.213.78.0/24
109.176.212.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:99:fe:fc:22:37:d4:96:b2:f0:e5:6b:32:47:e7:57:14:30:
da:a5:29:2d:8e:ef:ff:fa:99:92:1a:5b:33:15:db:c6:fd:c4:
a8:46:85:23:e5:9e:08:a2:e0:fb:87:41:cc:e3:de:db:d1:ff:
78:63:a0:74:8d:4b:b8:18:f7:a0:25:e0:62:48:39:75:12:a7:
22:76:bd:07:38:73:a6:71:4b:7c:c3:2f:94:f1:4b:b1:b0:1e:
37:19:90:1d:54:7e:9d:1c:93:ac:f4:f4:d8:f2:81:09:d0:3f:
26:b9:8e:9e:6a:80:bf:81:e8:1f:02:81:3c:41:51:62:9e:fe:
96:07:81:e5:05:5b:f5:44:7a:ec:81:09:76:42:f6:94:cd:10:
08:8e:74:83:db:84:0c:63:ae:2d:91:e8:7e:17:39:fc:90:54:
49:fc:87:3d:ac:2a:e7:a0:6d:81:11:4a:f0:a5:45:02:9b:45:
51:2c:f4:07:94:81:95:58:5b:9c:60:51:c9:3b:3f:e2:78:07:
71:1e:2f:15:01:9a:8e:e7:d2:d8:35:5f:c4:2d:8a:4e:d7:a7:
4e:c4:51:f5:90:75:7a:71:d1:56:5c:d1:0e:2e:1f:c9:2a:f8:
7c:85:5c:d0:b4:1d:5f:9a:b0:f9:5c:7d:49:e8:81:2a:95:d7:
fb:8d:80:db
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZ8jaLeLXX1fMhjwbsEfMMsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjJiYWNjM2MyYzljMTAyZTM2YTIzZjc0M2M0Njc2YWZlN2RhY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofrIp8XI1fgA8mmoB/6uZNLf3oWm
01jQm1eER6UiTRjQjHNQTZ5sDzG1zAfGP0NGJt6b3qYodb6DBFDrBwVHzzl7LdqB
KyNjEfduaJ/SMOjwD06QrO7n+kt1Dxrr1mqtI0fOBSQqwtJHVZVj7lkWlll4h5A3
GmP7HWFf3QDX5Er7fwMq/zs3d2GvuAtSrXM6S7prYN/5TaZk3UvyUg/iUlw8xVMR
C9w+dh+44jRvR6bs7WD9AJ0mXFade5ybP5E03SdAL8vsh7zwGlsqcgXNG5+qyleh
c0+JbH4627W1k9VJHLMet66qWJnBQdHPxn9DuuD+RPP5FXC9btrXXQSGzQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFCsrrMPCycEC42oj90PEZ2r+fazaMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvS3l1c3c4TEp3UUxqYWlQM1E4Um5hdjU5ck5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAUpgHAwQA
UphrAwQAUpk0AwQBUpnkAwQAUpnnAwQAWdVFAwQAWdVIMAwDBABZ1UsDBABZ1UwD
BABZ1U4DBABtsNQwDQYJKoZIhvcNAQELBQADggEBAB6Z/vwiN9SWsvDlazJH51cU
MNqlKS2O7//6mZIaWzMV28b9xKhGhSPlngii4PuHQczj3tvR/3hjoHSNS7gY96Al
4GJIOXUSpyJ2vQc4c6ZxS3zDL5TxS7GwHjcZkB1Ufp0ck6z09NjygQnQPya5jp5q
gL+B6B8CgTxBUWKe/pYHgeUFW/VEeuyBCXZC9pTNEAiOdIPbhAxjri2R6H4XOfyQ
VEn8hz2sKuegbYERSvClRQKbRVEs9AeUgZVYW5xgUck7P+J4B3EeLxUBmo7n0tg1
X8Qtik7Xp07EUfWQdXpx0VZc0Q4uH8kq+HyFXNC0HV+asPlcfUnogSqV1/uNgNs=
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:18:12 2026 by rpki-client