Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MBDK2MYwBM826_vya38RgPuCIrk.roa
File: MBDK2MYwBM826_vya38RgPuCIrk.roa (raw, json)
Hash identifier: kU8yCqv3WAjOzhaiZ0FOqjNxKRW1h5uQA1Pd+zJvF1g=
Subject key identifier: 30:10:CA:D8:C6:30:04:CF:36:EB:FB:F2:6B:7F:11:80:FB:82:22:B9
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0421CF4281CA4306F087269CE84A3FF0F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MBDK2MYwBM826_vya38RgPuCIrk.roa
Signing time: Thu 27 Aug 2026 07:26:28 +0000
ROA not before: Thu 27 Aug 2026 07:26:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 37.98.145.0/24 maxlen: 24
77.107.88.0/24 maxlen: 24
80.240.94.0/24 maxlen: 24
81.168.32.0/24 maxlen: 24
81.168.80.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.197.0/24 maxlen: 24
82.152.200.0/24 maxlen: 24
82.152.211.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
89.213.66.0/24 maxlen: 24
89.213.67.0/24 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.153.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:1c:f4:28:1c:a4:30:6f:08:72:69:ce:84:a3:ff:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 27 07:26:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3010cad8c63004cf36ebfbf26b7f1180fb8222b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:dd:11:b3:61:7d:26:11:41:1e:67:22:f0:
68:35:0c:b7:bc:02:6f:51:b8:5a:41:a4:a9:97:88:
49:d9:5b:27:a8:cf:25:eb:5e:85:4b:d8:ea:c2:88:
18:e3:8f:7a:f1:31:bd:9f:2e:9d:64:78:3e:49:be:
71:3c:a3:1e:08:a2:8e:37:c5:15:dd:b6:61:45:ae:
e1:a5:8d:95:5e:f1:7c:1b:a4:9e:68:61:ef:f9:94:
73:64:73:33:e8:91:dc:d1:a7:79:22:47:5e:d4:c4:
81:9d:3b:83:72:02:a0:65:48:02:7d:76:3d:60:65:
83:03:9b:2b:3a:17:46:b0:04:24:20:09:b9:5a:07:
fe:c3:b5:0d:ed:1a:c8:b1:9a:fe:93:15:77:bd:33:
18:2f:88:9c:6f:88:90:02:fa:57:47:ca:56:7e:31:
fa:7e:7f:8b:43:8d:dd:cc:78:28:e8:30:70:9b:62:
a2:22:71:f2:69:e1:be:f1:eb:87:e8:58:7d:31:ca:
51:3a:46:f5:32:89:fd:08:00:30:7a:e6:a5:5c:db:
fd:ec:0d:aa:88:b3:aa:e4:23:f5:e6:18:fd:52:58:
76:52:a1:fe:6e:60:7b:a0:66:0f:1e:f7:98:d4:3d:
91:6b:e1:8a:c1:b2:2e:06:47:ee:d8:42:07:b9:12:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:10:CA:D8:C6:30:04:CF:36:EB:FB:F2:6B:7F:11:80:FB:82:22:B9
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MBDK2MYwBM826_vya38RgPuCIrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.145.0/24
77.107.88.0/24
80.240.94.0/24
81.168.32.0/24
81.168.80.0/24
82.152.8.0/24
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0/24
82.152.98.0/24
82.152.109.0/24
82.152.197.0/24
82.152.200.0/24
82.152.211.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.66.0/24
82.153.205.0/24
89.213.66.0/23
109.176.40.0-109.176.55.255
109.176.153.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:41:0f:ef:84:0b:21:3e:6e:8b:e7:59:ef:37:f0:dd:1d:4e:
87:a5:93:57:91:aa:45:84:cc:c8:86:bb:9e:b6:ee:da:1a:9f:
3b:8a:28:b1:7a:14:35:cd:65:3c:c1:e5:9a:4c:d9:94:81:5c:
21:71:1d:96:96:96:e8:f4:88:02:63:03:a7:36:6f:21:f4:33:
18:78:dc:ab:7c:21:9d:6d:42:e8:08:92:4f:4f:79:dc:c4:86:
bf:33:46:7c:6f:2c:23:f4:5a:d7:1f:42:d7:3d:51:74:1e:6e:
fc:89:c4:cb:62:bd:2d:1e:7d:c4:85:3f:33:83:06:f0:61:d6:
2f:7d:97:40:12:4b:d7:2e:e3:1d:c2:a7:f6:7e:a8:5b:1c:ba:
8a:a2:ae:78:03:a4:a2:52:32:6b:ae:be:30:76:0b:74:1d:be:
b8:af:fb:d4:2e:64:25:ad:25:30:90:b3:82:31:9b:05:3d:58:
61:3d:d3:00:03:58:04:e5:df:89:59:36:5e:e6:a6:35:0f:56:
93:82:c8:11:49:2f:8e:de:74:7c:6b:91:1b:e4:bc:b3:de:4a:
ca:60:02:37:da:aa:85:a6:f0:c9:38:cb:3c:3c:e4:0c:b7:fc:
e3:de:aa:63:e9:3d:98:f2:a0:88:24:ec:62:ca:cc:d2:05:f9:
a0:ce:11:3a
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAaBCHPQoHKQwbwhyac6Eo/8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODI3MDcyNjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDEwY2FkOGM2MzAwNGNmMzZlYmZiZjI2YjdmMTE4MGZiODIyMmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuDdEbNhfSYRQR5nIvBoNQy3vAJv
UbhaQaSpl4hJ2VsnqM8l616FS9jqwogY44968TG9ny6dZHg+Sb5xPKMeCKKON8UV
3bZhRa7hpY2VXvF8G6SeaGHv+ZRzZHMz6JHc0ad5Ikde1MSBnTuDcgKgZUgCfXY9
YGWDA5srOhdGsAQkIAm5Wgf+w7UN7RrIsZr+kxV3vTMYL4icb4iQAvpXR8pWfjH6
fn+LQ43dzHgo6DBwm2KiInHyaeG+8euH6Fh9McpROkb1Mon9CAAweualXNv97A2q
iLOq5CP15hj9Ulh2UqH+bmB7oGYPHveY1D2Ra+GKwbIuBkfu2EIHuRKc4QIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFDAQytjGMATPNuv78mt/EYD7giK5MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvTUJESzJNWXdCTTgyNl92eWEzOFJnUHVDSXJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBrQQCAAEwgaYDBAAl
YpEDBABNa1gDBABQ8F4DBABRqCADBABRqFADBABSmAgwDAMEAFKYOQMEAFKYOgME
AFKYSQMEAFKYSwMEAFKYYgMEAFKYbQMEAFKYxQMEAFKYyAMEAFKY0wMEAFKY4gME
AFKY8AMEAFKY8wMEAFKZQgMEAFKZzQMEAVnVQjAMAwQDbbAoAwQDbbAwAwQAbbCZ
AwQA1YKCAwQA1YKVAwQA1drWMA0GCSqGSIb3DQEBCwUAA4IBAQANQQ/vhAshPm6L
51nvN/DdHU6HpZNXkapFhMzIhruetu7aGp87iiixehQ1zWU8weWaTNmUgVwhcR2W
lpbo9IgCYwOnNm8h9DMYeNyrfCGdbULoCJJPT3ncxIa/M0Z8bywj9FrXH0LXPVF0
Hm78icTLYr0tHn3EhT8zgwbwYdYvfZdAEkvXLuMdwqf2fqhbHLqKoq54A6SiUjJr
rr4wdgt0Hb64r/vULmQlrSUwkLOCMZsFPVhhPdMAA1gE5d+JWTZe5qY1D1aTgsgR
SS+O3nR8a5Eb5Lyz3krKYAI32qqFpvDJOMs8POQMt/zj3qpj6T2Y8qCIJOxiyszS
BfmgzhE6
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:30:23 2026 by rpki-client