Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/N3d212f325HtCR2XDyBx6sDW83c.roa
File: N3d212f325HtCR2XDyBx6sDW83c.roa (raw, json)
Hash identifier: ADkZ/tz6EVmavQhia/YCkakL9qItWjlE1ZfSDxJu/Vs=
Subject key identifier: 37:77:76:D7:67:F7:DB:91:ED:09:1D:97:0F:20:71:EA:C0:D6:F3:77
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368C4FECBEA54165826A75BF0B6DC85
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/N3d212f325HtCR2XDyBx6sDW83c.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61112
IP address blocks: 82.152.90.0/23 maxlen: 24
82.153.65.0/24 maxlen: 24
82.153.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c4:fe:cb:ea:54:16:58:26:a7:5b:f0:b6:dc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=377776d767f7db91ed091d970f2071eac0d6f377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:f5:c4:07:c6:84:87:ac:70:5e:e5:61:c1:
ea:57:de:04:a4:4e:97:1d:68:4b:3b:a9:8f:f0:ac:
9f:11:46:1a:ec:28:ab:6f:65:db:68:d9:9c:8e:6d:
e9:ae:00:7a:65:7c:53:f8:a2:f9:e3:21:9b:2a:8c:
1c:2c:59:c2:42:37:53:cd:1e:f0:1a:17:e5:3f:f0:
24:d8:43:ba:8f:1e:e0:6c:5f:be:b3:f1:74:23:54:
d0:a6:a1:c5:4f:64:f4:fa:04:f3:83:94:91:88:ac:
93:bf:76:7a:dd:4e:9c:f9:48:d5:42:c3:6e:55:bb:
7f:2b:d8:b4:3e:31:ca:a9:17:78:1f:d8:0d:bd:03:
9c:31:b8:bb:71:f9:ce:74:89:9f:00:80:cd:3a:93:
66:a1:a6:e8:c9:6d:30:70:7f:d6:44:f5:ba:1c:52:
fd:1c:84:0f:25:87:7a:7f:e6:16:2e:e4:8c:5a:21:
81:ba:0a:d2:44:19:75:22:10:1a:d7:ad:0d:07:88:
60:d4:2f:9f:0d:b1:05:e2:35:44:c3:78:5b:73:d0:
84:af:28:e6:08:92:66:61:a9:3b:d1:e7:3e:3e:20:
cb:3d:4f:eb:89:5f:a4:8c:a5:da:72:e9:92:62:d7:
5f:a7:93:ca:2f:8b:8b:c2:6c:0c:a2:d3:14:b5:c3:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:77:76:D7:67:F7:DB:91:ED:09:1D:97:0F:20:71:EA:C0:D6:F3:77
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/N3d212f325HtCR2XDyBx6sDW83c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.90.0/23
82.153.65.0/24
82.153.135.0/24
Signature Algorithm: sha256WithRSAEncryption
66:da:c6:4f:76:a5:0f:99:c8:63:48:20:cb:16:75:00:d2:d7:
a4:23:4f:d4:70:97:27:ca:3c:db:b6:8b:d6:b6:74:a2:be:a5:
47:3b:ad:66:f0:f4:2b:16:eb:5b:96:b4:e8:00:34:e1:43:56:
bd:15:74:f2:e6:22:af:70:90:23:5d:1d:89:66:c2:c3:e2:f9:
cc:77:f9:10:40:e0:b4:85:27:1e:ba:38:09:56:c1:4e:d8:7c:
2c:4f:f6:da:aa:9c:c3:4e:25:64:a2:73:df:de:8f:ce:9a:91:
a8:3b:a2:01:c4:a2:68:73:5d:82:8f:79:d0:e2:3a:87:31:d3:
29:81:49:19:0b:04:f2:8a:23:e4:c8:40:cf:e1:7e:4b:a2:e4:
2b:2b:0d:00:ba:7c:1c:30:36:30:04:2e:61:71:29:75:c1:5d:
d5:85:28:4a:19:c6:59:34:1c:46:cc:ee:b3:6f:a2:fd:36:b3:
52:a0:9c:03:c4:3d:bc:3e:c5:2a:bf:9e:a8:78:a1:f1:75:8c:
5d:d3:b2:16:46:b7:5a:3d:79:b8:cc:72:e0:b1:b3:af:0f:2e:
f5:eb:32:7d:39:0c:c6:78:35:6e:4e:1f:fc:2a:f5:a1:4c:19:
63:b9:80:b2:41:1a:22:62:26:2e:a6:4d:66:46:4e:73:18:d3:
aa:bf:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:58 2026 by rpki-client