Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P6v18MVfW-qhTcPgHm1iXeWPpqo.roa
File: P6v18MVfW-qhTcPgHm1iXeWPpqo.roa (raw, json)
Hash identifier: mNrK6j5bptYEfC2d8IpPyWM7IdPUsevhuFty8pSbFsk=
Subject key identifier: 3F:AB:F5:F0:C5:5F:5B:EA:A1:4D:C3:E0:1E:6D:62:5D:E5:8F:A6:AA
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A037CABD454FEF01D0257BC2C2BD1C17FE
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P6v18MVfW-qhTcPgHm1iXeWPpqo.roa
Signing time: Tue 25 Aug 2026 07:20:28 +0000
ROA not before: Tue 25 Aug 2026 07:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 148996
IP address blocks: 82.153.96.0/24 maxlen: 24
82.153.100.0/24 maxlen: 24
82.153.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:ca:bd:45:4f:ef:01:d0:25:7b:c2:c2:bd:1c:17:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 25 07:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fabf5f0c55f5beaa14dc3e01e6d625de58fa6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:82:34:bf:0f:77:5d:e0:35:66:6c:2f:39:
5b:65:ae:7e:c6:d0:71:70:f9:b3:f1:56:7e:a9:62:
2a:07:68:4b:72:5b:42:30:12:21:94:a4:8a:d3:e4:
75:b6:e0:44:8f:b8:64:b9:81:86:8d:bc:b6:e2:b9:
a3:f6:15:8c:27:53:24:c7:57:fa:be:1e:68:14:c6:
af:ef:2e:76:01:8e:24:91:90:27:fe:b9:e7:b3:da:
9e:fd:94:d2:d0:92:4a:a2:1b:14:7d:3a:14:3b:5b:
68:1c:78:cc:31:9f:85:cb:13:57:70:b6:ec:8a:a8:
9f:37:f3:ce:c4:9d:95:ab:1d:ed:bd:7c:52:e3:56:
e2:4b:7e:c2:d5:c0:93:2b:df:3e:24:93:3a:52:56:
eb:d2:9e:16:58:97:32:4f:bb:d9:99:22:b1:55:c7:
dc:72:35:6a:05:be:e0:de:67:9c:ad:aa:60:95:9e:
13:1a:e7:10:f7:1b:f0:5a:a8:96:fd:a5:8c:24:e4:
1f:2c:fb:0c:5c:93:c8:d9:8c:f9:af:5a:41:76:7e:
30:02:ab:f3:a2:31:5d:f1:d2:3c:79:b9:f6:07:17:
55:33:b7:24:c1:5c:1b:6a:b4:4b:e6:f5:f3:5f:0e:
a7:17:0f:49:ed:c4:76:e7:2a:da:7e:f1:2a:e6:1c:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AB:F5:F0:C5:5F:5B:EA:A1:4D:C3:E0:1E:6D:62:5D:E5:8F:A6:AA
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P6v18MVfW-qhTcPgHm1iXeWPpqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.96.0/24
82.153.100.0/24
82.153.206.0/24
Signature Algorithm: sha256WithRSAEncryption
33:01:fc:84:12:f8:3b:64:e0:b8:2b:3c:1b:5d:56:f0:4c:d1:
13:b8:d8:4c:6d:90:e8:8a:85:47:1f:bc:14:c8:c6:d7:60:a4:
7c:79:6a:f4:91:81:dc:fa:69:27:e5:38:be:1c:cd:0d:a5:12:
69:b4:63:d7:48:99:eb:48:b7:43:c5:74:70:33:bc:e2:4b:f1:
36:0a:3b:61:f1:0b:ad:9e:b9:10:2f:6e:70:92:40:4b:2e:78:
89:7d:02:14:04:74:18:51:73:c4:f1:20:ae:ee:54:a0:7f:a3:
e2:e3:29:6b:ae:3b:40:12:35:39:a6:39:dd:f2:02:85:33:4b:
2e:35:a2:18:c1:b4:65:ce:0c:c8:33:20:c4:e3:82:90:f0:af:
9d:7c:0c:a4:62:c6:1a:a5:e4:50:34:f5:2d:42:d7:ca:bc:10:
4e:62:75:56:09:37:55:1b:17:31:b9:65:a0:31:84:76:d4:71:
8b:0f:9b:c6:b3:94:35:71:02:77:53:3c:66:1f:1c:34:0a:5b:
66:67:92:b1:0e:b1:af:35:9c:b2:e7:5b:29:b2:4c:12:28:4e:
35:17:ba:a1:ad:28:38:b7:b9:61:21:3b:57:65:42:3c:97:a2:
9a:53:ac:61:90:73:12:7d:34:63:94:c8:5d:02:e1:35:d6:ef:
8f:b3:55:b9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaA3yr1FT+8B0CV7wsK9HBf+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODI1MDcyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmFiZjVmMGM1NWY1YmVhYTE0ZGMzZTAxZTZkNjI1ZGU1OGZhNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE2CNL8Pd13gNWZsLzlbZa5+xtBx
cPmz8VZ+qWIqB2hLcltCMBIhlKSK0+R1tuBEj7hkuYGGjby24rmj9hWMJ1Mkx1f6
vh5oFMav7y52AY4kkZAn/rnns9qe/ZTS0JJKohsUfToUO1toHHjMMZ+FyxNXcLbs
iqifN/POxJ2Vqx3tvXxS41biS37C1cCTK98+JJM6Ulbr0p4WWJcyT7vZmSKxVcfc
cjVqBb7g3mecrapglZ4TGucQ9xvwWqiW/aWMJOQfLPsMXJPI2Yz5r1pBdn4wAqvz
ojFd8dI8ebn2BxdVM7ckwVwbarRL5vXzXw6nFw9J7cR25yrafvEq5hwtwQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFD+r9fDFX1vqoU3D4B5tYl3lj6aqMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUDZ2MThNVmZXLXFoVGNQZ0htMWlYZVdQcHFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUplgAwQA
UplkAwQAUpnOMA0GCSqGSIb3DQEBCwUAA4IBAQAzAfyEEvg7ZOC4KzwbXVbwTNET
uNhMbZDoioVHH7wUyMbXYKR8eWr0kYHc+mkn5Ti+HM0NpRJptGPXSJnrSLdDxXRw
M7ziS/E2Cjth8QutnrkQL25wkkBLLniJfQIUBHQYUXPE8SCu7lSgf6Pi4ylrrjtA
EjU5pjnd8gKFM0suNaIYwbRlzgzIMyDE44KQ8K+dfAykYsYapeRQNPUtQtfKvBBO
YnVWCTdVGxcxuWWgMYR21HGLD5vGs5Q1cQJ3UzxmHxw0CltmZ5KxDrGvNZyy51sp
skwSKE41F7qhrSg4t7lhITtXZUI8l6KaU6xhkHMSfTRjlMhdAuE11u+Ps1W5
-----END CERTIFICATE-----
Generated at Sun Sep 13 08:48:25 2026 by rpki-client