Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Qg45GvensjaAsIiVLYuPZ7aRIkI.roa
File: Qg45GvensjaAsIiVLYuPZ7aRIkI.roa (raw, json)
Hash identifier: PXq1bvjJF1rGiYClKgACv8yFRj4mBg06U1S/zC5MSng=
Subject key identifier: 42:0E:39:1A:F7:A7:B2:36:80:B0:88:95:2D:8B:8F:67:B6:91:22:42
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A01E26655496EAA00ECB1A1680CD135B91
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Qg45GvensjaAsIiVLYuPZ7aRIkI.roa
Signing time: Thu 20 Aug 2026 07:50:27 +0000
ROA not before: Thu 20 Aug 2026 07:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 82.152.56.0/24 maxlen: 24
82.152.78.0/24 maxlen: 24
82.152.80.0/24 maxlen: 24
82.152.112.0/24 maxlen: 24
82.152.113.0/24 maxlen: 24
82.152.119.0/24 maxlen: 24
82.152.123.0/24 maxlen: 24
82.152.124.0/24 maxlen: 24
82.152.125.0/24 maxlen: 24
82.152.126.0/24 maxlen: 24
82.152.135.0/24 maxlen: 24
82.152.137.0/24 maxlen: 24
82.152.185.0/24 maxlen: 24
82.152.235.0/24 maxlen: 24
82.152.237.0/24 maxlen: 24
82.152.239.0/24 maxlen: 24
82.153.47.0/24 maxlen: 24
82.153.48.0/24 maxlen: 24
82.153.59.0/24 maxlen: 24
82.153.87.0/24 maxlen: 24
82.153.176.0/24 maxlen: 24
82.153.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:26:65:54:96:ea:a0:0e:cb:1a:16:80:cd:13:5b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 20 07:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=420e391af7a7b23680b088952d8b8f67b6912242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:8d:6a:1a:8c:09:8d:e6:35:7e:66:61:73:
d8:56:d4:d8:d2:f9:71:c0:66:c8:d6:8e:26:06:91:
cb:59:62:4b:19:ef:0f:19:a4:b0:ce:d4:4e:46:22:
69:6e:4c:50:d5:47:14:87:8d:b1:04:4c:45:42:c2:
5c:97:0b:0e:ee:11:a9:8c:ae:47:72:9d:8e:ba:c1:
c5:43:38:44:b4:6b:80:9f:e1:30:b8:56:b2:8c:07:
f7:b2:2c:5e:89:d8:45:88:b8:2b:e3:d8:34:67:3b:
fc:f1:d7:eb:48:57:9c:3d:e1:56:d7:e6:2c:86:52:
c1:c1:2b:2c:30:1f:62:d7:15:23:01:c2:3b:26:e4:
4b:b3:62:eb:95:99:82:87:37:49:69:be:ba:ca:7e:
50:62:89:ad:9e:d8:35:96:d0:e4:88:2e:e2:af:1f:
2e:9f:18:c4:59:0e:d3:e4:56:5d:f2:15:b9:17:22:
b4:07:ea:73:ed:ad:1e:de:c1:4c:94:2f:91:f5:3c:
be:2f:b9:75:b7:a7:43:5b:ec:33:2b:e1:58:90:8c:
4d:2d:c5:f9:cc:26:6a:e4:7b:bd:b8:17:b8:96:09:
71:63:03:5b:37:07:b5:c1:cb:5c:ba:ef:e6:af:78:
69:ee:14:ac:8c:b7:00:00:d4:04:2d:48:98:50:92:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0E:39:1A:F7:A7:B2:36:80:B0:88:95:2D:8B:8F:67:B6:91:22:42
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Qg45GvensjaAsIiVLYuPZ7aRIkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.56.0/24
82.152.78.0/24
82.152.80.0/24
82.152.112.0/23
82.152.119.0/24
82.152.123.0-82.152.126.255
82.152.135.0/24
82.152.137.0/24
82.152.185.0/24
82.152.235.0/24
82.152.237.0/24
82.152.239.0/24
82.153.47.0-82.153.48.255
82.153.59.0/24
82.153.87.0/24
82.153.176.0/24
82.153.188.0/24
Signature Algorithm: sha256WithRSAEncryption
63:f1:6c:c2:e9:6b:5a:ff:16:79:1e:37:79:3d:8c:5e:d6:f4:
c6:34:10:37:43:ea:fd:13:9a:63:ca:4b:f5:f2:db:53:e1:71:
9e:88:46:f1:76:0d:3a:c9:fd:1f:14:f3:bd:c7:06:d4:06:a2:
9d:a6:67:e2:66:d6:d2:94:1c:62:cf:0c:df:f7:b9:21:da:71:
f9:fc:2d:9f:06:a5:4a:c3:86:3c:34:90:52:3e:db:09:36:a4:
e9:ee:76:fd:d4:14:13:36:40:62:26:78:79:d1:ec:d3:77:49:
22:e5:1c:cf:0b:16:ee:19:06:08:26:c3:b3:70:b5:7e:37:87:
be:4f:86:9b:d3:57:88:a8:6e:10:a9:7c:8a:70:ad:18:14:99:
31:62:88:e9:c1:af:55:73:17:61:35:0a:77:e7:0b:b5:85:be:
e8:10:ba:32:05:e4:08:7d:18:01:05:79:3a:eb:6b:55:da:ad:
18:91:43:3b:6a:2b:55:8f:27:24:6c:b5:dd:a0:e0:8a:c5:c9:
26:65:cb:d8:e3:ba:22:97:a9:4f:a1:6f:ab:4b:0c:2b:7c:0e:
e8:62:30:c8:87:42:80:c4:4b:29:19:74:9c:c3:71:03:be:56:
bd:5a:ae:6f:75:29:ef:36:6d:ee:c6:5e:d8:5f:48:4e:6d:c8:
51:1a:85:56
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAaAeJmVUluqgDssaFoDNE1uRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODIwMDc1MDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjBlMzkxYWY3YTdiMjM2ODBiMDg4OTUyZDhiOGY2N2I2OTEyMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEqNahqMCY3mNX5mYXPYVtTY0vlx
wGbI1o4mBpHLWWJLGe8PGaSwztRORiJpbkxQ1UcUh42xBExFQsJclwsO7hGpjK5H
cp2OusHFQzhEtGuAn+EwuFayjAf3sixeidhFiLgr49g0Zzv88dfrSFecPeFW1+Ys
hlLBwSssMB9i1xUjAcI7JuRLs2LrlZmChzdJab66yn5QYomtntg1ltDkiC7irx8u
nxjEWQ7T5FZd8hW5FyK0B+pz7a0e3sFMlC+R9Ty+L7l1t6dDW+wzK+FYkIxNLcX5
zCZq5Hu9uBe4lglxYwNbNwe1wctcuu/mr3hp7hSsjLcAANQELUiYUJI7LwIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFEIOORr3p7I2gLCIlS2Lj2e2kSJCMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUWc0NUd2ZW5zamFBc0lpVkxZdVBaN2FSSWtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBABSmDgD
BABSmE4DBABSmFADBAFSmHADBABSmHcwDAMEAFKYewMEAFKYfgMEAFKYhwMEAFKY
iQMEAFKYuQMEAFKY6wMEAFKY7QMEAFKY7zAMAwQAUpkvAwQAUpkwAwQAUpk7AwQA
UplXAwQAUpmwAwQAUpm8MA0GCSqGSIb3DQEBCwUAA4IBAQBj8WzC6Wta/xZ5Hjd5
PYxe1vTGNBA3Q+r9E5pjykv18ttT4XGeiEbxdg06yf0fFPO9xwbUBqKdpmfiZtbS
lBxizwzf97kh2nH5/C2fBqVKw4Y8NJBSPtsJNqTp7nb91BQTNkBiJnh50ezTd0ki
5RzPCxbuGQYIJsOzcLV+N4e+T4ab01eIqG4QqXyKcK0YFJkxYojpwa9VcxdhNQp3
5wu1hb7oELoyBeQIfRgBBXk662tV2q0YkUM7aitVjyckbLXdoOCKxckmZcvY47oi
l6lPoW+rSwwrfA7oYjDIh0KAxEspGXScw3EDvla9Wq5vdSnvNm3uxl7YX0hObchR
GoVW
-----END CERTIFICATE-----
Generated at Tue Aug 25 08:34:54 2026 by rpki-client