Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SLNrO0p76sHRqemKJGOVCsjKgEQ.roa
File: SLNrO0p76sHRqemKJGOVCsjKgEQ.roa (raw, json)
Hash identifier: +x+V643SQ4kOWQpIcicl1QNEPIp26JExR7vypPECenw=
Subject key identifier: 48:B3:6B:3B:4A:7B:EA:C1:D1:A9:E9:8A:24:63:95:0A:C8:CA:80:44
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0481690F3647370BA822F5CB5546F7FD2
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SLNrO0p76sHRqemKJGOVCsjKgEQ.roa
Signing time: Fri 28 Aug 2026 11:17:13 +0000
ROA not before: Fri 28 Aug 2026 11:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134135
IP address blocks: 82.152.61.0/24 maxlen: 24
82.152.72.0/24 maxlen: 24
82.152.92.0/24 maxlen: 24
82.153.41.0/24 maxlen: 24
82.153.42.0/24 maxlen: 24
82.153.53.0/24 maxlen: 24
82.153.58.0/24 maxlen: 24
82.153.80.0/24 maxlen: 24
82.153.86.0/24 maxlen: 24
82.153.90.0/24 maxlen: 24
82.153.91.0/24 maxlen: 24
82.153.144.0/24 maxlen: 24
82.153.155.0/24 maxlen: 24
82.153.180.0/24 maxlen: 24
82.153.203.0/24 maxlen: 24
82.163.15.0/24 maxlen: 24
89.213.49.0/24 maxlen: 24
89.213.64.0/24 maxlen: 24
89.213.70.0/24 maxlen: 24
89.213.71.0/24 maxlen: 24
89.213.73.0/24 maxlen: 24
89.213.74.0/24 maxlen: 24
89.213.77.0/24 maxlen: 24
89.213.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:16:90:f3:64:73:70:ba:82:2f:5c:b5:54:6f:7f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 28 11:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48b36b3b4a7beac1d1a9e98a2463950ac8ca8044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:78:a1:88:b3:71:c6:09:eb:a7:66:b3:be:
87:80:02:ca:48:67:c5:dd:d8:6f:bf:af:dc:1d:ff:
db:9b:d7:60:e8:b7:75:53:aa:34:8b:a4:8a:7b:d6:
2e:0f:79:51:0e:1d:e9:65:82:40:7d:3f:e2:44:21:
a0:4e:b8:06:a2:a3:08:01:2f:2f:0a:13:9f:bf:3e:
bb:04:cf:c8:93:24:2a:e7:b4:67:36:72:b6:35:d0:
ba:35:8a:98:a3:33:78:09:01:f2:cb:9c:bc:2b:28:
9b:19:7a:50:62:0f:50:13:a7:8d:bd:3d:44:12:53:
f3:64:f3:e5:81:e4:14:d5:30:de:ee:8f:e4:4f:6d:
1a:c8:8e:6a:f5:2f:3a:7c:9f:1f:ce:ee:a7:b7:65:
71:00:9c:8e:6d:02:85:84:9e:45:a3:7f:bb:f9:bc:
29:80:7f:f8:1b:38:2d:81:7d:54:64:1a:c9:78:a1:
79:d6:a9:9a:46:09:1e:6e:5d:69:02:7c:ba:0a:59:
af:81:0a:a2:d4:b6:42:de:ba:61:96:c7:a4:a2:d3:
83:ca:75:97:08:5e:94:0b:00:37:9d:33:ca:a4:09:
03:39:e8:cf:2c:fa:8e:f8:a9:e1:11:b2:68:2d:0c:
10:51:50:1a:70:eb:7a:b8:56:fe:c8:fa:98:d6:13:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B3:6B:3B:4A:7B:EA:C1:D1:A9:E9:8A:24:63:95:0A:C8:CA:80:44
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SLNrO0p76sHRqemKJGOVCsjKgEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.61.0/24
82.152.72.0/24
82.152.92.0/24
82.153.41.0-82.153.42.255
82.153.53.0/24
82.153.58.0/24
82.153.80.0/24
82.153.86.0/24
82.153.90.0/23
82.153.144.0/24
82.153.155.0/24
82.153.180.0/24
82.153.203.0/24
82.163.15.0/24
89.213.49.0/24
89.213.64.0/24
89.213.70.0/23
89.213.73.0-89.213.74.255
89.213.77.0/24
89.213.79.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5f:0e:1d:14:a6:c3:4f:16:51:19:b3:cb:59:0b:31:8c:41:
74:dc:5a:31:71:6e:91:44:ac:09:c6:2d:95:82:d8:fa:24:4c:
aa:22:d4:d7:c4:f1:34:7b:e8:8d:87:24:ad:52:63:4f:76:94:
de:e1:37:cf:9d:29:3b:e6:b1:a6:c2:1d:9c:57:5a:21:ea:1c:
83:40:f2:ce:73:8a:41:b1:f5:74:8f:20:39:7b:78:6d:f2:8c:
8c:8b:44:9d:e1:df:62:fb:27:d0:6a:a1:7e:ba:e3:29:d4:43:
96:d0:3c:97:80:b9:1a:d9:ba:e7:a7:eb:d7:0c:ce:f6:bd:21:
08:a9:59:ff:2d:e8:16:d9:2d:d2:1b:90:3f:76:63:f8:3e:9b:
66:dc:6e:07:18:04:9b:8e:15:39:22:c0:19:65:85:c3:a4:2c:
a7:70:21:92:89:40:3f:3f:bd:29:e9:87:e9:1d:68:de:3e:41:
ef:56:8e:5b:a5:20:8c:c7:61:13:13:14:01:f6:95:a7:76:ae:
8b:f7:80:9c:bd:26:37:a9:e6:56:1d:79:29:4c:d4:8e:26:e9:
a4:b6:d7:86:d6:95:2b:3e:22:5d:b7:b0:00:20:de:66:55:1f:
08:63:91:b6:c5:fa:32:44:b4:78:6d:1b:fb:ab:e5:49:06:5c:
35:fd:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:40:53 2026 by rpki-client