Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/USQSLQl804xsTS2z8L4xsEZxiTs.roa
File: USQSLQl804xsTS2z8L4xsEZxiTs.roa (raw, json)
Hash identifier: 0criT5mJFC4hE/Z5CXWy9eaX9HS3oS+ABYtMUptSO+s=
Subject key identifier: 51:24:12:2D:09:7C:D3:8C:6C:4D:2D:B3:F0:BE:31:B0:46:71:89:3B
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A03DCDBF2E22C152AAF4F8AA8757083CA8
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/USQSLQl804xsTS2z8L4xsEZxiTs.roa
Signing time: Wed 26 Aug 2026 11:21:28 +0000
ROA not before: Wed 26 Aug 2026 11:21:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.76.0/23 maxlen: 24
82.152.79.0/24 maxlen: 24
82.152.86.0/23 maxlen: 24
82.152.88.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.38.0/24 maxlen: 24
82.153.56.0/24 maxlen: 24
82.153.61.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
82.153.83.0/24 maxlen: 24
82.153.84.0/24 maxlen: 24
82.153.132.0/24 maxlen: 24
82.153.186.0/24 maxlen: 24
82.153.201.0/24 maxlen: 24
82.153.239.0/24 maxlen: 24
89.213.98.0/24 maxlen: 24
89.213.232.0/23 maxlen: 24
89.213.234.0/23 maxlen: 24
89.213.236.0/23 maxlen: 24
109.176.32.0/21 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.56.0/21 maxlen: 24
109.176.235.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:cd:bf:2e:22:c1:52:aa:f4:f8:aa:87:57:08:3c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 26 11:21:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5124122d097cd38c6c4d2db3f0be31b04671893b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:8a:4d:69:10:1b:e4:0c:9e:48:e3:a5:46:
ea:5e:6c:a3:24:1f:5e:aa:14:fc:d1:d2:16:c5:af:
cf:45:66:1d:fe:da:cc:48:2a:1d:28:d4:e2:d1:5d:
0c:6f:63:f6:f9:40:75:5d:24:b4:8d:bc:ad:07:26:
d1:d4:4d:38:66:e0:43:ee:1c:d6:ba:4d:d3:75:29:
03:ba:07:c8:d7:6e:64:b0:76:b3:4d:e8:90:6d:a8:
b0:88:d7:d2:c8:22:97:86:aa:be:0e:10:7d:b9:7f:
50:ca:86:5f:36:54:40:8d:59:54:6e:86:3d:f9:57:
30:e3:e1:99:4f:d7:b8:c2:4f:9f:c5:13:7d:4b:e3:
f6:24:6b:30:3b:3d:13:71:78:a7:2b:cb:18:1c:86:
a3:0e:98:a5:64:5b:9b:b4:ac:07:8a:f5:e9:17:15:
d5:1e:f3:35:c4:52:94:20:4c:f0:26:52:2f:16:a2:
7b:c4:ae:0c:9f:09:5a:c6:27:07:4d:80:69:fa:31:
0e:c6:2f:17:cd:18:c4:0e:88:1d:df:64:dd:f5:8e:
98:5b:c5:00:5b:02:62:3a:8c:eb:62:d0:ee:84:e9:
75:24:6b:ab:78:12:3c:8c:fa:c2:59:77:7b:6d:21:
7b:1b:fa:40:9d:40:84:67:92:f1:73:2d:9c:00:90:
3d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:24:12:2D:09:7C:D3:8C:6C:4D:2D:B3:F0:BE:31:B0:46:71:89:3B
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/USQSLQl804xsTS2z8L4xsEZxiTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0-82.152.77.255
82.152.79.0/24
82.152.86.0-82.152.88.255
82.152.109.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.38.0/24
82.153.56.0/24
82.153.61.0/24
82.153.79.0/24
82.153.83.0-82.153.84.255
82.153.132.0/24
82.153.186.0/24
82.153.201.0/24
82.153.239.0/24
89.213.98.0/24
89.213.232.0-89.213.237.255
109.176.32.0/19
109.176.235.0/24
109.176.247.0/24
109.176.251.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
213.218.231.0/24
217.145.65.0/24
Signature Algorithm: sha256WithRSAEncryption
08:71:a2:d7:f7:43:4b:97:6b:c3:11:a4:78:c5:1f:f0:47:ad:
a5:53:f0:8d:17:5e:2f:e9:4f:b2:1b:8d:36:0c:66:12:40:12:
07:2a:3e:ee:c9:12:dc:2a:25:69:ad:3b:ad:c9:68:08:ab:f2:
6b:a0:56:0a:db:2b:2d:1c:f4:33:86:c0:70:55:ad:b0:dc:59:
2f:b4:d9:ac:44:40:f6:f8:42:04:ad:cf:3b:2e:77:04:ee:b9:
80:03:d1:a5:d3:12:9b:2c:84:00:c7:86:57:b4:fc:ad:69:9b:
16:54:ad:0a:4e:cc:d6:45:a6:82:18:fb:37:a3:ea:ad:d7:41:
32:fb:d9:32:36:86:5c:0b:f9:f4:28:ea:4e:a8:d2:66:e2:02:
ec:92:00:63:d0:aa:e1:a6:f8:1d:39:6d:a2:c5:12:bf:77:14:
79:4e:b7:98:c9:9c:63:ee:4f:70:06:fd:92:e1:d8:af:11:9e:
b8:0f:65:b8:e0:2e:65:5c:77:49:61:05:0c:4d:dd:85:f2:cc:
ba:69:36:48:2c:50:36:2f:a9:79:f6:ce:85:07:f6:f2:a6:33:
8f:75:b2:a1:a8:b1:a0:dd:fe:50:c4:6b:3f:3f:27:7f:a0:16:
b3:47:ed:6b:ef:42:1f:80:49:a0:ac:64:84:43:6d:fb:a7:7b:
b4:d7:da:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 05:32:40 2026 by rpki-client