Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VIk4ipSpUXG2B0m6wAs6XeEZEv8.roa
File: VIk4ipSpUXG2B0m6wAs6XeEZEv8.roa (raw, json)
Hash identifier: 04lo9Ea7DgL7x4ogBh7gMRHkEzjMTktSDD+RgYe9LKk=
Subject key identifier: 54:89:38:8A:94:A9:51:71:B6:07:49:BA:C0:0B:3A:5D:E1:19:12:FF
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A10B4904D1C897401C7E2E15230827F908
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VIk4ipSpUXG2B0m6wAs6XeEZEv8.roa
Signing time: Mon 05 Oct 2026 08:58:17 +0000
ROA not before: Mon 05 Oct 2026 08:58:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 77.107.88.0/24 maxlen: 24
80.240.94.0/24 maxlen: 24
81.168.32.0/24 maxlen: 24
81.168.80.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.197.0/24 maxlen: 24
82.152.200.0/24 maxlen: 24
82.152.211.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
82.153.119.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
89.213.67.0/24 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.153.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 10:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:49:04:d1:c8:97:40:1c:7e:2e:15:23:08:27:f9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 5 08:58:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5489388a94a95171b60749bac00b3a5de11912ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:9a:4c:53:98:7a:6a:f8:bd:74:3f:1d:0c:
88:43:3c:96:8c:63:03:9f:73:f6:93:0c:28:dc:95:
88:08:09:8c:46:c2:de:54:37:19:c7:4f:f8:6f:57:
cc:3a:aa:83:d3:9b:40:10:58:15:5c:be:a9:6a:b1:
02:a1:e7:98:21:18:98:b2:ea:0e:e0:fd:b1:11:81:
f4:5b:98:03:cb:43:3c:bc:2e:cb:ca:f4:0b:19:7d:
c6:0e:f8:21:c0:ff:55:3d:79:e5:99:8c:71:55:85:
9c:05:b4:e4:e4:f2:02:d3:de:27:08:1b:9a:6c:d0:
1d:f3:dd:93:62:33:3b:ec:3c:44:ec:5a:5c:ce:39:
3d:af:04:f4:de:ad:78:a8:7e:04:72:13:bc:05:43:
e2:f9:03:f0:63:72:6d:38:29:21:c0:4a:6d:14:46:
aa:fc:d2:6d:9f:ef:f7:70:dc:44:a0:4a:ed:bc:76:
47:32:ff:35:0a:9c:8d:83:09:a7:b0:36:33:77:e4:
01:66:4b:ea:a6:0b:a8:43:6a:e2:24:09:7d:a6:7a:
77:01:58:3f:b2:05:70:eb:83:a4:b8:d8:20:40:d1:
3b:f6:64:2d:da:e9:e0:ae:18:78:1d:33:f3:e9:d8:
a8:ed:df:42:71:61:75:c7:85:d9:13:06:a8:07:63:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:89:38:8A:94:A9:51:71:B6:07:49:BA:C0:0B:3A:5D:E1:19:12:FF
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VIk4ipSpUXG2B0m6wAs6XeEZEv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.88.0/24
80.240.94.0/24
81.168.32.0/24
81.168.80.0/24
82.152.8.0/24
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0/24
82.152.98.0/24
82.152.109.0/24
82.152.197.0/24
82.152.200.0/24
82.152.211.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.66.0/24
82.153.119.0/24
82.153.205.0/24
89.213.67.0/24
109.176.40.0-109.176.55.255
109.176.153.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e0:0b:3e:6f:8a:18:1b:82:d1:4b:3e:5e:2f:2f:dd:64:a8:
96:ad:6b:04:b1:d9:ef:37:31:56:fc:17:40:0c:80:a0:b6:5b:
05:a7:a5:28:0d:a6:32:27:d5:9f:85:93:4e:6a:56:96:cb:ee:
58:e3:7e:c9:1e:17:fd:f1:87:a7:73:11:57:77:35:ac:69:8b:
6d:c4:9e:5c:dc:e6:c9:a7:9f:ec:31:c7:a5:c4:ba:1b:f0:e8:
11:96:4a:78:d5:2b:2d:76:b9:c8:5b:f2:e4:8c:e2:e3:61:d7:
2b:a4:f6:87:a7:aa:b2:cd:be:56:8f:b1:c5:a2:00:01:02:2f:
35:42:aa:9a:8b:33:c9:69:b9:b1:ce:9c:af:5c:e1:63:9b:ff:
de:cd:2b:a6:5b:d6:bd:de:fb:25:a2:ce:e7:d0:3a:0b:7c:5e:
f7:71:cb:b0:bc:c1:24:16:df:e2:43:d9:8f:3f:04:58:6b:18:
4c:df:00:b7:5d:e4:5c:39:ab:1e:64:33:c3:2f:2d:3b:c5:b2:
c9:d0:f9:7e:d5:fb:58:1b:a0:db:44:59:40:d6:7b:55:31:90:
e2:c7:76:2b:a7:dc:8c:d1:e8:7a:a9:57:01:68:a5:e5:aa:35:
bd:5b:ec:da:61:23:d7:b7:a0:12:0f:f2:10:73:d4:c7:be:e3:
76:31:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:26:36 2026 by rpki-client