Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/d7BuuaJOhHaBKamYkgwAIkSXCWg.roa
File: d7BuuaJOhHaBKamYkgwAIkSXCWg.roa (raw, json)
Hash identifier: hpxLCaCWCeFASSLIcZsJqpmidRQNldAGrLbIko9yhIg=
Subject key identifier: 77:B0:6E:B9:A2:4E:84:76:81:29:A9:98:92:0C:00:22:44:97:09:68
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A00EB2B9798AC8282B6431A1B5C2B4C7E4
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/d7BuuaJOhHaBKamYkgwAIkSXCWg.roa
Signing time: Mon 17 Aug 2026 07:49:48 +0000
ROA not before: Mon 17 Aug 2026 07:49:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219036
IP address blocks: 82.152.195.0/24 maxlen: 24
82.152.225.0/24 maxlen: 24
82.152.227.0/24 maxlen: 24
82.153.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:b2:b9:79:8a:c8:28:2b:64:31:a1:b5:c2:b4:c7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 17 07:49:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77b06eb9a24e84768129a998920c002244970968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:5f:39:bb:c1:91:a2:75:e4:7f:17:8b:6a:
66:35:9a:b0:52:8b:b1:10:30:5e:79:fc:35:cc:27:
94:ad:48:8a:08:dd:ee:fb:91:f2:5b:57:1d:af:74:
a4:99:b4:dc:28:ea:31:7c:b9:0b:37:9a:3f:6f:e3:
7b:a1:25:77:79:22:60:13:7a:d4:c7:1d:f7:3b:22:
bb:16:15:aa:4a:13:23:94:e1:c7:bd:e9:9f:6c:e4:
72:88:4c:41:08:57:88:84:66:71:d9:1d:75:06:28:
1d:5e:6a:71:d1:45:8c:aa:75:e8:06:f9:7d:20:e9:
ea:87:89:52:40:e3:4b:5c:fe:57:d0:8d:05:cf:c2:
d3:3e:7e:5f:4c:df:63:77:35:48:db:2d:f4:8b:5c:
f9:1a:78:39:3e:b5:cf:42:0b:a3:2c:42:c6:19:a5:
49:b4:e3:dd:f0:46:84:03:4d:78:76:60:46:43:1b:
7d:58:a0:d6:9e:29:05:7a:34:31:ab:a7:8c:e5:f4:
81:e0:88:35:06:60:92:63:38:29:fe:15:5c:a5:52:
c1:13:b3:de:aa:fe:f1:c8:92:17:83:fd:e6:62:45:
52:85:55:8a:6e:2e:66:1e:23:f0:0e:bc:c1:ce:3b:
6a:c7:71:b2:57:5c:84:1a:90:7f:94:74:21:3c:9b:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B0:6E:B9:A2:4E:84:76:81:29:A9:98:92:0C:00:22:44:97:09:68
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/d7BuuaJOhHaBKamYkgwAIkSXCWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.195.0/24
82.152.225.0/24
82.152.227.0/24
82.153.119.0/24
Signature Algorithm: sha256WithRSAEncryption
41:df:05:95:7a:03:c0:b6:7a:b5:1e:cb:e7:bc:6b:50:62:f5:
93:a3:76:fd:8a:66:38:07:1b:b4:c1:ef:4e:a3:e7:a5:dc:a3:
cf:97:bf:16:d4:0c:72:a2:c7:3d:33:3e:92:0f:51:f3:8b:72:
a8:6a:1c:1e:20:09:9d:06:d8:75:20:7f:c5:9c:bd:21:c0:7a:
32:03:d0:eb:6c:11:25:2d:42:7c:c6:54:ab:20:9c:63:db:dd:
ff:49:50:04:d6:d9:b2:e7:7f:4d:df:5f:88:69:14:f2:09:e9:
c4:18:c6:21:69:bb:81:c1:2b:c9:70:a9:73:a3:95:09:39:88:
de:cc:8f:47:ad:47:13:4f:f7:3a:c9:0f:0e:21:bc:bc:84:59:
ca:48:c4:4b:40:c3:58:d4:d4:39:c2:de:3e:b9:14:21:21:23:
54:ba:8b:56:76:6b:07:9b:7b:33:f8:3f:e9:c0:bf:be:ee:18:
ea:95:7a:88:b5:ae:8a:92:27:ca:d6:d7:90:37:97:c2:bd:81:
5e:71:9d:c2:5d:31:01:16:ab:0c:3a:35:22:4c:6e:e9:05:31:
ab:3a:17:30:5f:35:bc:11:7b:97:00:94:cb:35:c6:a2:ec:10:
6a:73:5a:5d:b4:65:f4:55:60:94:93:cf:2b:1e:89:e6:18:83:
34:07:b5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:32 2026 by rpki-client