Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dWojK6yaNQEKV4bJwuLFUzRZBew.roa
File: dWojK6yaNQEKV4bJwuLFUzRZBew.roa (raw, json)
Hash identifier: y047wrpAgLZUd12qh3cUCQwKW/xQNhiN+eNrAwWSNZA=
Subject key identifier: 75:6A:23:2B:AC:9A:35:01:0A:57:86:C9:C2:E2:C5:53:34:59:05:EC
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FEAB18227EFB6BFC10656B31E2657EC00
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dWojK6yaNQEKV4bJwuLFUzRZBew.roa
Signing time: Mon 10 Aug 2026 08:02:09 +0000
ROA not before: Mon 10 Aug 2026 08:02:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 82.152.23.0/24 maxlen: 24
82.152.93.0/24 maxlen: 24
82.152.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:b1:82:27:ef:b6:bf:c1:06:56:b3:1e:26:57:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 10 08:02:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=756a232bac9a35010a5786c9c2e2c553345905ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:35:9d:e6:00:1c:a3:cb:e2:ca:d9:9b:39:
38:98:1e:48:43:79:c2:c6:dc:f7:27:3c:9d:7b:e1:
88:3a:b5:68:33:30:32:58:70:98:2a:9a:58:64:f1:
90:12:f2:a5:26:d3:36:02:bd:e9:72:aa:c9:bf:f3:
71:79:44:5b:4b:fd:8c:0d:4b:c4:bc:f9:68:ce:68:
f2:d2:65:65:14:d1:a1:3a:c9:96:78:7a:59:9d:8c:
a7:f1:e8:68:a5:7e:30:0b:47:be:81:f4:89:23:a4:
8c:99:11:f6:1a:75:33:5d:40:a2:e3:32:b0:50:1e:
22:5b:6c:93:41:69:90:6f:03:42:a3:0e:cc:1b:62:
79:30:44:20:93:96:25:cf:32:6e:ee:e6:34:19:8c:
6a:c6:9b:4c:12:c5:ae:9f:b7:04:f1:9a:a8:fc:43:
b1:de:dc:13:c0:a2:95:9d:a1:1e:9e:ec:71:a1:24:
88:e8:b2:d1:f6:20:a2:2e:8c:51:4d:ae:52:16:ef:
fa:58:a9:f9:5e:2e:55:4d:b0:e2:5e:17:67:cb:ce:
15:31:94:8e:d1:2a:d7:67:a5:d3:7f:61:f0:38:29:
7a:ec:d4:ed:c6:45:63:0e:f3:11:31:54:08:8d:fd:
44:a5:79:ee:7e:ba:c5:0b:e2:65:48:6e:d5:d7:b1:
08:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6A:23:2B:AC:9A:35:01:0A:57:86:C9:C2:E2:C5:53:34:59:05:EC
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dWojK6yaNQEKV4bJwuLFUzRZBew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.23.0/24
82.152.93.0/24
82.152.199.0/24
Signature Algorithm: sha256WithRSAEncryption
33:13:60:08:a0:f6:1a:54:f3:73:f5:b1:6b:d6:4f:a4:78:e2:
12:77:c2:e9:07:a2:9c:88:40:a6:36:ea:a7:1a:79:e1:e2:f8:
81:b3:55:22:07:65:ec:17:2f:f4:d1:2a:b8:52:d1:21:21:5a:
97:2d:6d:21:7e:5c:04:01:7d:57:cc:5b:e8:a1:c3:de:9a:0d:
7a:16:91:e4:21:38:6b:1d:ea:59:4f:20:45:91:96:9e:a9:71:
58:5a:71:e0:32:1b:58:8a:97:0e:46:28:0a:83:d8:fa:f5:bc:
f5:ac:4d:30:d4:68:b4:b1:10:a5:69:b5:3b:ee:d4:a9:90:d5:
2c:25:54:be:2f:88:a7:90:36:fd:12:3f:9d:14:4d:a3:f6:bd:
da:63:f8:0a:7d:7d:3e:e9:9e:b1:a8:9a:20:e2:28:da:7d:30:
bb:ac:52:02:63:8b:01:c7:90:00:1c:aa:c7:f3:72:17:01:46:
e8:8a:de:79:31:e9:42:80:15:aa:a1:40:d5:67:8a:6d:ea:3d:
fb:0e:96:18:87:1e:01:57:32:d1:41:76:70:f8:af:28:f5:e0:
ad:a4:70:c9:46:6d:f0:43:bf:92:5f:c4:2b:44:4a:46:be:d6:
5d:65:33:25:77:38:3e:01:7e:87:f2:c1:83:fd:05:85:26:74:
7c:90:9e:42
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ/qsYIn77a/wQZWsx4mV+wAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODEwMDgwMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTZhMjMyYmFjOWEzNTAxMGE1Nzg2YzljMmUyYzU1MzM0NTkwNWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp81neYAHKPL4srZmzk4mB5IQ3nC
xtz3Jzyde+GIOrVoMzAyWHCYKppYZPGQEvKlJtM2Ar3pcqrJv/NxeURbS/2MDUvE
vPlozmjy0mVlFNGhOsmWeHpZnYyn8ehopX4wC0e+gfSJI6SMmRH2GnUzXUCi4zKw
UB4iW2yTQWmQbwNCow7MG2J5MEQgk5YlzzJu7uY0GYxqxptMEsWun7cE8Zqo/EOx
3twTwKKVnaEenuxxoSSI6LLR9iCiLoxRTa5SFu/6WKn5Xi5VTbDiXhdny84VMZSO
0SrXZ6XTf2HwOCl67NTtxkVjDvMRMVQIjf1EpXnufrrFC+JlSG7V17EIEwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHVqIyusmjUBCleGycLixVM0WQXsMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZFdvaks2eWFOUUVLVjRiSnd1TEZVelJaQmV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUpgXAwQA
UphdAwQAUpjHMA0GCSqGSIb3DQEBCwUAA4IBAQAzE2AIoPYaVPNz9bFr1k+keOIS
d8LpB6KciECmNuqnGnnh4viBs1UiB2XsFy/00Sq4UtEhIVqXLW0hflwEAX1XzFvo
ocPemg16FpHkIThrHepZTyBFkZaeqXFYWnHgMhtYipcORigKg9j69bz1rE0w1Gi0
sRClabU77tSpkNUsJVS+L4inkDb9Ej+dFE2j9r3aY/gKfX0+6Z6xqJog4ijafTC7
rFICY4sBx5AAHKrH83IXAUboit55MelCgBWqoUDVZ4pt6j37DpYYhx4BVzLRQXZw
+K8o9eCtpHDJRm3wQ7+SX8QrREpGvtZdZTMldzg+AX6H8sGD/QWFJnR8kJ5C
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:00 2026 by rpki-client