Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eKfNpyZmu-9dzXPWQ27gN-fPvzg.roa
File: eKfNpyZmu-9dzXPWQ27gN-fPvzg.roa (raw, json)
Hash identifier: gfb3U7lQtH2Zq3Kn+/4xLvQw4ze/A5ewo/0085D0wkI=
Subject key identifier: 78:A7:CD:A7:26:66:BB:EF:5D:CD:73:D6:43:6E:E0:37:E7:CF:BF:38
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FDC72B40600577ACF02ABFBED84F57CA4
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eKfNpyZmu-9dzXPWQ27gN-fPvzg.roa
Signing time: Fri 07 Aug 2026 13:38:52 +0000
ROA not before: Fri 07 Aug 2026 13:38:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149978
IP address blocks: 82.152.234.0/24 maxlen: 24
82.152.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:72:b4:06:00:57:7a:cf:02:ab:fb:ed:84:f5:7c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 7 13:38:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78a7cda72666bbef5dcd73d6436ee037e7cfbf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:98:2c:f4:d4:b9:b0:f7:7a:b5:95:94:02:
81:22:dd:6d:3d:c1:db:13:df:b7:e6:85:0e:9a:79:
3f:1e:fa:87:51:0f:e9:f5:7d:96:05:3c:88:b1:76:
dc:5a:bb:f1:2b:29:e8:58:da:33:77:0b:a9:41:24:
0d:6a:b5:5a:4a:18:1e:ce:3e:89:9d:f6:68:17:85:
f2:ec:69:cd:35:6e:e6:80:e0:5a:20:2a:d7:c1:db:
ac:92:ec:c3:ce:1b:9c:eb:43:21:b0:1e:0d:2c:ff:
c4:c2:6d:a1:c5:c0:3a:64:0b:01:e5:a3:50:5d:24:
71:16:73:89:46:e7:12:48:36:b4:06:b6:0a:aa:fe:
f8:b5:1b:6f:b1:26:98:73:f6:4c:56:8a:d1:02:d0:
f9:b7:6e:30:e4:3e:5d:8b:1d:bd:ea:49:d1:00:13:
b0:8e:8c:30:1b:cb:ba:31:5a:b5:b0:f3:cd:6b:44:
95:c6:93:82:56:dc:82:8c:e4:0e:da:ca:7d:7f:22:
94:aa:fb:80:5e:77:6a:ab:53:dd:7c:cf:16:cb:25:
39:23:82:d6:75:2c:79:79:c1:56:95:62:d2:60:80:
f1:9b:28:97:18:14:48:b2:77:81:b4:c1:01:27:d9:
3c:ea:e8:52:7c:1f:44:49:cf:83:1c:f5:32:89:90:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A7:CD:A7:26:66:BB:EF:5D:CD:73:D6:43:6E:E0:37:E7:CF:BF:38
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eKfNpyZmu-9dzXPWQ27gN-fPvzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.234.0/24
82.152.241.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a8:85:1f:3b:3d:26:8a:36:87:00:cb:84:d7:73:29:ce:f7:
4d:4b:2d:2c:d1:4e:6a:f3:96:fb:96:54:6b:1e:bc:c3:37:91:
f0:ac:86:0d:53:39:03:aa:a0:89:ba:97:53:22:c4:fb:6b:7a:
9d:1a:54:c7:3b:39:f9:ab:57:fc:17:9e:35:73:80:d2:bd:80:
34:de:72:29:ce:0d:06:64:5d:c7:1c:1c:2d:08:8f:8a:f5:74:
f2:e3:d0:51:c4:cf:02:77:bd:d5:ab:c3:ac:07:52:66:a0:4d:
af:13:ff:fc:0f:00:79:8a:82:40:b7:cc:5e:10:40:aa:bb:b5:
5a:49:a7:62:5b:4b:df:d7:1c:47:73:36:28:ee:b4:12:de:23:
eb:37:2d:09:e4:b1:76:ec:e8:55:e0:a9:21:a1:87:59:9f:91:
2d:f0:8c:51:30:d6:fa:b9:86:b1:8e:be:4c:44:0d:3b:4e:70:
0b:26:f3:2e:af:b9:10:55:ff:6a:dd:98:8a:f7:60:82:04:da:
74:90:de:a0:58:6c:70:00:0a:a4:23:84:ea:34:71:8d:a8:7f:
4a:74:0b:18:32:41:89:16:7d:d9:c7:70:1a:d4:4a:07:f7:33:
89:98:60:54:73:cb:9c:00:14:d9:9a:3d:61:5a:d9:08:a2:ac:
62:a2:c3:ce
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/ccrQGAFd6zwKr++2E9XykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODA3MTMzODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGE3Y2RhNzI2NjZiYmVmNWRjZDczZDY0MzZlZTAzN2U3Y2ZiZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi2YLPTUubD3erWVlAKBIt1tPcHb
E9+35oUOmnk/HvqHUQ/p9X2WBTyIsXbcWrvxKynoWNozdwupQSQNarVaShgezj6J
nfZoF4Xy7GnNNW7mgOBaICrXwduskuzDzhuc60MhsB4NLP/Ewm2hxcA6ZAsB5aNQ
XSRxFnOJRucSSDa0BrYKqv74tRtvsSaYc/ZMVorRAtD5t24w5D5dix296knRABOw
jowwG8u6MVq1sPPNa0SVxpOCVtyCjOQO2sp9fyKUqvuAXndqq1PdfM8WyyU5I4LW
dSx5ecFWlWLSYIDxmyiXGBRIsneBtMEBJ9k86uhSfB9ESc+DHPUyiZCy7QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHinzacmZrvvXc1z1kNu4Dfnz784MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZUtmTnB5Wm11LTlkelhQV1EyN2dOLWZQdnpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpjqAwQA
UpjxMA0GCSqGSIb3DQEBCwUAA4IBAQA3qIUfOz0mijaHAMuE13MpzvdNSy0s0U5q
85b7llRrHrzDN5HwrIYNUzkDqqCJupdTIsT7a3qdGlTHOzn5q1f8F541c4DSvYA0
3nIpzg0GZF3HHBwtCI+K9XTy49BRxM8Cd73Vq8OsB1JmoE2vE//8DwB5ioJAt8xe
EECqu7VaSadiW0vf1xxHczYo7rQS3iPrNy0J5LF27OhV4KkhoYdZn5Et8IxRMNb6
uYaxjr5MRA07TnALJvMur7kQVf9q3ZiK92CCBNp0kN6gWGxwAAqkI4TqNHGNqH9K
dAsYMkGJFn3Zx3Aa1EoH9zOJmGBUc8ucABTZmj1hWtkIoqxiosPO
-----END CERTIFICATE-----
Generated at Wed Aug 12 08:35:50 2026 by rpki-client