Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/koovvOZFLxIv8G7sbMM2aIs0Epc.roa
File: koovvOZFLxIv8G7sbMM2aIs0Epc.roa (raw, json)
Hash identifier: Rd6aIv4qjn3BeYpM/Pcp5HGU5qACJm5jYp4MowFhbbc=
Subject key identifier: 92:8A:2F:BC:E6:45:2F:12:2F:F0:6E:EC:6C:C3:36:68:8B:34:12:97
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FFBB89FD16DA29076A2239B15FFA72FBF
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/koovvOZFLxIv8G7sbMM2aIs0Epc.roa
Signing time: Thu 13 Aug 2026 15:23:28 +0000
ROA not before: Thu 13 Aug 2026 15:23:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203758
IP address blocks: 82.153.70.0/24 maxlen: 24
82.153.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:b8:9f:d1:6d:a2:90:76:a2:23:9b:15:ff:a7:2f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 13 15:23:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=928a2fbce6452f122ff06eec6cc336688b341297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:86:dc:54:4d:6d:c7:52:9c:7e:d8:cf:d5:
18:1b:3a:2d:1a:cd:52:1b:04:be:39:a3:e6:54:3c:
d5:80:d7:60:bc:da:54:93:8c:37:d8:53:ee:94:32:
12:5c:df:55:81:a2:86:2d:64:2a:db:0d:f4:e1:f0:
d9:61:b0:9c:e9:26:a3:3a:d8:3b:55:31:ce:61:1f:
ab:fe:70:82:d9:85:8b:1a:ee:4d:76:09:35:72:ac:
8e:25:3d:e0:ea:96:11:bf:90:37:06:cb:9d:65:fe:
86:b3:1b:26:f7:ce:00:78:31:32:a3:ce:b5:4e:47:
0d:6c:1e:9b:41:87:be:ac:ff:63:da:df:e8:3f:d7:
15:09:db:74:c9:8c:22:44:3d:2c:a8:db:3d:93:d3:
f6:76:a1:ce:e8:ba:b9:a2:31:13:1a:13:c7:c7:7c:
10:c3:f1:49:01:56:33:78:4d:8d:aa:a7:18:ca:c4:
8f:ad:21:30:f2:4a:13:88:e1:01:6b:b2:2d:c5:02:
7e:26:7a:b9:08:e8:2c:96:e5:99:48:b7:43:6d:67:
4c:7b:d0:16:28:58:3a:99:d2:ec:ea:86:9a:63:56:
16:3c:ad:35:1a:a2:3e:0c:f3:a6:02:52:21:39:bb:
51:2c:8e:d1:f3:83:64:9e:2a:1b:28:d3:fa:7b:40:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8A:2F:BC:E6:45:2F:12:2F:F0:6E:EC:6C:C3:36:68:8B:34:12:97
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/koovvOZFLxIv8G7sbMM2aIs0Epc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.70.0/24
82.153.118.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6e:1b:b3:56:05:37:86:de:b5:c2:ff:6d:31:46:19:68:6b:
8e:55:83:49:95:7d:3a:2e:2a:d3:a6:84:ff:9f:89:95:87:05:
c6:42:6f:42:4f:9f:03:1a:33:b8:0c:3d:96:03:43:d4:a0:2e:
d2:2b:15:77:cf:1e:6b:7a:a1:04:c6:5f:b9:07:f1:ae:74:87:
a8:a3:b9:cb:36:78:ea:e8:41:6f:49:b6:3a:b5:d5:91:64:63:
46:eb:a8:f9:c7:ca:74:27:54:6c:a1:ff:b3:30:79:07:75:7a:
3e:5e:d1:bf:67:bf:70:c7:19:bd:e8:9c:b0:df:37:80:c4:fa:
f2:3d:5a:b0:07:85:db:76:3c:69:e9:b8:6e:d3:17:3a:c7:82:
ff:c3:d5:f9:16:a1:12:46:02:d7:ab:6d:6b:c7:77:5a:f6:f4:
77:9a:fa:56:4c:a6:50:b2:84:01:8e:05:84:cc:4a:16:b8:74:
ba:c8:07:53:a3:98:ae:a6:92:3e:0a:25:d1:2d:79:13:88:f9:
9d:f1:d4:65:61:87:b9:e5:51:b3:f9:5e:ed:9a:65:da:06:a3:
4d:4d:08:ae:b5:68:f7:6f:05:79:19:e7:1d:4f:fe:c7:38:9f:
94:89:d6:87:53:ca:38:c1:0c:41:7f:fe:0c:f2:e1:56:b4:60:
97:83:30:01
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/7uJ/RbaKQdqIjmxX/py+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODEzMTUyMzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjhhMmZiY2U2NDUyZjEyMmZmMDZlZWM2Y2MzMzY2ODhiMzQxMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UqG3FRNbcdSnH7Yz9UYGzotGs1S
GwS+OaPmVDzVgNdgvNpUk4w32FPulDISXN9VgaKGLWQq2w304fDZYbCc6SajOtg7
VTHOYR+r/nCC2YWLGu5Ndgk1cqyOJT3g6pYRv5A3BsudZf6Gsxsm984AeDEyo861
TkcNbB6bQYe+rP9j2t/oP9cVCdt0yYwiRD0sqNs9k9P2dqHO6Lq5ojETGhPHx3wQ
w/FJAVYzeE2NqqcYysSPrSEw8koTiOEBa7ItxQJ+Jnq5COgsluWZSLdDbWdMe9AW
KFg6mdLs6oaaY1YWPK01GqI+DPOmAlIhObtRLI7R84NkniobKNP6e0CEIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJKKL7zmRS8SL/Bu7GzDNmiLNBKXMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEva29vdnZPWkZMeEl2OEc3c2JNTTJhSXMwRXBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUplGAwQA
Upl2MA0GCSqGSIb3DQEBCwUAA4IBAQBrbhuzVgU3ht61wv9tMUYZaGuOVYNJlX06
LirTpoT/n4mVhwXGQm9CT58DGjO4DD2WA0PUoC7SKxV3zx5reqEExl+5B/GudIeo
o7nLNnjq6EFvSbY6tdWRZGNG66j5x8p0J1Rsof+zMHkHdXo+XtG/Z79wxxm96Jyw
3zeAxPryPVqwB4Xbdjxp6bhu0xc6x4L/w9X5FqESRgLXq21rx3da9vR3mvpWTKZQ
soQBjgWEzEoWuHS6yAdTo5iuppI+CiXRLXkTiPmd8dRlYYe55VGz+V7tmmXaBqNN
TQiutWj3bwV5GecdT/7HOJ+UidaHU8o4wQxBf/4M8uFWtGCXgzAB
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:21 2026 by rpki-client