Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m3aLuy0T1I9OphbNctvzinx2cmA.roa
File: m3aLuy0T1I9OphbNctvzinx2cmA.roa (raw, json)
Hash identifier: n6v5hHjZv2LIz/hLIr3HgOGrWETh59aeTJ+SIdJWGXA=
Subject key identifier: 9B:76:8B:BB:2D:13:D4:8F:4E:A6:16:CD:72:DB:F3:8A:7C:76:72:60
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FD60937F8FAD3D497A499B78666F2F5FB
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m3aLuy0T1I9OphbNctvzinx2cmA.roa
Signing time: Thu 06 Aug 2026 07:45:56 +0000
ROA not before: Thu 06 Aug 2026 07:45:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219289
IP address blocks: 82.152.142.0/24 maxlen: 24
82.153.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:09:37:f8:fa:d3:d4:97:a4:99:b7:86:66:f2:f5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 6 07:45:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b768bbb2d13d48f4ea616cd72dbf38a7c767260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:5a:d4:1e:c1:98:70:47:8f:6a:7f:a3:42:
1b:bc:95:7d:e2:c5:b4:72:33:be:f7:71:46:d7:38:
fd:25:a1:91:3a:d3:6a:15:72:45:c0:45:01:bb:12:
5d:d4:30:2d:9e:71:95:70:c2:73:2f:36:d7:93:b7:
b1:40:95:12:f2:4f:05:a5:b7:34:f8:3b:e8:e5:a8:
04:52:fc:5f:6c:72:89:07:53:18:2f:29:94:38:b6:
2c:24:48:2f:e3:15:6c:36:da:27:2e:22:24:ab:49:
5b:45:b4:96:12:f2:89:4e:57:2b:a9:b9:40:70:e6:
c7:9e:1f:c5:bf:5d:55:1e:b6:72:1e:07:b3:39:31:
cf:96:c6:bf:19:82:4e:2a:a1:84:25:53:2d:13:92:
f5:5e:8c:7c:b0:cf:a3:f1:ee:ae:8d:1c:82:f2:f9:
06:51:d1:5d:21:76:7c:79:d5:fd:90:4d:9e:31:89:
29:1d:66:72:22:cc:2e:8e:de:4f:a5:ec:6f:f1:42:
f9:75:2e:0b:85:f4:11:b6:af:a0:e6:a4:c9:8d:31:
58:8f:1f:49:eb:69:13:30:63:1a:0e:c2:7f:f8:3b:
40:ab:86:24:fa:ac:33:ad:97:69:da:6e:7d:ed:88:
e5:91:5d:39:7f:0c:46:dc:d7:fd:48:94:a8:5d:2c:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:76:8B:BB:2D:13:D4:8F:4E:A6:16:CD:72:DB:F3:8A:7C:76:72:60
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m3aLuy0T1I9OphbNctvzinx2cmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.142.0/24
82.153.227.0/24
Signature Algorithm: sha256WithRSAEncryption
13:de:16:ce:04:76:ed:87:8c:d5:6f:7c:5b:dc:a2:e1:c7:c9:
0e:fa:3a:06:d3:5a:f4:7a:5a:2f:a6:2e:75:5b:ff:ad:d9:97:
ef:97:f4:e6:16:da:3f:48:9b:9d:7e:0f:df:73:0f:59:6d:c8:
2c:7b:5e:3d:e6:65:2d:3a:18:6f:9b:a1:a5:33:17:8e:9a:c5:
99:2a:56:53:40:ea:30:6a:c7:62:f7:40:a7:e1:04:16:26:8d:
da:ff:4b:e7:61:c1:ff:0e:7b:53:44:94:5d:6b:08:b9:bf:fb:
79:d9:60:67:31:6c:fc:13:7e:16:e0:e4:89:ca:84:88:0b:d7:
2d:f0:32:30:73:b8:e9:d1:ff:90:3b:ae:e7:a4:1f:28:4b:4b:
8a:46:57:2f:09:8d:e7:48:b2:ad:57:f5:8c:88:4d:83:2c:22:
d7:99:6d:ba:a8:b8:d7:e3:af:df:45:d3:76:7f:e0:c5:3f:88:
b8:0e:bd:1d:77:b1:c7:6f:f6:4e:00:7f:74:c0:2c:67:1e:0e:
3c:7f:ee:be:75:94:94:f7:fc:8e:bb:33:03:3c:21:d6:67:f2:
e2:5e:40:73:25:25:bf:ae:c1:21:8c:a8:da:e1:38:92:97:24:
3f:1a:5f:19:c1:d2:66:82:32:71:82:bf:c6:e5:2d:36:f9:f3:
32:c8:6f:a5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/WCTf4+tPUl6SZt4Zm8vX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODA2MDc0NTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yjc2OGJiYjJkMTNkNDhmNGVhNjE2Y2Q3MmRiZjM4YTdjNzY3MjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklda1B7BmHBHj2p/o0IbvJV94sW0
cjO+93FG1zj9JaGROtNqFXJFwEUBuxJd1DAtnnGVcMJzLzbXk7exQJUS8k8Fpbc0
+Dvo5agEUvxfbHKJB1MYLymUOLYsJEgv4xVsNtonLiIkq0lbRbSWEvKJTlcrqblA
cObHnh/Fv11VHrZyHgezOTHPlsa/GYJOKqGEJVMtE5L1Xox8sM+j8e6ujRyC8vkG
UdFdIXZ8edX9kE2eMYkpHWZyIswujt5Ppexv8UL5dS4LhfQRtq+g5qTJjTFYjx9J
62kTMGMaDsJ/+DtAq4Yk+qwzrZdp2m597YjlkV05fwxG3Nf9SJSoXSyzMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJt2i7stE9SPTqYWzXLb84p8dnJgMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvbTNhTHV5MFQxSTlPcGhiTmN0dnppbngyY21BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpiOAwQA
UpnjMA0GCSqGSIb3DQEBCwUAA4IBAQAT3hbOBHbth4zVb3xb3KLhx8kO+joG01r0
elovpi51W/+t2Zfvl/TmFto/SJudfg/fcw9Zbcgse1495mUtOhhvm6GlMxeOmsWZ
KlZTQOowasdi90Cn4QQWJo3a/0vnYcH/DntTRJRdawi5v/t52WBnMWz8E34W4OSJ
yoSIC9ct8DIwc7jp0f+QO67npB8oS0uKRlcvCY3nSLKtV/WMiE2DLCLXmW26qLjX
46/fRdN2f+DFP4i4Dr0dd7HHb/ZOAH90wCxnHg48f+6+dZSU9/yOuzMDPCHWZ/Li
XkBzJSW/rsEhjKja4TiSlyQ/Gl8ZwdJmgjJxgr/G5S02+fMyyG+l
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:24 2026 by rpki-client