Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/md5dmxYYIySjK8HCagwhGpL6dpM.roa
File: md5dmxYYIySjK8HCagwhGpL6dpM.roa (raw, json)
Hash identifier: C7OlBp/smhpYBqan/akZTnmwYCW3TXag3OtlNm0X3Ac=
Subject key identifier: 99:DE:5D:9B:16:18:23:24:A3:2B:C1:C2:6A:0C:21:1A:92:FA:76:93
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368B0943ABAFA3005594F4ED63B3DBB
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/md5dmxYYIySjK8HCagwhGpL6dpM.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 37.98.145.0/24 maxlen: 24
77.107.88.0/24 maxlen: 24
79.99.146.0/24 maxlen: 24
80.240.94.0/24 maxlen: 24
81.168.80.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.118.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.153.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b0:94:3a:ba:fa:30:05:59:4f:4e:d6:3b:3d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99de5d9b16182324a32bc1c26a0c211a92fa7693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:1b:95:8b:76:85:80:08:54:54:0e:91:16:
f9:96:e9:92:4e:27:6e:09:cd:ea:cd:47:c2:b7:d2:
8c:55:53:51:1b:f0:7e:7c:70:14:53:e8:f7:cd:48:
a4:20:7b:28:1a:ed:cd:a6:e0:63:86:1d:cf:60:7c:
db:2c:45:a4:42:fb:63:21:d0:e8:f0:26:b8:3a:64:
3c:a5:9d:53:34:56:e7:81:fb:0f:09:44:da:99:0d:
e6:c3:7f:eb:dd:a3:4d:19:87:de:9f:a4:a5:46:d2:
4e:8b:1e:ac:a9:a3:4c:14:29:6c:45:d2:e6:36:ac:
0d:01:f5:1e:25:b7:b8:8d:07:bd:15:98:40:9a:a6:
e4:d6:6c:5e:7d:bd:b9:81:d8:17:80:9e:d4:4d:84:
55:a4:9c:a9:83:2f:e5:1f:df:61:fc:a6:bf:c6:b9:
a6:5f:48:a9:19:fe:70:90:ff:81:81:8c:64:84:3a:
ff:ab:ad:1e:56:ae:6e:4a:db:65:18:1b:f4:6d:45:
8c:e5:35:9e:f5:7b:40:e3:e8:48:f1:c2:88:98:4b:
4c:61:df:7c:ee:54:65:33:92:96:1d:f8:0f:bc:8a:
0a:d2:01:53:4a:0c:e5:5d:74:4e:61:cf:f6:1b:47:
02:1e:79:f2:4a:a3:20:ef:7d:9c:f5:9b:59:30:72:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DE:5D:9B:16:18:23:24:A3:2B:C1:C2:6A:0C:21:1A:92:FA:76:93
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/md5dmxYYIySjK8HCagwhGpL6dpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.145.0/24
77.107.88.0/24
79.99.146.0/24
80.240.94.0/24
81.168.80.0/24
82.152.8.0/24
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0/24
82.152.98.0/24
82.152.109.0/24
82.152.118.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.66.0/24
82.153.205.0/24
109.176.40.0-109.176.55.255
109.176.153.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
Signature Algorithm: sha256WithRSAEncryption
55:55:d9:c4:2b:60:fd:35:17:27:17:2f:c7:29:97:9b:51:e7:
c1:4a:ae:9b:7f:d0:82:7d:00:b1:8e:98:ee:c9:bd:f1:e3:4a:
fe:ac:8a:a7:ab:30:d6:29:7e:c5:ce:8c:fd:be:6b:b6:d4:4a:
2b:09:f4:86:87:50:db:de:94:d6:4e:6b:52:f3:bb:b0:45:fb:
16:6f:41:51:c8:61:4c:ae:ef:02:fd:6d:2b:20:bf:cc:6a:19:
9a:40:7f:4e:17:31:3d:c6:ec:11:36:49:c3:57:75:ae:e3:92:
c1:4d:ff:f8:d5:2b:b5:65:40:44:1c:58:47:9a:b9:30:98:3b:
fd:a6:7a:06:e0:d2:11:cc:03:8a:81:ba:17:f6:94:50:30:b1:
4c:db:70:ac:59:08:33:a3:d2:cc:d0:30:34:3e:f8:4d:f0:3f:
08:4d:cb:77:7a:64:96:de:68:5c:04:8b:5c:7f:bf:f2:61:c2:
a0:3d:39:97:60:99:58:e8:5f:50:84:f7:ae:6c:88:a2:f6:86:
3c:3c:cb:e0:93:8f:ec:87:35:34:40:bf:01:36:1e:be:c2:83:
f0:a5:f2:a5:7f:84:7f:0a:63:7b:a0:1c:45:78:da:92:fd:7c:
a6:7c:b2:af:b4:a3:f1:de:a7:9e:f2:13:c3:c0:1d:2b:1d:c0:
5f:fb:f1:65
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgISAZ8jaLCUOrr6MAVZT07WOz27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWRlNWQ5YjE2MTgyMzI0YTMyYmMxYzI2YTBjMjExYTkyZmE3NjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BwblYt2hYAIVFQOkRb5lumSTidu
Cc3qzUfCt9KMVVNRG/B+fHAUU+j3zUikIHsoGu3NpuBjhh3PYHzbLEWkQvtjIdDo
8Ca4OmQ8pZ1TNFbngfsPCUTamQ3mw3/r3aNNGYfen6SlRtJOix6sqaNMFClsRdLm
NqwNAfUeJbe4jQe9FZhAmqbk1mxefb25gdgXgJ7UTYRVpJypgy/lH99h/Ka/xrmm
X0ipGf5wkP+BgYxkhDr/q60eVq5uSttlGBv0bUWM5TWe9XtA4+hI8cKImEtMYd98
7lRlM5KWHfgPvIoK0gFTSgzlXXROYc/2G0cCHnnySqMg732c9ZtZMHItcwIDAQAB
o4ICnDCCApgwHQYDVR0OBBYEFJneXZsWGCMkoyvBwmoMIRqS+naTMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvbWQ1ZG14WVlJeVNqSzhIQ2Fnd2hHcEw2ZHBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjCBmwQCAAEwgZQDBAAl
YpEDBABNa1gDBABPY5IDBABQ8F4DBABRqFADBABSmAgwDAMEAFKYOQMEAFKYOgME
AFKYSQMEAFKYSwMEAFKYYgMEAFKYbQMEAFKYdgMEAFKY4gMEAFKY8AMEAFKY8wME
AFKZQgMEAFKZzTAMAwQDbbAoAwQDbbAwAwQAbbCZAwQA1YKCAwQA1YKVAwQA1drW
MA0GCSqGSIb3DQEBCwUAA4IBAQBVVdnEK2D9NRcnFy/HKZebUefBSq6bf9CCfQCx
jpjuyb3x40r+rIqnqzDWKX7Fzoz9vmu21EorCfSGh1Db3pTWTmtS87uwRfsWb0FR
yGFMru8C/W0rIL/MahmaQH9OFzE9xuwRNknDV3Wu45LBTf/41Su1ZUBEHFhHmrkw
mDv9pnoG4NIRzAOKgboX9pRQMLFM23CsWQgzo9LM0DA0PvhN8D8ITct3emSW3mhc
BItcf7/yYcKgPTmXYJlY6F9QhPeubIii9oY8PMvgk4/shzU0QL8BNh6+woPwpfKl
f4R/CmN7oBxFeNqS/XymfLKvtKPx3qee8hPDwB0rHcBf+/Fl
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:28 2026 by rpki-client