Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nW7Cgo2sbY0Wo4zVPkpDfpFdT8o.roa
File: nW7Cgo2sbY0Wo4zVPkpDfpFdT8o.roa (raw, json)
Hash identifier: A2w4nqib3j62h7NtMqGLEQCn1iFFCbX/urcnutvOOPI=
Subject key identifier: 9D:6E:C2:82:8D:AC:6D:8D:16:A3:8C:D5:3E:4A:43:7E:91:5D:4F:CA
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A1534DA416F6D695D6B62A0836B9D6CBDE
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nW7Cgo2sbY0Wo4zVPkpDfpFdT8o.roa
Signing time: Mon 19 Oct 2026 08:35:59 +0000
ROA not before: Mon 19 Oct 2026 08:35:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 37.252.25.0/24 maxlen: 24
81.168.20.0/24 maxlen: 24
81.168.104.0/24 maxlen: 24
81.168.112.0/24 maxlen: 24
81.168.120.0/24 maxlen: 24
82.152.3.0/24 maxlen: 24
82.152.59.0/24 maxlen: 24
82.152.218.0/24 maxlen: 24
82.152.233.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
82.153.182.0/24 maxlen: 24
82.153.187.0/24 maxlen: 24
82.153.213.0/24 maxlen: 24
82.153.232.0/24 maxlen: 24
82.163.5.0/24 maxlen: 24
109.176.200.0/24 maxlen: 24
213.130.155.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
217.144.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:4d:a4:16:f6:d6:95:d6:b6:2a:08:36:b9:d6:cb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 19 08:35:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d6ec2828dac6d8d16a38cd53e4a437e915d4fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:20:64:89:ad:fa:fb:ad:83:6d:86:fc:1e:
6c:55:2e:4e:ed:69:25:80:fd:e1:e9:5e:12:b4:16:
10:62:a0:25:86:66:13:9a:52:d4:48:4c:95:f2:3a:
41:ee:30:42:7f:c9:6d:5f:25:ff:b0:e8:a2:f3:0f:
ed:9b:0b:70:a3:f0:2e:0f:17:48:14:32:c8:cf:b8:
0f:73:cc:13:55:45:69:bf:e7:e4:c5:76:5c:3f:14:
81:bd:75:18:1a:ac:0e:43:f5:0d:69:44:72:38:dd:
35:e3:b9:a7:79:5b:76:a0:07:52:2d:ba:3d:2c:1d:
64:6e:4c:06:0f:ac:7d:a0:cc:30:a8:5c:57:12:e6:
86:46:84:29:c8:d0:db:85:cf:db:35:eb:51:5f:d6:
f7:e3:b4:88:46:2c:49:f4:31:e6:ba:fc:b4:e0:d4:
14:b2:76:d6:51:72:ca:31:d2:b1:2a:37:1c:93:97:
9c:bc:2a:e3:63:1a:25:0a:eb:43:56:12:97:af:46:
c9:a9:69:02:1a:03:4f:95:d9:1f:0a:2f:9a:ac:71:
de:87:59:10:29:5a:0c:b4:90:41:05:8b:0e:d8:60:
cf:73:9f:7c:88:6f:83:ed:96:bf:39:5a:3d:fc:e5:
67:b0:f0:89:70:91:a4:96:de:eb:14:c0:9c:f0:4c:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6E:C2:82:8D:AC:6D:8D:16:A3:8C:D5:3E:4A:43:7E:91:5D:4F:CA
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nW7Cgo2sbY0Wo4zVPkpDfpFdT8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.25.0/24
81.168.20.0/24
81.168.104.0/24
81.168.112.0/24
81.168.120.0/24
82.152.3.0/24
82.152.59.0/24
82.152.218.0/24
82.152.233.0/24
82.153.72.0/24
82.153.182.0/24
82.153.187.0/24
82.153.213.0/24
82.153.232.0/24
82.163.5.0/24
109.176.200.0/24
213.130.155.0/24
213.218.213.0/24
217.144.145.0/24
Signature Algorithm: sha256WithRSAEncryption
26:32:ba:a3:cb:f4:14:22:51:ae:f5:c9:45:08:77:c0:18:6c:
60:96:b8:ba:a1:10:5c:ae:00:24:a0:67:0e:2f:76:59:63:68:
e7:64:5a:f4:0f:de:f5:5f:3f:a9:2e:90:5c:d9:1c:0a:79:2c:
30:3a:af:9c:87:5f:4a:cb:be:67:33:4a:cf:23:b5:45:b6:0f:
4a:c7:ef:43:5d:31:32:67:38:14:0c:ec:15:55:17:5d:9a:ff:
14:1e:ab:6a:51:c8:9c:9b:bd:e7:7c:ae:a2:e6:8b:5e:b6:ac:
bb:16:b7:de:cd:8a:90:2f:c1:ee:87:86:24:9e:2e:46:f8:55:
ec:88:e9:5d:ff:f5:48:d0:d6:b5:9e:20:e4:49:97:c0:2d:94:
3c:39:4d:d9:a1:44:f9:be:05:8b:1f:6d:26:66:d7:5c:d6:5d:
ff:9e:64:46:2e:2b:08:d2:bb:2e:62:2c:27:26:3d:db:d0:4f:
b6:95:f1:f5:14:3a:22:44:28:31:77:11:4e:1d:10:b1:f3:e5:
13:87:9e:e9:c1:ba:db:34:19:47:fc:08:45:e8:9e:e5:7a:9b:
01:f0:b2:fb:8d:cd:dc:77:b7:30:de:9c:38:28:45:ab:b1:d5:
58:99:91:e5:79:de:1d:c8:4d:5f:a5:5d:65:01:62:34:a3:6b:
d5:b2:d5:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Oct 23 02:40:50 2026 by rpki-client