Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oD6mfLO36EmmyWjKX_RtNQ_y1eQ.roa
File: oD6mfLO36EmmyWjKX_RtNQ_y1eQ.roa (raw, json)
Hash identifier: RoKT8+MeNk5bOyctHYIX1EwyhpjrspCyJPnqJE6x2I8=
Subject key identifier: A0:3E:A6:7C:B3:B7:E8:49:A6:C9:68:CA:5F:F4:6D:35:0F:F2:D5:E4
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FFA00A0B5DC3124165ED99C00602B4984
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oD6mfLO36EmmyWjKX_RtNQ_y1eQ.roa
Signing time: Thu 13 Aug 2026 07:22:52 +0000
ROA not before: Thu 13 Aug 2026 07:22:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 37.252.25.0/24 maxlen: 24
81.168.20.0/24 maxlen: 24
81.168.99.0/24 maxlen: 24
81.168.104.0/24 maxlen: 24
81.168.112.0/24 maxlen: 24
81.168.120.0/24 maxlen: 24
82.152.1.0/24 maxlen: 24
82.152.3.0/24 maxlen: 24
82.152.59.0/24 maxlen: 24
82.152.128.0/24 maxlen: 24
82.152.136.0/24 maxlen: 24
82.152.193.0/24 maxlen: 24
82.152.218.0/24 maxlen: 24
82.152.221.0/24 maxlen: 24
82.152.233.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
82.153.125.0/24 maxlen: 24
82.153.182.0/24 maxlen: 24
82.153.187.0/24 maxlen: 24
82.153.213.0/24 maxlen: 24
82.153.232.0/24 maxlen: 24
82.163.5.0/24 maxlen: 24
82.163.6.0/24 maxlen: 24
109.176.200.0/24 maxlen: 24
213.130.155.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
217.144.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:00:a0:b5:dc:31:24:16:5e:d9:9c:00:60:2b:49:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 13 07:22:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a03ea67cb3b7e849a6c968ca5ff46d350ff2d5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:d1:55:1d:93:48:57:1d:6b:b3:99:d1:24:
ff:eb:4a:5b:81:9b:cb:ee:25:5e:20:b8:57:cf:5d:
31:03:fe:72:18:5d:91:c6:cb:e4:9e:73:46:91:dd:
ee:64:9d:4d:24:32:bb:41:af:84:1d:b7:ae:9f:a9:
3c:46:76:e4:35:e3:c7:9e:3e:c2:a1:dc:b7:11:56:
3a:e1:2b:39:5a:39:c7:b1:85:a3:57:6d:96:19:dc:
5d:45:b8:a2:2d:dd:b2:5e:76:1a:db:72:a1:ee:8b:
9b:7d:c2:e6:44:0d:18:ad:79:7f:5f:c9:d1:2f:07:
5b:f5:be:66:af:45:40:83:e1:84:ee:41:8c:2e:80:
9b:82:ee:1a:6e:04:1d:3e:12:76:96:ba:31:a0:9c:
25:07:99:30:9c:3c:2e:3f:c8:66:68:59:95:9e:f1:
5c:28:d9:e6:df:e3:5e:97:0c:bf:fe:2f:85:98:b2:
62:90:0d:de:5d:fa:e3:aa:82:77:8b:05:1d:b2:85:
73:20:2d:80:7b:0e:10:74:3c:0a:ea:9e:b6:d3:9b:
cc:43:c1:61:7f:52:9b:29:77:09:73:92:c2:24:f6:
01:42:90:99:6c:38:ab:05:9d:3e:37:4b:41:6a:4f:
90:9d:9a:21:8a:b1:0b:ae:8f:e8:65:52:0f:3f:74:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3E:A6:7C:B3:B7:E8:49:A6:C9:68:CA:5F:F4:6D:35:0F:F2:D5:E4
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oD6mfLO36EmmyWjKX_RtNQ_y1eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.25.0/24
81.168.20.0/24
81.168.99.0/24
81.168.104.0/24
81.168.112.0/24
81.168.120.0/24
82.152.1.0/24
82.152.3.0/24
82.152.59.0/24
82.152.128.0/24
82.152.136.0/24
82.152.193.0/24
82.152.218.0/24
82.152.221.0/24
82.152.233.0/24
82.153.72.0/24
82.153.125.0/24
82.153.182.0/24
82.153.187.0/24
82.153.213.0/24
82.153.232.0/24
82.163.5.0-82.163.6.255
109.176.200.0/24
213.130.155.0/24
213.218.213.0/24
217.144.145.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e7:59:61:79:61:ba:be:67:e3:a6:c9:b5:1a:64:6a:7d:62:
80:51:49:40:02:6e:df:1e:1d:dc:89:a8:a7:37:83:90:19:18:
38:bd:bc:c3:65:9b:b2:81:4d:21:28:91:be:cd:e5:8c:fa:2a:
ba:59:f3:77:3a:1a:9c:79:0f:4c:f9:e5:9b:21:a9:80:87:82:
82:37:c9:12:19:0d:60:b8:27:3d:5a:95:2f:27:67:90:27:67:
08:84:64:21:f4:7c:61:c0:b9:d6:05:44:03:4b:8c:1b:d3:11:
47:62:c4:f6:68:15:6e:77:e5:87:9e:94:98:ed:0c:33:ac:e0:
97:3b:7d:da:2b:5c:5d:94:68:c0:31:32:eb:44:a4:3b:3c:dc:
3a:92:b6:21:86:fe:90:51:97:77:6e:90:8c:20:d1:69:f4:cd:
6c:52:9d:cf:fd:59:aa:aa:ea:56:6d:ad:87:56:95:76:ea:ad:
5c:0c:32:66:68:19:b8:55:91:45:04:4d:e7:91:d1:e3:67:f3:
87:46:dc:14:3a:5b:cb:09:e6:1d:ed:60:22:f7:62:ea:e6:ca:
25:d1:44:cd:c1:e2:2a:1d:5a:d8:96:c7:79:45:1d:b9:c5:11:
3e:e5:9a:76:76:03:de:15:b0:b5:2c:50:48:8b:6f:20:68:68:
ca:5d:2a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:10 2026 by rpki-client