Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oGV5IrTRpmk9ycjACQpaPqCb-lc.roa
File: oGV5IrTRpmk9ycjACQpaPqCb-lc.roa (raw, json)
Hash identifier: 0IZcQlnwOJZw6o2Sh7tiSr4OOkqSqjddpUkaHSfa890=
Subject key identifier: A0:65:79:22:B4:D1:A6:69:3D:C9:C8:C0:09:0A:5A:3E:A0:9B:FA:57
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A00EB2B8A3DFD5FA55390A5E2629E7F8D4
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oGV5IrTRpmk9ycjACQpaPqCb-lc.roa
Signing time: Mon 17 Aug 2026 07:49:48 +0000
ROA not before: Mon 17 Aug 2026 07:49:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 82.153.218.0/24 maxlen: 24
89.213.224.0/24 maxlen: 24
213.218.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:b2:b8:a3:df:d5:fa:55:39:0a:5e:26:29:e7:f8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 17 07:49:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0657922b4d1a6693dc9c8c0090a5a3ea09bfa57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:a6:62:f9:bc:44:51:b5:72:99:cc:77:62:
8b:32:cb:3a:a6:d8:ed:21:74:b9:62:82:0b:89:b5:
65:ac:55:0d:fc:2f:58:51:48:30:d3:ee:cb:43:58:
c1:d1:7a:62:a0:00:45:bc:92:1e:b6:85:3f:43:9f:
f6:ed:d4:23:43:16:1c:cd:15:83:bc:90:5c:69:2e:
fe:b0:79:7a:8f:e0:17:ab:f5:c0:19:c7:ae:c5:d6:
ca:32:dd:3c:1a:59:41:48:d4:d0:ce:45:d3:9b:a5:
93:14:dc:9a:0f:56:a7:38:b3:1d:90:e9:ff:0f:03:
bd:c4:0c:f1:71:69:1b:72:2a:8c:2b:6d:7c:9d:06:
7c:aa:bd:fc:09:1a:c3:6d:ea:2a:2d:04:02:3a:ac:
41:9f:a7:72:3a:61:24:79:3e:9c:75:90:ca:05:6f:
84:54:d4:5e:2d:bf:4f:2e:21:82:54:09:8d:ea:c1:
73:18:40:3b:09:46:f8:fc:54:81:ee:bc:9a:d5:25:
c3:26:ce:5a:d2:cc:dd:ec:ca:94:c7:4a:47:48:16:
63:6c:c0:1c:04:c1:14:f2:0a:88:d0:f0:d0:d7:e7:
3f:ea:f0:3b:48:df:3d:7d:cb:86:3c:69:4f:f8:1c:
d2:6f:42:51:2c:b1:4c:0a:d5:0c:dc:27:dd:ac:21:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:65:79:22:B4:D1:A6:69:3D:C9:C8:C0:09:0A:5A:3E:A0:9B:FA:57
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oGV5IrTRpmk9ycjACQpaPqCb-lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.218.0/24
89.213.224.0/24
213.218.228.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:aa:ae:e3:d7:9a:22:7f:6f:f1:1b:6f:01:9d:b2:bf:c0:53:
04:1f:7b:26:5e:48:fc:e2:23:4b:8a:86:c0:99:27:dc:d2:b5:
1e:79:da:53:27:1d:14:1f:e5:90:aa:5d:97:5a:97:fe:92:c7:
0c:01:f5:51:d2:31:d3:a0:b1:79:dc:a7:2b:7e:5a:43:14:24:
91:fb:c6:f1:7e:a3:08:88:b1:de:53:92:4b:fe:91:74:15:19:
30:61:31:37:c9:d2:8b:3c:9c:77:9f:1d:2a:dd:ad:dd:37:04:
bb:ff:e4:88:35:a7:13:4f:c9:cc:b2:10:f0:7f:96:86:d5:92:
e7:15:8b:9c:94:7f:1a:5c:38:75:b6:06:6a:09:a8:3f:3f:db:
f4:8f:e1:60:0a:9b:ec:43:77:82:a2:20:0b:4f:7d:0f:1d:ac:
2c:75:1a:7f:b2:3c:ca:fa:4a:cb:bf:17:f9:a6:97:d7:d3:f4:
aa:47:74:c1:64:ba:6c:45:6c:ee:a2:2d:cd:d8:50:af:c3:9f:
ba:46:45:14:0c:a3:f0:e0:b4:2a:68:b1:0a:59:7d:c5:c7:cc:
7a:9d:5e:0e:65:ba:34:ce:bc:e8:21:8f:8b:3f:12:18:e6:85:
67:d7:29:26:09:ef:a5:df:89:aa:68:6c:c0:9d:80:4f:e6:f2:
54:88:4a:05
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaAOsrij39X6VTkKXiYp5/jUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODE3MDc0OTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDY1NzkyMmI0ZDFhNjY5M2RjOWM4YzAwOTBhNWEzZWEwOWJmYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzqmYvm8RFG1cpnMd2KLMss6ptjt
IXS5YoILibVlrFUN/C9YUUgw0+7LQ1jB0XpioABFvJIetoU/Q5/27dQjQxYczRWD
vJBcaS7+sHl6j+AXq/XAGceuxdbKMt08GllBSNTQzkXTm6WTFNyaD1anOLMdkOn/
DwO9xAzxcWkbciqMK218nQZ8qr38CRrDbeoqLQQCOqxBn6dyOmEkeT6cdZDKBW+E
VNReLb9PLiGCVAmN6sFzGEA7CUb4/FSB7rya1SXDJs5a0szd7MqUx0pHSBZjbMAc
BMEU8gqI0PDQ1+c/6vA7SN89fcuGPGlP+BzSb0JRLLFMCtUM3CfdrCGrQQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKBleSK00aZpPcnIwAkKWj6gm/pXMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvb0dWNUlyVFJwbWs5eWNqQUNRcGFQcUNiLWxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUpnaAwQA
WdXgAwQA1drkMA0GCSqGSIb3DQEBCwUAA4IBAQBrqq7j15oif2/xG28BnbK/wFME
H3smXkj84iNLiobAmSfc0rUeedpTJx0UH+WQql2XWpf+kscMAfVR0jHToLF53Kcr
flpDFCSR+8bxfqMIiLHeU5JL/pF0FRkwYTE3ydKLPJx3nx0q3a3dNwS7/+SINacT
T8nMshDwf5aG1ZLnFYuclH8aXDh1tgZqCag/P9v0j+FgCpvsQ3eCoiALT30PHaws
dRp/sjzK+krLvxf5ppfX0/SqR3TBZLpsRWzuoi3N2FCvw5+6RkUUDKPw4LQqaLEK
WX3Fx8x6nV4OZbo0zrzoIY+LPxIY5oVn1ykmCe+l34mqaGzAnYBP5vJUiEoF
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:02 2026 by rpki-client