Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sMWFcrdwjoOIxEbNIGGsF9JwWuw.roa
File: sMWFcrdwjoOIxEbNIGGsF9JwWuw.roa (raw, json)
Hash identifier: AakoN4VNcm6wfHTFr+7nFiiSmqKsWZiAQR4ltpcoRWw=
Subject key identifier: B0:C5:85:72:B7:70:8E:83:88:C4:46:CD:20:61:AC:17:D2:70:5A:EC
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FCC262BD6A538BEB8ADEDB3E1CFF57B31
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sMWFcrdwjoOIxEbNIGGsF9JwWuw.roa
Signing time: Tue 04 Aug 2026 09:41:21 +0000
ROA not before: Tue 04 Aug 2026 09:41:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 81.168.96.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
82.152.9.0/24 maxlen: 24
82.152.65.0/24 maxlen: 24
82.152.118.0/24 maxlen: 24
82.152.122.0/24 maxlen: 24
82.152.219.0/24 maxlen: 24
82.152.244.0/24 maxlen: 24
82.153.98.0/24 maxlen: 24
82.153.105.0/24 maxlen: 24
82.153.106.0/24 maxlen: 24
82.153.107.0/24 maxlen: 24
82.153.108.0/24 maxlen: 24
82.153.124.0/24 maxlen: 24
82.153.222.0/24 maxlen: 24
82.153.230.0/24 maxlen: 24
82.153.237.0/24 maxlen: 24
82.163.8.0/24 maxlen: 24
109.176.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:26:2b:d6:a5:38:be:b8:ad:ed:b3:e1:cf:f5:7b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 4 09:41:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0c58572b7708e8388c446cd2061ac17d2705aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:0e:44:ea:6c:46:50:a7:6d:2f:2d:18:36:
af:58:25:52:6f:af:ac:80:c6:82:55:79:e9:61:dd:
66:15:01:e1:d3:b4:40:18:e0:05:20:e1:13:7e:e6:
50:f9:fc:43:c8:06:81:ae:bc:92:63:56:d5:64:75:
6b:fd:b0:ce:b9:1f:5d:7c:f0:2d:69:f3:cb:b6:7a:
93:fc:a3:39:c3:4b:63:b5:da:88:36:3f:4c:77:05:
c4:fe:e7:37:20:f4:1c:db:e4:f9:27:a6:c5:62:4c:
33:fa:94:a0:52:20:cd:ec:2c:a5:d6:52:1c:73:fc:
59:8b:62:37:e4:9d:5c:1f:49:91:5e:68:ba:a4:34:
3d:12:b1:df:2c:a3:26:ca:1f:1a:81:9f:18:d3:f4:
e7:93:97:a4:72:b1:68:1c:4f:20:97:1f:7c:c8:c6:
87:3f:b9:75:34:7e:7e:30:6d:d7:3b:fe:18:1c:76:
4f:a0:42:2b:11:63:cf:08:ce:1f:ef:3b:15:64:a9:
ba:6e:37:28:29:09:d8:43:c7:7a:29:2a:41:6e:6c:
28:e6:f5:17:75:ed:b4:bf:ea:26:80:ea:2e:49:3c:
a8:8d:1d:8d:27:ae:f5:36:4e:50:3b:e3:f6:74:9c:
98:8f:b6:09:bf:a6:e8:e6:ee:5f:f7:1f:2b:df:d7:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C5:85:72:B7:70:8E:83:88:C4:46:CD:20:61:AC:17:D2:70:5A:EC
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sMWFcrdwjoOIxEbNIGGsF9JwWuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.96.0/24
81.168.116.0/24
82.152.9.0/24
82.152.65.0/24
82.152.118.0/24
82.152.122.0/24
82.152.219.0/24
82.152.244.0/24
82.153.98.0/24
82.153.105.0-82.153.108.255
82.153.124.0/24
82.153.222.0/24
82.153.230.0/24
82.153.237.0/24
82.163.8.0/24
109.176.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:00:2b:fd:d0:9b:77:0b:da:5b:c8:bb:34:ce:c6:8b:b1:6f:
eb:7a:c9:fc:33:ac:f3:1a:7b:c9:8a:5e:1e:65:c5:65:9e:c6:
16:d1:73:e9:4b:90:a4:04:ab:9c:52:d7:20:f2:ae:e1:8c:bb:
ab:86:31:52:a1:01:c8:54:00:16:38:d5:9c:5d:c6:dd:9f:aa:
0f:d8:69:e9:10:a9:22:c2:99:ec:04:a9:8c:e5:c3:f8:90:a9:
6e:f3:a3:dd:e5:e0:c7:53:e2:04:7b:6c:47:ac:bb:23:9c:42:
48:bd:8d:c9:13:64:59:59:d6:72:fa:4f:8d:07:dc:ad:d7:5a:
d5:29:83:68:48:f3:9f:46:fa:26:61:d6:09:a5:e9:9b:09:d4:
a1:b0:51:3d:3f:2a:3d:38:35:20:a2:cd:8b:c1:f1:05:bb:1c:
dc:d5:ee:1c:20:74:f4:21:e0:a4:dd:cf:8c:ec:d8:6f:9a:5e:
fd:4c:37:33:c6:36:14:34:16:56:bb:c5:46:80:12:85:20:9b:
bc:bc:39:ac:0f:8f:33:56:82:90:60:b3:f0:32:fe:a1:bc:3e:
24:d4:29:17:32:7f:d1:d2:4c:c1:53:37:dd:5e:83:6e:c6:9b:
e1:a9:ac:cb:d0:04:07:9d:19:fb:7f:d9:01:3f:c1:b8:eb:84:
1f:69:9f:0a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAZ/MJivWpTi+uK3ts+HP9XsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODA0MDk0MTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGM1ODU3MmI3NzA4ZTgzODhjNDQ2Y2QyMDYxYWMxN2QyNzA1YWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXYOROpsRlCnbS8tGDavWCVSb6+s
gMaCVXnpYd1mFQHh07RAGOAFIOETfuZQ+fxDyAaBrrySY1bVZHVr/bDOuR9dfPAt
afPLtnqT/KM5w0tjtdqINj9MdwXE/uc3IPQc2+T5J6bFYkwz+pSgUiDN7Cyl1lIc
c/xZi2I35J1cH0mRXmi6pDQ9ErHfLKMmyh8agZ8Y0/Tnk5ekcrFoHE8glx98yMaH
P7l1NH5+MG3XO/4YHHZPoEIrEWPPCM4f7zsVZKm6bjcoKQnYQ8d6KSpBbmwo5vUX
de20v+omgOouSTyojR2NJ671Nk5QO+P2dJyYj7YJv6bo5u5f9x8r39eR9wIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFLDFhXK3cI6DiMRGzSBhrBfScFrsMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvc01XRmNyZHdqb09JeEViTklHR3NGOUp3V3V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAFGoYAME
AFGodAMEAFKYCQMEAFKYQQMEAFKYdgMEAFKYegMEAFKY2wMEAFKY9AMEAFKZYjAM
AwQAUplpAwQAUplsAwQAUpl8AwQAUpneAwQAUpnmAwQAUpntAwQAUqMIAwQAbbBT
MA0GCSqGSIb3DQEBCwUAA4IBAQB8ACv90Jt3C9pbyLs0zsaLsW/resn8M6zzGnvJ
il4eZcVlnsYW0XPpS5CkBKucUtcg8q7hjLurhjFSoQHIVAAWONWcXcbdn6oP2Gnp
EKkiwpnsBKmM5cP4kKlu86Pd5eDHU+IEe2xHrLsjnEJIvY3JE2RZWdZy+k+NB9yt
11rVKYNoSPOfRvomYdYJpembCdShsFE9Pyo9ODUgos2LwfEFuxzc1e4cIHT0IeCk
3c+M7Nhvml79TDczxjYUNBZWu8VGgBKFIJu8vDmsD48zVoKQYLPwMv6hvD4k1CkX
Mn/R0kzBUzfdXoNuxpvhqazL0AQHnRn7f9kBP8G464QfaZ8K
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:03 2026 by rpki-client