Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/svOQlfSl1EHgKEiRrpt6kruQIIk.roa
File: svOQlfSl1EHgKEiRrpt6kruQIIk.roa (raw, json)
Hash identifier: 49koStPA7JHGz1aiuySSTaECwU86QjgcLZYazlci9aI=
Subject key identifier: B2:F3:90:95:F4:A5:D4:41:E0:28:48:91:AE:9B:7A:92:BB:90:20:89
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368F624820462533206E1DEB5788F12
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/svOQlfSl1EHgKEiRrpt6kruQIIk.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 37.252.26.0/24 maxlen: 24
79.99.75.0/24 maxlen: 24
79.99.150.0/23 maxlen: 24
82.152.55.0/24 maxlen: 24
82.153.10.0/24 maxlen: 24
82.153.145.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.226.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
213.210.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f6:24:82:04:62:53:32:06:e1:de:b5:78:8f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2f39095f4a5d441e0284891ae9b7a92bb902089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:2f:95:50:06:a7:b8:b1:50:6a:77:dd:0c:
3e:df:0a:47:60:99:67:4e:26:bc:01:58:72:8d:bf:
ce:4e:ab:7e:db:cb:6b:d5:4c:90:a1:f6:a8:22:c3:
12:2c:a2:22:cb:c1:b9:22:7f:15:e5:5a:db:fa:0d:
14:c1:a1:42:12:84:9b:f9:d1:02:4d:79:f1:f9:3d:
ef:cc:c8:f9:e6:c2:52:0f:bf:3d:f8:83:ac:ad:22:
c4:0e:cc:20:a1:f6:85:89:ce:f3:cd:35:e5:42:fc:
fc:15:98:0b:71:78:6c:fb:8d:52:26:a7:79:37:f7:
c1:43:94:8f:b5:21:fb:b0:39:94:67:66:1a:ea:10:
be:6a:14:15:90:47:84:a3:2e:7c:88:23:e9:28:48:
6e:ed:ea:c0:99:24:f9:56:62:26:0c:66:bb:48:2e:
a5:56:a8:dc:5a:9a:a1:de:59:8d:71:0b:32:ed:95:
00:23:7b:00:3e:e6:e0:d1:44:fc:ab:41:91:6d:fd:
2a:37:b5:0c:2f:1f:48:39:18:e4:6c:ca:e4:41:20:
ed:12:63:b0:fa:0a:41:ee:85:a5:72:8f:59:6c:84:
54:58:b8:18:5c:eb:8f:8a:bf:65:6c:65:e1:10:b7:
98:32:f1:e1:1e:8e:8f:2a:6b:3d:38:78:d0:eb:92:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F3:90:95:F4:A5:D4:41:E0:28:48:91:AE:9B:7A:92:BB:90:20:89
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/svOQlfSl1EHgKEiRrpt6kruQIIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.26.0/24
79.99.75.0/24
79.99.150.0/23
82.152.55.0/24
82.153.10.0/24
82.153.145.0/24
82.163.10.0/23
89.213.226.0/24
109.176.30.0/24
109.176.208.0/24
213.210.41.0/24
Signature Algorithm: sha256WithRSAEncryption
38:fb:a6:73:f2:df:4a:46:26:34:0f:b1:2c:9c:07:cf:7d:ac:
99:b0:be:8c:2b:95:db:c7:af:3b:69:e2:6c:43:9d:70:d7:3e:
ec:78:65:6b:2c:07:0d:ef:f8:81:4d:ba:1a:b4:75:63:6b:8d:
9a:1c:59:98:2d:77:0b:68:f9:07:d2:e0:f1:be:37:33:3d:2b:
ce:f3:6d:16:47:61:87:4f:29:ac:43:4c:d1:4e:07:98:42:12:
5f:d1:8e:23:f1:c0:ec:d5:b0:f4:f5:0c:8d:d9:23:08:10:63:
53:cf:49:25:b3:47:30:af:56:a1:04:63:3a:4f:e9:9e:c2:1a:
81:22:59:67:46:61:c4:d1:06:c0:23:1e:1a:23:22:e4:f8:d0:
1b:71:2e:05:03:e8:49:b4:ff:96:9f:73:74:93:a1:94:13:54:
e2:0d:61:23:3c:fa:6d:54:31:d2:c6:ef:05:d9:b3:58:09:8c:
2b:d5:62:e5:9c:bd:6f:e2:0a:e0:80:d2:f4:d0:d4:4e:7b:73:
84:ed:e2:55:c5:c6:9d:f8:50:58:1c:ca:3b:cb:3c:5c:cd:6e:
66:aa:a3:41:00:72:11:5d:c7:ba:79:d4:2e:a9:dd:62:0e:62:
ca:65:63:1f:89:bc:5c:00:ec:b3:9a:74:7a:50:9b:38:20:90:
81:bf:4e:5e
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZ8jaPYkggRiUzIG4d61eI8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmYzOTA5NWY0YTVkNDQxZTAyODQ4OTFhZTliN2E5MmJiOTAyMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdQvlVAGp7ixUGp33Qw+3wpHYJln
Tia8AVhyjb/OTqt+28tr1UyQofaoIsMSLKIiy8G5In8V5Vrb+g0UwaFCEoSb+dEC
TXnx+T3vzMj55sJSD789+IOsrSLEDswgofaFic7zzTXlQvz8FZgLcXhs+41SJqd5
N/fBQ5SPtSH7sDmUZ2Ya6hC+ahQVkEeEoy58iCPpKEhu7erAmST5VmImDGa7SC6l
VqjcWpqh3lmNcQsy7ZUAI3sAPubg0UT8q0GRbf0qN7UMLx9IORjkbMrkQSDtEmOw
+gpB7oWlco9ZbIRUWLgYXOuPir9lbGXhELeYMvHhHo6PKms9OHjQ65IeFQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFLLzkJX0pdRB4ChIka6bepK7kCCJMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvc3ZPUWxmU2wxRUhnS0VpUnJwdDZrcnVRSUlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAJfwaAwQA
T2NLAwQBT2OWAwQAUpg3AwQAUpkKAwQAUpmRAwQBUqMKAwQAWdXiAwQAbbAeAwQA
bbDQAwQA1dIpMA0GCSqGSIb3DQEBCwUAA4IBAQA4+6Zz8t9KRiY0D7EsnAfPfayZ
sL6MK5Xbx687aeJsQ51w1z7seGVrLAcN7/iBTboatHVja42aHFmYLXcLaPkH0uDx
vjczPSvO820WR2GHTymsQ0zRTgeYQhJf0Y4j8cDs1bD09QyN2SMIEGNTz0kls0cw
r1ahBGM6T+mewhqBIllnRmHE0QbAIx4aIyLk+NAbcS4FA+hJtP+Wn3N0k6GUE1Ti
DWEjPPptVDHSxu8F2bNYCYwr1WLlnL1v4grggNL00NROe3OE7eJVxcad+FBYHMo7
yzxczW5mqqNBAHIRXce6edQuqd1iDmLKZWMfibxcAOyzmnR6UJs4IJCBv05e
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:13 2026 by rpki-client