Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zLV5n-isjJMc7eDkiJzmwHdcfZE.roa
File: zLV5n-isjJMc7eDkiJzmwHdcfZE.roa (raw, json)
Hash identifier: UZvfW20t4pSaUrQrSKYxgF033uNGG6y6/cP4ed2s9Q8=
Subject key identifier: CC:B5:79:9F:E8:AC:8C:93:1C:ED:E0:E4:88:9C:E6:C0:77:5C:7D:91
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F3C0B58A17606AD807B37748AD302786D
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zLV5n-isjJMc7eDkiJzmwHdcfZE.roa
Signing time: Tue 07 Jul 2026 10:06:44 +0000
ROA not before: Tue 07 Jul 2026 10:06:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 82.152.23.0/24 maxlen: 24
82.152.93.0/24 maxlen: 24
82.152.184.0/24 maxlen: 24
82.152.195.0/24 maxlen: 24
82.152.198.0/24 maxlen: 24
82.152.199.0/24 maxlen: 24
82.152.200.0/24 maxlen: 24
82.152.216.0/24 maxlen: 24
82.152.217.0/24 maxlen: 24
82.152.225.0/24 maxlen: 24
82.152.227.0/24 maxlen: 24
82.153.57.0/24 maxlen: 24
82.153.62.0/24 maxlen: 24
82.153.184.0/24 maxlen: 24
82.153.185.0/24 maxlen: 24
82.153.233.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:0b:58:a1:76:06:ad:80:7b:37:74:8a:d3:02:78:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 7 10:06:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccb5799fe8ac8c931cede0e4889ce6c0775c7d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:0e:a8:ba:ab:42:08:d0:d2:6c:90:6b:63:
e9:8b:a1:de:1d:aa:e0:a2:67:17:24:7e:ed:f2:06:
6d:a6:2a:c8:41:d9:67:a2:69:d7:2c:c8:d8:9c:a8:
8f:0a:bd:bd:06:5c:e7:ea:99:d8:4c:bf:38:33:6e:
b1:f3:47:be:53:82:8f:f9:33:37:9b:67:28:96:5b:
4e:98:35:0c:15:31:be:3c:ad:3c:9c:01:67:08:5d:
83:96:80:5b:b6:7e:ed:20:9a:a2:8f:f0:ba:7b:33:
2e:11:74:80:8e:f7:30:ea:a4:29:8e:88:57:68:dd:
75:a2:b6:85:d4:f2:89:7a:13:88:85:2e:30:71:d4:
fc:65:68:fd:8c:64:68:e3:f6:3a:c8:3c:18:8a:8c:
f3:8c:0f:30:c1:5c:6c:bd:71:4b:6a:de:85:9c:26:
70:6e:d4:4b:29:e4:91:13:b5:4a:8a:0d:f0:1c:a5:
11:0e:e6:dc:10:e0:f8:34:38:ed:3b:80:3a:22:a0:
70:d0:14:37:96:79:a5:7e:65:57:6d:e8:dd:e0:3f:
8a:5a:76:be:84:3f:22:c5:1f:5e:4e:e0:df:0a:b8:
ee:0b:97:b4:95:9e:d4:4e:88:8f:5b:eb:ee:d3:47:
6e:ff:85:39:1b:8b:df:0d:ca:4f:68:1b:8e:e9:5d:
36:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B5:79:9F:E8:AC:8C:93:1C:ED:E0:E4:88:9C:E6:C0:77:5C:7D:91
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zLV5n-isjJMc7eDkiJzmwHdcfZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.23.0/24
82.152.93.0/24
82.152.184.0/24
82.152.195.0/24
82.152.198.0-82.152.200.255
82.152.216.0/23
82.152.225.0/24
82.152.227.0/24
82.153.57.0/24
82.153.62.0/24
82.153.184.0/23
82.153.233.0/24
89.213.182.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a4:fb:39:ef:ac:5f:aa:9d:4f:99:ae:0e:6d:d6:5b:2a:f6:
e6:11:0b:e0:b0:f5:bd:18:48:7a:41:37:3b:79:b8:fd:7c:8a:
c2:3b:06:fd:7a:b9:98:da:3e:28:ed:9c:1a:8c:6a:ea:34:86:
e9:47:85:93:e9:7d:96:28:19:3a:ba:a7:32:54:cf:ba:48:14:
8a:36:84:28:a5:6f:6e:4e:b3:12:18:91:db:43:58:6f:9f:63:
e5:d5:00:00:5e:6c:5f:01:18:88:99:d8:46:07:5a:bd:19:a6:
f4:ca:85:80:a7:2f:89:01:ae:a2:09:aa:13:f1:ec:63:8f:49:
cd:4b:28:07:2b:b4:8d:b7:7e:85:55:fe:cd:ea:fc:9b:29:bf:
55:39:b5:f4:fe:41:5f:11:4d:ca:7a:3b:fe:52:18:d1:f2:c0:
51:cb:57:aa:86:77:3f:ab:69:d7:d2:ed:5f:67:35:9a:19:37:
6a:8d:1a:a2:81:46:15:b6:2e:e9:2c:5f:bf:ad:85:12:f7:11:
93:42:77:c6:04:da:63:1c:e7:d8:be:23:05:4b:b3:66:63:32:
c2:03:d6:c0:b0:9c:e9:9f:5d:44:4d:12:04:c1:1a:5c:2d:d8:
08:b5:79:76:83:2e:f3:9d:75:90:77:15:13:7c:f8:40:cc:82:
21:58:6b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:42 2026 by rpki-client