Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1UTprdGtxPmFoP9XmrZ-le9ALaU.roa
File: 1UTprdGtxPmFoP9XmrZ-le9ALaU.roa (raw, json)
Hash identifier: v7vzLIDR1L5ea7Jx7eWqYaMEvHGP5lp8oeP95zRrYxE=
Subject key identifier: D5:44:E9:AD:D1:AD:C4:F9:85:A0:FF:57:9A:B6:7E:95:EF:40:2D:A5
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019F8DA90E039E0975B027D0AF7822CF95F3
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1UTprdGtxPmFoP9XmrZ-le9ALaU.roa
Signing time: Thu 23 Jul 2026 06:28:14 +0000
ROA not before: Thu 23 Jul 2026 06:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.242.146.0/23 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.198.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
88.209.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:a9:0e:03:9e:09:75:b0:27:d0:af:78:22:cf:95:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 23 06:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d544e9add1adc4f985a0ff579ab67e95ef402da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:fe:ca:2d:47:54:c7:52:9d:5d:a7:2b:fb:
d3:ae:c8:51:44:aa:7f:9a:dc:04:90:17:34:ba:d0:
c8:28:d3:88:ce:fd:2f:a9:b9:b5:3c:58:15:61:58:
ed:8b:2a:c3:5f:83:19:09:4f:d8:b9:66:41:c0:4d:
2b:7c:66:96:d7:f4:77:c7:4f:46:d4:e1:3d:5e:38:
da:bd:31:02:6d:b2:e0:07:22:81:24:98:fa:84:a1:
f7:7f:d1:33:ed:a9:21:02:00:61:fe:e0:cb:e0:77:
d2:6e:50:fe:bb:2a:84:37:9f:b5:93:fc:8d:0b:4e:
2e:bf:60:6f:50:bc:e6:fe:cf:6c:1f:90:77:18:f1:
94:14:30:94:08:d4:92:39:8d:44:d1:59:d1:0e:f8:
77:ab:51:2e:6f:9c:13:76:3b:d9:5a:a0:ff:f3:07:
21:13:13:23:37:dd:0b:75:ab:df:65:71:2f:6d:1d:
ee:c5:92:fc:ac:b4:70:1a:6a:e8:84:f2:b7:76:c6:
f9:47:82:c6:24:16:54:9c:89:ad:54:20:62:c0:3e:
7e:b0:b8:61:10:43:bf:54:ad:57:18:c1:1b:04:bc:
bc:cd:34:09:76:aa:16:ad:db:09:74:8b:09:a4:7b:
8d:ff:43:88:8a:13:84:fa:89:56:46:94:d2:4d:4d:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:44:E9:AD:D1:AD:C4:F9:85:A0:FF:57:9A:B6:7E:95:EF:40:2D:A5
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1UTprdGtxPmFoP9XmrZ-le9ALaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.146.0/23
83.137.158.0/23
88.151.56.0/23
88.209.198.0/24
88.209.201.0/24
88.209.216.0/24
88.209.226.0/24
88.209.228.0/24
88.209.232.0/22
88.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c0:4d:f7:77:af:2c:1a:37:ee:8d:23:8a:1e:48:b9:25:31:
33:cd:03:e1:d5:06:ff:73:4d:f8:32:c5:4c:8b:c4:ed:79:ab:
49:a0:96:e0:86:ef:aa:9f:d7:56:75:e6:cd:8a:fb:64:3e:cd:
3a:39:04:b0:25:10:a2:49:1b:a9:59:cb:39:30:de:ce:46:4e:
33:fa:50:b6:fb:96:50:c4:b8:e3:da:a0:01:e5:32:17:cc:db:
93:72:1b:3c:8d:d5:a3:d8:e8:ff:b1:02:39:2f:d1:59:0f:5d:
64:72:bb:1f:75:67:03:ac:aa:cc:9b:4b:67:8c:c2:be:50:70:
84:ea:16:ba:7b:b3:b3:45:09:bc:74:38:83:22:67:c9:36:67:
0b:dc:1a:bb:af:d2:53:85:6f:05:1b:f1:eb:28:83:61:56:41:
b6:d1:c8:1d:d8:66:71:49:49:43:35:b0:6e:66:89:12:fc:78:
cd:4f:35:00:2a:09:52:d1:f6:b3:f5:d1:58:a1:d8:97:1c:51:
ce:ef:54:ff:c9:e2:52:06:5a:06:80:7b:50:27:34:ed:e6:2c:
e9:30:a4:b4:a2:7b:66:b4:85:72:d1:d2:6a:0b:7c:1f:32:2d:
df:6b:1f:f2:2d:2b:16:fd:33:86:6b:13:1c:2c:32:de:22:fe:
8a:92:ca:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:58 2026 by rpki-client