Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/CTGJpzJWVc1soihKGPoPhdvSQVw.roa
File: CTGJpzJWVc1soihKGPoPhdvSQVw.roa (raw, json)
Hash identifier: 1PAqvuxUHeMuh3yf8n7EPV3Dglgi6HPrs8y7y3PXLlg=
Subject key identifier: 09:31:89:A7:32:56:55:CD:6C:A2:28:4A:18:FA:0F:85:DB:D2:41:5C
Certificate issuer: /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial: 019FEAB4E38E379322799F134729558C4ABF
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/CTGJpzJWVc1soihKGPoPhdvSQVw.roa
Signing time: Mon 10 Aug 2026 08:05:51 +0000
ROA not before: Mon 10 Aug 2026 08:05:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8758
IP address blocks: 31.24.8.0/21 maxlen: 24
37.46.144.0/22 maxlen: 24
77.74.96.0/21 maxlen: 24
80.89.208.0/20 maxlen: 24
83.150.0.0/18 maxlen: 24
84.254.80.0/20 maxlen: 24
84.254.96.0/20 maxlen: 24
87.239.200.0/21 maxlen: 24
88.218.24.0/22 maxlen: 24
91.84.64.0/19 maxlen: 24
95.143.48.0/20 maxlen: 24
109.70.112.0/21 maxlen: 24
109.70.115.0/24 maxlen: 24
109.70.116.0/22 maxlen: 24
125.3.64.0/19 maxlen: 24
145.40.192.0/19 maxlen: 24
155.2.64.0/18 maxlen: 24
155.2.224.0/19 maxlen: 24
157.143.0.0/17 maxlen: 24
178.22.104.0/21 maxlen: 24
178.250.130.0/23 maxlen: 24
185.109.164.0/22 maxlen: 24
185.160.244.0/22 maxlen: 24
185.203.132.0/22 maxlen: 24
188.137.160.0/20 maxlen: 24
194.31.128.0/23 maxlen: 24
194.246.118.0/23 maxlen: 24
212.25.0.0/19 maxlen: 24
217.22.128.0/20 maxlen: 24
217.71.240.0/20 maxlen: 24
217.150.224.0/20 maxlen: 24
2001:8e0::/29 maxlen: 48
2a00:10c0::/32 maxlen: 32
2a01:bd00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:b4:e3:8e:37:93:22:79:9f:13:47:29:55:8c:4a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
Validity
Not Before: Aug 10 08:05:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=093189a7325655cd6ca2284a18fa0f85dbd2415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:87:13:26:65:c5:31:f6:6b:b6:45:d8:a0:
52:1a:34:fe:a9:c8:35:21:d7:ea:08:6f:b3:14:13:
1e:d7:90:a9:d7:8b:27:15:d4:74:cc:f3:72:5f:c9:
a3:2e:63:58:8b:ae:ae:15:d7:9b:e7:7d:e6:88:6a:
15:1b:f5:03:bb:18:98:c3:d5:ab:d4:00:d4:16:bc:
4c:d6:b2:1d:ac:8d:03:47:e4:c4:c8:16:bc:89:7a:
8e:63:12:f2:10:8c:2f:be:e9:da:a2:0c:0d:f9:f5:
e3:4b:4f:ff:25:0c:a4:9b:d4:3f:43:06:86:9f:7c:
e4:5b:86:17:b4:89:81:e3:78:3a:b6:71:a0:de:7d:
20:af:63:d9:60:01:0a:ae:7c:3f:63:a0:08:93:be:
0e:94:eb:7e:91:c2:53:36:42:e8:23:c7:72:05:37:
86:2b:f1:13:e5:b5:13:e0:c9:a9:ad:8b:7d:4f:c4:
34:8d:80:2c:50:b6:9f:bc:63:e1:7c:82:dd:fa:28:
51:e5:04:e4:a5:af:5f:28:46:5f:d4:16:89:78:81:
cd:90:66:78:35:bb:8f:0e:9c:a0:3e:2f:0d:19:dd:
f7:6d:e3:ac:48:e8:d8:2a:46:2c:0f:b2:e4:7e:08:
4c:7a:2e:6f:50:50:62:7d:0b:45:c5:71:8a:b5:5e:
53:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:31:89:A7:32:56:55:CD:6C:A2:28:4A:18:FA:0F:85:DB:D2:41:5C
X509v3 Authority Key Identifier:
keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/CTGJpzJWVc1soihKGPoPhdvSQVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.8.0/21
37.46.144.0/22
77.74.96.0/21
80.89.208.0/20
83.150.0.0/18
84.254.80.0-84.254.111.255
87.239.200.0/21
88.218.24.0/22
91.84.64.0/19
95.143.48.0/20
109.70.112.0/21
125.3.64.0/19
145.40.192.0/19
155.2.64.0/18
155.2.224.0/19
157.143.0.0/17
178.22.104.0/21
178.250.130.0/23
185.109.164.0/22
185.160.244.0/22
185.203.132.0/22
188.137.160.0/20
194.31.128.0/23
194.246.118.0/23
212.25.0.0/19
217.22.128.0/20
217.71.240.0/20
217.150.224.0/20
IPv6:
2001:8e0::/29
2a00:10c0::/32
2a01:bd00::/32
Signature Algorithm: sha256WithRSAEncryption
85:00:85:4f:6a:a3:da:9f:6a:59:64:4d:b5:94:1a:6b:68:d4:
fb:4b:4b:19:b8:24:ae:54:f2:af:76:9c:e8:81:44:34:60:c0:
44:9b:56:88:5b:2e:2c:c3:68:2d:b5:66:71:25:4e:85:49:08:
05:fc:40:7e:07:ac:52:2d:1f:91:c2:f3:c2:6b:2f:10:2d:f2:
e7:5a:62:3a:0f:be:ec:8a:2e:f9:78:a3:75:21:9f:4c:1f:01:
c2:6a:7c:d3:0f:3b:0a:d1:e6:3c:b6:62:3f:d4:02:d8:b0:5f:
07:ca:0b:b1:dd:b7:c8:54:a9:7d:31:19:02:08:f4:14:b2:77:
b1:d4:56:f9:42:0f:e4:a3:63:9a:48:a0:97:72:6d:56:8a:a5:
8b:f8:05:3f:45:89:3a:4b:e3:be:6d:99:b6:16:e7:02:eb:d6:
17:e9:aa:19:aa:25:bb:bd:d9:8a:d7:85:77:da:a0:8d:1f:97:
55:b1:9e:f3:5f:60:20:dd:1b:5a:2c:19:1e:b4:99:d8:8e:f8:
94:10:82:85:9a:e9:10:15:29:a9:01:5c:98:ee:ae:93:64:ab:
6f:42:6c:8e:04:17:5d:dc:97:3d:44:b2:a0:70:8e:2c:cc:4f:
68:4b:cb:8b:ca:ae:3e:8a:9b:30:1a:5b:3b:00:b0:13:96:6c:
b9:3c:e2:3f
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgISAZ/qtOOON5MieZ8TRylVjEq/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMjYxZDQ1MzE5ZTgzNzUxODc0MzZkYTQ0YmY1YjlhZGIw
NDRhN2YwHhcNMjYwODEwMDgwNTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTMxODlhNzMyNTY1NWNkNmNhMjI4NGExOGZhMGY4NWRiZDI0MTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7aHEyZlxTH2a7ZF2KBSGjT+qcg1
IdfqCG+zFBMe15Cp14snFdR0zPNyX8mjLmNYi66uFdeb533miGoVG/UDuxiYw9Wr
1ADUFrxM1rIdrI0DR+TEyBa8iXqOYxLyEIwvvunaogwN+fXjS0//JQykm9Q/QwaG
n3zkW4YXtImB43g6tnGg3n0gr2PZYAEKrnw/Y6AIk74OlOt+kcJTNkLoI8dyBTeG
K/ET5bUT4MmprYt9T8Q0jYAsULafvGPhfILd+ihR5QTkpa9fKEZf1BaJeIHNkGZ4
NbuPDpygPi8NGd33beOsSOjYKkYsD7LkfghMei5vUFBifQtFxXGKtV5TFwIDAQAB
o4IC1TCCAtEwHQYDVR0OBBYEFAkxiacyVlXNbKIoShj6D4Xb0kFcMB8GA1UdIwQY
MBaAFP0mHUUxnoN1GHQ22kS/W5rbBEp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81ODJiMTctZjQ2Zi00MWViLThmZDQt
ZWI1MDkzYjIzMWMxLzEvQ1RHSnB6SldWYzFzb2loS0dQb1BoZHZTUVZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81ODJiMTctZjQ2Zi00MWViLThmZDQtZWI1MDkzYjIzMWMx
LzEvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHqBggrBgEFBQcBBwEB/wSB2jCB1zCBtwQCAAEwgbADBAMf
GAgDBAIlLpADBANNSmADBARQWdADBAZTlgAwDAMEBFT+UAMEBFT+YAMEA1fvyAME
AljaGAMEBVtUQAMEBF+PMAMEA21GcAMEBX0DQAMEBZEowAMEBpsCQAMEBZsC4AME
B52PAAMEA7IWaAMEAbL6ggMEArltpAMEArmg9AMEArnLhAMEBLyJoAMEAcIfgAME
AcL2dgMEBdQZAAMEBNkWgAMEBNlH8AMEBNmW4DAbBAIAAjAVAwUDIAEI4AMFACoA
EMADBQAqAb0AMA0GCSqGSIb3DQEBCwUAA4IBAQCFAIVPaqPan2pZZE21lBpraNT7
S0sZuCSuVPKvdpzogUQ0YMBEm1aIWy4sw2gttWZxJU6FSQgF/EB+B6xSLR+RwvPC
ay8QLfLnWmI6D77sii75eKN1IZ9MHwHCanzTDzsK0eY8tmI/1ALYsF8Hygux3bfI
VKl9MRkCCPQUsnex1Fb5Qg/ko2OaSKCXcm1WiqWL+AU/RYk6S+O+bZm2FucC69YX
6aoZqiW7vdmK14V32qCNH5dVsZ7zX2Ag3RtaLBketJnYjviUEIKFmukQFSmpAVyY
7q6TZKtvQmyOBBdd3Jc9RLKgcI4szE9oS8uLyq4+ipswGls7ALATlmy5POI/
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:40:34 2026 by rpki-client