Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/coCE9XuSZaFjr8SGmakQDO3k5oo.roa
File: coCE9XuSZaFjr8SGmakQDO3k5oo.roa (raw, json)
Hash identifier: M9OXXKshFWkqTNN5/CVpTTG3RhtLEODgW18mPSOqGA4=
Subject key identifier: 72:80:84:F5:7B:92:65:A1:63:AF:C4:86:99:A9:10:0C:ED:E4:E6:8A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0E88944A2142C65B2AA16484C6189AB69
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/coCE9XuSZaFjr8SGmakQDO3k5oo.roa
Signing time: Mon 28 Sep 2026 15:01:45 +0000
ROA not before: Mon 28 Sep 2026 15:01:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 2.57.240.0/24 maxlen: 24
9.247.25.0/24 maxlen: 24
9.247.27.0/24 maxlen: 24
9.247.29.0/24 maxlen: 24
9.247.98.0/24 maxlen: 24
9.247.140.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
78.17.69.0/24 maxlen: 24
89.125.14.0/24 maxlen: 24
103.245.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:44:a2:14:2c:65:b2:aa:16:48:4c:61:89:ab:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 28 15:01:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=728084f57b9265a163afc48699a9100cede4e68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:2e:63:3d:78:10:00:c8:cb:8c:91:dc:be:
7b:74:83:e0:ca:8e:fe:cb:9b:9c:e7:fb:8e:8a:02:
b3:71:70:ff:9d:c5:69:27:0a:d5:a4:db:da:0a:ea:
0a:1b:51:58:c9:d3:4c:9c:e7:e6:f0:97:8b:3e:c0:
c5:1b:ad:33:48:ac:c6:83:50:e3:5f:e3:28:05:44:
4a:b4:7e:29:f6:d6:27:30:ec:63:86:6f:19:41:d6:
e9:33:06:70:11:f4:62:96:c3:d7:a0:ec:85:49:a8:
49:05:a2:b6:65:db:ea:9b:1e:2c:2d:f3:7a:82:32:
39:7b:90:c9:c7:b4:2f:6b:17:80:46:4b:ca:2e:28:
d6:ea:ca:40:db:03:bc:cc:6d:e9:f5:15:33:89:78:
d1:58:97:76:2d:59:a0:c9:89:7e:44:41:d9:51:bd:
ca:56:ff:e8:69:9f:32:c6:bb:63:75:9a:51:75:e9:
84:01:41:8c:08:d8:82:a2:e1:8d:ad:45:0b:e7:50:
b3:85:80:06:a2:cc:6f:37:19:c7:db:7f:9d:fb:79:
28:ea:23:f2:ac:a8:cf:f3:ac:8f:41:c8:f2:72:55:
3e:a0:18:c3:8e:65:b3:7a:db:4c:a0:dc:25:34:8a:
51:26:ef:78:ef:25:70:6e:55:1f:ff:3e:a3:79:fe:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:80:84:F5:7B:92:65:A1:63:AF:C4:86:99:A9:10:0C:ED:E4:E6:8A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/coCE9XuSZaFjr8SGmakQDO3k5oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.240.0/24
9.247.25.0/24
9.247.27.0/24
9.247.29.0/24
9.247.98.0/24
9.247.140.0/24
45.135.183.0/24
78.17.69.0/24
89.125.14.0/24
103.245.230.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f1:77:98:6f:b2:98:e4:c7:3b:ac:e5:c3:ef:e7:f1:b4:36:
85:9f:2b:bf:0d:52:cb:80:d1:f5:24:67:9c:ea:5d:1a:7f:71:
46:48:9a:5f:0d:bf:f8:a9:a0:b2:6e:22:18:15:94:9b:e8:99:
57:b5:ef:40:5b:70:26:fe:a8:b5:23:66:df:47:15:3a:eb:94:
9b:f0:6c:fa:06:37:0c:3c:0e:da:f1:bf:09:a2:c3:81:82:24:
f0:9e:af:aa:77:a8:14:84:d0:8d:d9:37:b9:92:44:46:60:7f:
ed:2b:b6:03:ff:c2:91:34:e6:44:f6:dc:69:17:73:4e:ff:6a:
f3:95:a3:e1:86:57:dd:38:35:eb:8d:20:40:4f:9e:bf:30:89:
73:61:d2:14:ef:39:0d:f4:0a:7e:28:20:59:27:9d:27:19:54:
ca:18:a0:6a:cd:e5:41:1d:86:fd:28:b2:f0:02:8d:03:3b:1a:
3e:01:9d:b2:05:89:5a:5b:ea:2f:9b:f3:98:74:57:06:0f:c1:
e3:59:0c:c4:fa:e2:f7:75:d9:7e:71:86:9e:93:10:d4:d3:a5:
db:af:d7:db:ed:32:00:b3:92:27:eb:2d:b7:f1:ee:5a:ea:0c:
03:d0:1b:9a:1a:d7:c9:da:0b:55:e6:52:ef:11:91:ad:db:78:
d5:da:c2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:22 2026 by rpki-client