Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/cPgrNdoKH1-9MCFvIQZW29dJV4I.roa
File: cPgrNdoKH1-9MCFvIQZW29dJV4I.roa (raw, json)
Hash identifier: Agd9dlngcCbnIAH8YM69F8AtPUMcQnsKqjikW40jBFo=
Subject key identifier: 70:F8:2B:35:DA:0A:1F:5F:BD:30:21:6F:21:06:56:DB:D7:49:57:82
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 01A101452411CC7A050545F16CDE42661031
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/cPgrNdoKH1-9MCFvIQZW29dJV4I.roa
Signing time: Sat 03 Oct 2026 10:17:50 +0000
ROA not before: Sat 03 Oct 2026 10:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208555
IP address blocks: 5.56.132.0/24 maxlen: 24
79.143.84.0/24 maxlen: 24
87.236.209.0/24 maxlen: 24
87.236.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:45:24:11:cc:7a:05:05:45:f1:6c:de:42:66:10:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Oct 3 10:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70f82b35da0a1f5fbd30216f210656dbd7495782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:a6:50:c9:a1:f4:e5:ce:fe:c6:d3:80:11:
26:21:6a:63:18:42:23:60:8a:8b:6d:e7:75:6a:68:
1a:d2:ea:a2:9e:e8:1b:29:a4:c4:e8:99:3a:1e:c8:
e7:69:91:01:13:95:b3:ca:eb:f4:3f:71:35:90:da:
23:8a:2b:37:a9:26:93:d5:b6:1b:31:81:67:24:70:
21:77:89:c8:62:ba:3f:b7:7c:f2:63:40:d3:e5:f8:
0e:bb:e5:b6:74:e7:da:e2:12:8c:00:9a:8f:07:31:
a1:3e:ab:b6:8a:a6:00:a8:6c:50:bb:14:ed:95:57:
18:38:a6:79:0d:15:4b:b1:9c:9c:bc:08:ba:e4:d1:
82:fc:84:b8:2f:08:d6:85:96:64:96:45:a9:f0:33:
5c:3e:49:ba:49:65:9a:78:30:56:12:e1:63:38:b9:
82:50:5d:55:26:df:5f:cd:f9:04:04:08:9d:9d:9e:
99:63:d4:17:70:a6:da:13:ff:0a:75:0b:12:6d:f3:
dc:0f:70:a3:97:1b:f9:44:4b:fc:1b:1d:38:3f:15:
88:38:51:95:4c:f0:af:a4:5d:4d:23:e1:ce:67:56:
9b:83:ec:aa:9e:4d:13:05:ba:6b:ba:eb:a4:95:7d:
d2:d5:6e:29:a6:b6:8c:8d:59:4c:92:0b:40:30:99:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F8:2B:35:DA:0A:1F:5F:BD:30:21:6F:21:06:56:DB:D7:49:57:82
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/cPgrNdoKH1-9MCFvIQZW29dJV4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.132.0/24
79.143.84.0/24
87.236.209.0/24
87.236.212.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a2:c9:1b:49:c7:37:bd:2b:72:91:b5:87:50:71:cc:c3:73:
03:c8:36:41:44:4c:64:86:db:40:9c:04:76:bf:bc:86:7c:08:
7b:e5:39:c2:9c:79:31:2d:8f:93:2e:9e:80:33:d0:32:6b:d0:
2b:5b:2a:ea:69:4a:92:11:85:7b:b8:78:9a:42:3d:55:43:fa:
d7:f6:1c:3c:e3:d6:5a:4e:50:f4:5f:3f:92:dd:e6:7a:d5:c7:
f6:bf:ea:9f:e5:d9:38:5e:27:b3:c9:af:c9:0d:d1:1c:d7:58:
4b:07:85:d7:6b:0e:58:21:1f:15:d4:cd:92:82:29:90:6b:48:
2b:90:a4:5b:2c:6e:08:8e:8d:ed:60:e0:ce:88:14:f0:2a:f8:
3c:a5:21:b6:41:bf:52:b3:2f:5b:92:50:77:61:27:74:88:f2:
48:3e:e0:6e:a0:22:bf:2e:6e:b4:14:d2:6c:28:04:fe:86:c3:
ef:9b:9a:c1:09:e2:8c:51:8d:6a:a6:e6:c9:ee:a3:05:71:99:
42:4a:c6:3c:0b:68:98:9b:63:ff:77:6f:90:1b:00:50:70:b2:
12:67:f5:1a:06:04:aa:e3:e4:fe:af:9d:12:9e:ca:53:b3:de:
6a:d6:aa:35:16:5e:97:ac:20:c0:4f:f6:73:94:19:d9:3f:88:
2a:b2:f4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:22 2026 by rpki-client