Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/AzuiF5FNzclEjwpMGJtELms2aoI.roa
File: AzuiF5FNzclEjwpMGJtELms2aoI.roa (raw, json)
Hash identifier: 1Y6AcnUcwCldsc9F38IX0dQDclIeiqtBMWkhdlLnR1U=
Subject key identifier: 03:3B:A2:17:91:4D:CD:C9:44:8F:0A:4C:18:9B:44:2E:6B:36:6A:82
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019F763F188FB7CDB4546C0EDB354C1A50E5
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/AzuiF5FNzclEjwpMGJtELms2aoI.roa
Signing time: Sat 18 Jul 2026 17:21:14 +0000
ROA not before: Sat 18 Jul 2026 17:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 77.242.145.0/24 maxlen: 24
77.242.149.0/24 maxlen: 24
77.242.157.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
88.151.56.0/24 maxlen: 24
88.151.59.0/24 maxlen: 24
88.209.200.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
88.209.244.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:3f:18:8f:b7:cd:b4:54:6c:0e:db:35:4c:1a:50:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 18 17:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=033ba217914dcdc9448f0a4c189b442e6b366a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:df:88:09:66:ce:19:3a:9b:bf:c5:88:c0:
65:d3:d4:6b:ff:77:9c:dc:1e:4f:4b:00:ab:b1:1f:
a6:bc:88:a0:fe:b4:94:1f:2f:cc:3c:5d:ab:e5:a3:
11:f9:40:4a:95:d9:f4:4f:ac:82:e2:76:ff:3a:3c:
00:bc:e5:cb:5a:54:db:91:92:47:c8:18:fa:2c:35:
e6:03:7c:28:f5:7e:7b:91:43:6f:d2:f5:ba:ea:0c:
ba:f6:54:63:2f:96:fe:86:8c:b9:68:a3:67:dd:e0:
22:54:65:be:61:f1:ff:58:99:c9:cb:b6:8f:74:e6:
08:60:71:f6:98:03:6f:79:1e:66:df:95:81:a5:3b:
3e:9c:cf:22:50:b2:ae:f7:b2:c9:e1:5d:c7:70:b1:
f0:bb:ed:67:40:d3:43:e1:99:65:8b:78:1f:0b:06:
16:7e:51:f0:e7:d6:a0:12:61:76:c5:e5:64:b0:a1:
f2:d9:9a:d5:3f:8c:ca:82:ea:d8:e7:28:a6:01:54:
da:f7:9e:76:4b:55:8c:19:48:f5:3b:76:41:b6:3d:
63:fc:a2:c2:28:6f:52:1c:36:3a:af:dd:ff:30:1f:
57:fe:57:be:ee:34:ee:1f:26:f3:28:80:8e:8a:8b:
93:3c:80:da:b7:bc:99:66:cf:23:b2:6b:9b:bf:b0:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3B:A2:17:91:4D:CD:C9:44:8F:0A:4C:18:9B:44:2E:6B:36:6A:82
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/AzuiF5FNzclEjwpMGJtELms2aoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.145.0/24
77.242.149.0/24
77.242.157.0/24
83.137.156.0/24
88.151.56.0/24
88.151.59.0/24
88.209.200.0/24
88.209.220.0/24
88.209.244.0/24
88.209.246.0/24
Signature Algorithm: sha256WithRSAEncryption
81:9f:0c:62:9f:65:c1:ef:01:60:dc:35:d2:55:0c:49:e2:17:
b6:7e:b8:a9:e3:7a:b0:ee:f8:7d:cd:46:a4:82:79:7a:f5:0a:
81:60:b0:a2:2b:d0:6e:82:7b:cf:7d:5a:34:ab:f8:20:6c:c1:
b6:3f:ff:c8:f1:a2:fd:7a:60:a2:5a:1b:66:ed:91:15:a5:29:
aa:e8:ad:90:e6:c8:95:82:ab:e7:93:93:60:96:86:32:2e:8d:
c9:70:7e:87:74:b0:2c:ba:e7:db:00:b9:2e:29:57:17:76:06:
db:09:bb:59:23:cc:59:74:3e:ca:4d:51:83:60:11:38:c4:72:
0d:37:d4:36:83:0a:32:4a:73:92:58:0f:2a:e2:a2:2f:bd:f2:
7b:30:b7:b4:cc:dd:9d:fb:0b:2c:05:df:44:17:b3:57:91:ac:
a3:34:71:4e:40:e4:05:61:3e:1d:90:5a:07:a4:a4:ee:c7:c1:
84:3a:09:b4:e9:81:22:ef:41:f3:fe:49:4f:a5:13:08:da:ed:
cd:5e:06:b0:21:36:a3:dc:67:03:6d:be:28:40:1a:a1:b3:c8:
07:38:5c:d4:76:fe:69:17:53:c9:46:c7:56:b2:72:1c:a6:66:
51:b2:3f:b7:9d:6c:8b:3a:14:22:07:35:96:25:5b:3d:57:32:
59:b2:f2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 14:53:04 2026 by rpki-client