Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/C0WWBeX6wiXHdCXBAg-91znJSM0.roa
File: C0WWBeX6wiXHdCXBAg-91znJSM0.roa (raw, json)
Hash identifier: 5B66mvvwzLR2QKbj72ezcOpmVYhIw2X9iwEUUSSQBM0=
Subject key identifier: 0B:45:96:05:E5:FA:C2:25:C7:74:25:C1:02:0F:BD:D7:39:C9:48:CD
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A05C04C97F418EF19A2E9565540B125B4B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/C0WWBeX6wiXHdCXBAg-91znJSM0.roa
Signing time: Tue 01 Sep 2026 08:10:12 +0000
ROA not before: Tue 01 Sep 2026 08:10:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.182.112.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.198.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
88.209.227.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
88.209.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 15:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:04:c9:7f:41:8e:f1:9a:2e:95:65:54:0b:12:5b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 1 08:10:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b459605e5fac225c77425c1020fbdd739c948cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d8:06:0c:7d:50:ef:94:9d:a4:c8:71:29:f7:
c4:13:63:df:73:4d:f9:55:42:fd:39:eb:94:87:1f:
2e:24:45:e1:e6:86:90:80:db:dc:49:37:69:a3:9d:
00:d4:67:ae:0b:74:dc:79:6b:11:fc:6f:fd:23:38:
14:12:35:7f:75:ac:6d:23:53:23:ca:02:03:75:2a:
df:93:82:37:0a:63:ca:7e:c9:c2:d3:a5:0d:2b:8d:
25:f3:3f:65:33:c8:17:98:e8:5d:ee:15:c6:ee:05:
45:4f:25:5a:27:b9:6c:c4:00:0e:1d:85:3e:38:b2:
ef:b7:8a:30:2f:20:e5:a9:e1:9e:2e:ae:04:7a:9c:
66:18:61:40:c4:a2:db:9e:a4:c4:b2:65:bb:9c:61:
11:dd:a9:f8:76:db:81:78:f7:03:d4:9d:05:21:5d:
36:04:f6:2a:0a:cf:a1:52:a8:cd:2f:4d:5b:25:cf:
d0:da:02:79:84:66:19:4e:fe:4c:85:fb:29:d6:92:
71:34:ee:47:ae:ec:3a:ad:c0:c1:65:03:6e:c8:1c:
28:5d:71:fe:66:50:d7:5b:12:4b:c9:cd:8a:b9:0c:
de:7b:04:84:75:3e:41:3c:24:96:4a:9a:d3:10:62:
10:0b:3b:75:c3:a8:91:1e:d7:5d:a7:37:71:9d:4f:
22:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:45:96:05:E5:FA:C2:25:C7:74:25:C1:02:0F:BD:D7:39:C9:48:CD
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/C0WWBeX6wiXHdCXBAg-91znJSM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
83.137.153.0/24
83.137.158.0/24
88.151.56.0/23
88.209.198.0/24
88.209.201.0/24
88.209.216.0/24
88.209.226.0-88.209.228.255
88.209.232.0/22
88.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:99:b9:f3:ed:6c:ad:88:b0:96:34:94:04:28:74:65:b4:23:
37:c6:b2:c4:db:b3:77:db:22:70:1c:fb:80:6a:ab:42:21:fa:
56:80:6f:ea:a3:ed:7f:4b:54:41:be:10:1a:96:79:50:04:e6:
6c:31:3d:b6:15:6c:c0:0c:f9:61:e9:9e:74:ec:f7:d7:1f:09:
58:f8:73:1b:ec:f4:b6:46:5f:40:56:0b:5d:4f:d9:c1:6c:c2:
d4:ef:62:cd:f8:b2:e1:8e:30:c3:db:6c:ca:70:77:c5:52:ab:
d9:23:60:4e:fc:0d:bc:a0:5e:17:02:5e:a3:03:10:9d:af:1f:
f3:5c:eb:78:a0:fa:32:5b:0c:c7:bf:6c:06:50:03:11:8f:73:
35:7a:57:a3:7b:a0:0d:e5:da:f4:81:fb:9d:66:71:98:d2:d2:
98:ee:7b:1f:33:b3:6b:93:e8:b8:03:e8:06:92:73:9d:5b:54:
aa:05:fe:5d:c5:85:a3:d4:09:87:07:47:0f:f4:cd:da:d8:a8:
a0:73:d9:49:8d:9f:d6:9c:02:c8:5f:bd:f2:c5:51:92:17:59:
40:11:66:c0:24:6b:b7:f1:fc:f8:2a:20:13:d0:15:36:76:d5:
d1:71:d8:ea:3f:97:6e:a4:37:a3:14:56:d9:ce:f6:7a:03:16:
4a:bf:ad:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 00:15:37 2026 by rpki-client