Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/C8KtnGJ11Npvh-n-QEOYEVG5EFE.roa
File: C8KtnGJ11Npvh-n-QEOYEVG5EFE.roa (raw, json)
Hash identifier: 8ydB12IxQslae+yoYMeassrFQPbBE0RamgjG7gnKPyc=
Subject key identifier: 0B:C2:AD:9C:62:75:D4:DA:6F:87:E9:FE:40:43:98:11:51:B9:10:51
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A0D33D725BD5D747D87DD7BC55CBBA13F9
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/C8KtnGJ11Npvh-n-QEOYEVG5EFE.roa
Signing time: Thu 24 Sep 2026 11:46:54 +0000
ROA not before: Thu 24 Sep 2026 11:46:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.182.112.0/24 maxlen: 24
77.242.159.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
88.209.227.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
88.209.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:3d:72:5b:d5:d7:47:d8:7d:d7:bc:55:cb:ba:13:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 24 11:46:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bc2ad9c6275d4da6f87e9fe4043981151b91051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:4e:56:54:ef:09:ce:8c:bf:a0:65:22:84:
15:4e:25:cf:c5:a4:28:28:f6:c5:72:9c:a2:a8:0f:
f5:3d:4c:24:9e:da:da:c0:f9:be:df:21:05:8a:49:
cf:ea:7d:5f:de:a0:12:67:d0:b9:26:15:af:fd:f7:
8c:c9:6e:89:48:87:db:54:d9:86:d2:e2:b7:ab:e1:
8c:ac:0d:99:fa:eb:17:b2:78:43:ff:62:41:00:94:
00:f2:b0:f3:f5:fc:43:e6:5f:59:21:42:43:cb:74:
e8:2f:26:f4:45:e8:f1:ae:52:49:62:15:fc:9f:f4:
63:58:5b:e9:44:d3:10:32:fe:27:8e:5b:c8:f4:a4:
26:40:95:54:6b:cd:a8:94:3d:ab:48:21:49:90:0a:
48:9d:57:7a:aa:5b:12:f1:fb:f1:d6:20:03:ff:d2:
88:3e:ea:22:52:c3:1a:a2:63:2f:e1:e4:a4:22:9e:
0c:45:80:b9:ff:38:f6:ab:19:98:95:0a:06:04:3a:
d2:86:cc:94:b9:67:6a:27:58:2a:80:18:80:c2:57:
f5:e0:e0:e7:4f:5b:45:ed:24:65:81:75:9a:68:1c:
9b:f1:43:df:6e:63:4f:43:cb:52:72:c8:47:bf:c7:
73:f0:2c:c7:30:96:db:ee:59:1c:80:7f:81:38:ee:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C2:AD:9C:62:75:D4:DA:6F:87:E9:FE:40:43:98:11:51:B9:10:51
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/C8KtnGJ11Npvh-n-QEOYEVG5EFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
77.242.159.0/24
83.137.153.0/24
83.137.158.0/24
88.151.56.0/23
88.209.216.0/24
88.209.226.0-88.209.228.255
88.209.232.0/22
88.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:6e:eb:37:97:f0:f4:7d:e5:cf:06:7a:13:99:d8:37:0e:b3:
ed:8f:ee:29:85:2f:41:76:ad:44:0a:45:4e:c1:d1:47:69:b3:
49:d7:7f:b1:02:32:a5:8e:d5:7a:31:48:69:c6:eb:4c:e9:08:
50:91:16:77:d3:bc:a1:c9:dd:79:61:9c:4b:03:00:dd:23:65:
15:c0:9c:a6:64:2e:4c:b7:7b:11:4b:6a:b5:23:87:3e:0b:29:
60:4a:d7:ce:ce:df:fa:17:2f:be:46:10:45:b2:87:de:4f:06:
cd:2b:7f:50:f9:3d:a5:46:f4:a6:4c:7a:19:fb:89:24:3f:5a:
dd:fe:06:e8:0c:89:be:bf:46:96:c9:c8:f2:90:42:c8:93:ed:
33:73:26:41:77:a8:9d:7e:fd:ce:ed:75:f1:50:e6:a2:83:81:
b2:e8:48:f3:a0:cb:80:a8:21:dd:c7:26:82:16:9d:58:6a:87:
ec:00:b6:38:f7:b5:66:05:c7:d7:b3:b8:d2:a4:a8:65:03:6b:
9b:a9:68:0c:88:e3:43:81:bf:e1:69:5a:f2:15:27:58:80:2b:
bb:05:84:f9:ed:01:99:03:fc:bc:1d:46:2b:71:11:66:3d:f0:
af:4a:55:4e:7e:46:e4:42:1d:20:0b:c7:9c:9b:58:d2:70:fd:
95:3a:00:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:33:34 2026 by rpki-client