Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FswmQc4d18C2CNVdu1p-D2092RM.roa
File: FswmQc4d18C2CNVdu1p-D2092RM.roa (raw, json)
Hash identifier: Eo79eqYaCcfy5Fs67qXG3hw5BfMemiBe/ZWHqhB3hVk=
Subject key identifier: 16:CC:26:41:CE:1D:D7:C0:B6:08:D5:5D:BB:5A:7E:0F:6D:3D:D9:13
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A15177983C0860567080945154AE53A814
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FswmQc4d18C2CNVdu1p-D2092RM.roa
Signing time: Mon 19 Oct 2026 00:02:34 +0000
ROA not before: Mon 19 Oct 2026 00:02:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.182.114.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.198.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
88.209.227.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
88.209.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:77:98:3c:08:60:56:70:80:94:51:54:ae:53:a8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 19 00:02:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16cc2641ce1dd7c0b608d55dbb5a7e0f6d3dd913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:63:43:ee:14:bf:e7:a2:af:77:01:a9:dd:
59:37:c4:5b:6d:ab:92:0c:b0:87:b9:e3:a3:88:d1:
a0:27:1e:91:d2:8e:e8:e8:14:a6:2c:a6:2d:62:c2:
45:7a:56:75:e8:9c:de:6c:32:1f:07:0c:4d:9e:02:
87:34:7b:95:18:f3:80:dc:9e:f7:43:a4:ef:3d:45:
b0:c0:1f:18:77:8b:ae:e3:ab:28:81:2f:7f:37:9e:
4c:8e:88:4b:ed:34:84:09:40:9f:d3:0d:4d:08:ac:
dc:28:6c:8b:fb:b4:73:55:65:5a:d5:b6:c2:75:b0:
27:ca:60:13:09:80:ec:9b:94:85:db:5f:c9:1c:93:
df:43:8a:64:c5:c9:86:62:15:06:39:e3:ea:ce:27:
a1:a9:e9:24:06:24:0e:c9:34:d7:81:7b:f7:7e:a0:
74:90:19:8e:b3:aa:91:3a:c8:1a:5f:47:84:82:f6:
b0:ae:ce:41:1d:04:57:f5:27:6a:2c:50:42:74:75:
b4:72:87:ed:e5:eb:b5:c4:61:09:1e:19:eb:7b:bf:
a7:3d:eb:69:94:df:46:b1:5a:29:48:02:99:bf:db:
0c:95:9c:30:a3:d4:64:e5:2a:6e:c7:16:85:73:51:
0a:89:46:9e:6f:9d:53:3b:9e:39:a9:ca:a1:00:91:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CC:26:41:CE:1D:D7:C0:B6:08:D5:5D:BB:5A:7E:0F:6D:3D:D9:13
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FswmQc4d18C2CNVdu1p-D2092RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.114.0/24
83.137.153.0/24
83.137.158.0/24
88.151.56.0/23
88.209.198.0/24
88.209.201.0/24
88.209.216.0/24
88.209.226.0-88.209.228.255
88.209.232.0/22
88.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1d:db:b4:00:71:15:ac:0d:73:33:9e:01:78:81:49:75:53:
b9:4f:3f:60:38:78:fc:c1:c1:02:a0:51:91:ad:2e:5d:08:d8:
b2:61:ba:93:c2:52:69:18:19:a9:5e:dc:21:15:a5:04:20:5a:
1c:57:b2:4f:6d:e7:c3:d6:99:6f:60:dd:df:a0:90:27:ef:e0:
5e:8f:49:1f:21:0d:02:df:ad:86:72:b5:99:8a:2f:d4:dd:be:
b1:be:71:89:bb:44:b7:67:10:59:2a:78:6c:53:8f:37:10:ad:
e7:65:10:92:aa:4d:07:2d:2b:c6:99:71:55:18:f5:f3:34:47:
50:a6:5a:79:24:b6:9f:74:5a:b5:56:cb:b2:af:be:ba:4d:4b:
df:4e:73:fb:57:2e:86:d0:1c:66:da:d3:11:b1:1d:c1:22:bc:
01:70:8d:31:d5:6c:b2:42:c6:01:71:11:7a:8e:70:c0:2e:a2:
84:af:87:dc:17:0e:5f:1d:c4:e6:6d:4f:4f:f4:87:86:8e:f6:
e8:bc:f1:96:74:33:09:d2:51:23:fc:1c:04:e8:ed:52:0f:0f:
f0:02:c5:0e:cc:00:09:50:c7:1a:ea:a7:8e:95:48:e2:55:0d:
f5:d6:13:bb:b3:b3:b1:ee:83:a0:7b:57:ad:70:e0:f0:f8:80:
b9:03:d1:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:41 2026 by rpki-client