Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/G7WmLUyYrS5b-Kcjenu-RbhMkgM.roa
File: G7WmLUyYrS5b-Kcjenu-RbhMkgM.roa (raw, json)
Hash identifier: /pfWAZ/STBasGhz5mG7h0/U+RrWaaO5vr4q+dioy4Ek=
Subject key identifier: 1B:B5:A6:2D:4C:98:AD:2E:5B:F8:A7:23:7A:7B:BE:45:B8:4C:92:03
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A1517798DD31B36D83E2F22FBB619805B9
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/G7WmLUyYrS5b-Kcjenu-RbhMkgM.roa
Signing time: Mon 19 Oct 2026 00:02:34 +0000
ROA not before: Mon 19 Oct 2026 00:02:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 88.209.229.0/24 maxlen: 24
88.209.232.0/24 maxlen: 24
88.209.233.0/24 maxlen: 24
88.209.234.0/24 maxlen: 24
88.209.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:77:98:dd:31:b3:6d:83:e2:f2:2f:bb:61:98:05:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 19 00:02:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bb5a62d4c98ad2e5bf8a7237a7bbe45b84c9203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:eb:4e:d0:dc:18:17:32:e3:19:67:7c:93:
ca:d9:91:67:a3:53:bb:57:39:7b:93:66:2f:59:cc:
a8:c0:63:c2:96:d1:51:ee:c3:b6:16:df:4c:de:05:
33:67:a1:f8:da:a2:d6:3b:f0:99:8f:29:51:7d:2a:
05:4d:ad:1a:e4:36:c5:b3:e4:ba:c3:0a:4d:a0:77:
4a:31:a8:2f:8f:48:a3:9b:fb:88:42:04:22:f0:98:
1b:48:55:38:cb:1c:17:85:de:04:3c:24:87:fe:42:
ed:5a:e4:e9:e3:64:d9:21:8e:44:30:1a:3f:c7:07:
b0:b5:f0:5e:80:d6:35:34:54:7c:2f:69:e3:df:9f:
58:f4:16:aa:14:43:55:79:59:2a:4c:b5:5b:1a:bc:
67:c2:e7:0b:86:34:b2:95:e0:99:ab:d2:03:c3:dc:
85:c9:de:b8:7e:1d:b4:ee:1e:f8:62:d8:2f:29:19:
ca:23:21:ec:65:6c:96:7e:a8:b1:94:cc:d6:f8:f8:
fb:b6:09:c2:60:2a:c5:f2:c8:5f:32:94:45:2e:0a:
e2:98:cc:2a:90:b6:a7:1b:f3:81:e5:95:55:53:97:
c6:58:f4:46:21:19:7c:14:f0:46:7d:9b:e6:f2:09:
9c:9f:d3:8a:01:e0:f7:49:b3:3b:ce:6e:94:5d:2e:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B5:A6:2D:4C:98:AD:2E:5B:F8:A7:23:7A:7B:BE:45:B8:4C:92:03
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/G7WmLUyYrS5b-Kcjenu-RbhMkgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.229.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:27:d0:ab:22:4c:f5:bd:28:a5:61:a5:d8:6c:17:41:dc:c5:
07:98:6e:22:84:4a:8a:43:ba:28:42:e9:9a:b4:27:40:21:0d:
aa:1c:aa:91:04:ec:22:f6:6a:0a:41:62:80:e3:02:d4:a0:8a:
21:0f:75:47:48:e8:42:7b:61:24:85:fa:8b:62:48:14:58:f3:
61:69:3a:ef:5d:87:55:06:c6:22:3d:4f:c3:bb:f4:64:74:91:
32:e3:0a:7f:2d:ed:48:6a:22:46:c7:7d:10:d1:b1:ab:41:d5:
23:96:a6:ac:73:97:5f:56:8d:b7:eb:b3:c9:a6:76:c9:90:c6:
4d:37:1d:4f:19:1b:40:c0:c9:15:b1:83:c3:e3:2e:fa:8d:77:
05:5a:39:b4:11:70:19:f5:ac:4e:f0:be:1a:a9:75:02:01:6a:
9d:d6:9b:e7:88:9d:92:2e:f1:4a:33:7a:9f:89:62:16:6b:60:
6f:f0:b3:c4:f4:a1:97:a7:ba:41:be:0f:36:08:9b:8f:50:45:
c6:7e:f8:19:d0:b1:20:5f:9b:05:a2:5c:0f:65:5f:86:a6:3c:
19:49:75:2f:34:d0:10:95:c3:a0:79:6b:15:99:33:6d:06:59:
3d:7e:8d:92:e1:60:3a:da:93:5e:6f:08:03:1e:2d:71:f1:c6:
1f:60:d8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:27 2026 by rpki-client