Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/G8bt1cujag5k5VlGG-ieV4vkdNs.roa
File: G8bt1cujag5k5VlGG-ieV4vkdNs.roa (raw, json)
Hash identifier: wkGJsabkzg4Vvd/19xi/eCt9WPXSQvC78M1l94pRvUo=
Subject key identifier: 1B:C6:ED:D5:CB:A3:6A:0E:64:E5:59:46:1B:E8:9E:57:8B:E4:74:DB
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019F3BDE63653A27845F3BB1C31CEBFC38E0
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/G8bt1cujag5k5VlGG-ieV4vkdNs.roa
Signing time: Tue 07 Jul 2026 09:17:37 +0000
ROA not before: Tue 07 Jul 2026 09:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 77.242.145.0/24 maxlen: 24
77.242.149.0/24 maxlen: 24
77.242.157.0/24 maxlen: 24
88.209.200.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:de:63:65:3a:27:84:5f:3b:b1:c3:1c:eb:fc:38:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 7 09:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bc6edd5cba36a0e64e559461be89e578be474db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:67:1a:30:53:b2:f8:c4:cc:cd:0a:78:f8:38:
69:06:28:45:e0:ee:1b:60:41:3e:c7:f6:f0:58:ec:
32:a1:5a:d5:3d:2b:cb:c0:74:f1:2b:14:dd:f5:83:
51:72:da:c7:ac:f6:64:4e:fc:82:63:f2:95:ef:88:
d2:cf:5c:6f:75:ae:1a:5e:83:01:87:5f:85:9c:26:
c5:45:e8:ab:04:55:b1:a2:11:ae:11:a7:a8:4e:91:
f4:47:b6:04:9c:62:ac:12:58:09:d6:f6:ea:af:d6:
73:c9:d0:4c:63:4e:6a:95:5c:32:d0:53:91:d8:0f:
fe:bd:03:46:23:bf:a0:b0:2a:a5:98:4e:df:f3:67:
65:7c:42:d0:af:30:ed:e9:1a:75:50:ac:58:7d:e2:
d1:55:91:8d:58:cf:0d:c4:3c:a2:f8:ba:fd:2c:f6:
d5:0d:28:04:5c:b7:ae:f7:6b:5b:e5:22:56:25:68:
6d:8c:11:41:14:82:9b:4e:fa:45:c4:45:98:6c:fc:
ac:28:09:81:ae:6c:55:f1:b9:c8:ec:bc:b1:81:f6:
fd:aa:5a:ed:65:ab:dd:75:ed:91:26:60:18:27:fd:
b4:95:9f:cd:82:d9:ad:11:b7:e0:5b:e0:22:21:22:
86:ca:64:28:ee:f6:65:9e:21:8a:6a:45:d3:1d:8b:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C6:ED:D5:CB:A3:6A:0E:64:E5:59:46:1B:E8:9E:57:8B:E4:74:DB
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/G8bt1cujag5k5VlGG-ieV4vkdNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.145.0/24
77.242.149.0/24
77.242.157.0/24
88.209.200.0/24
88.209.211.0/24
88.209.220.0/24
88.209.224.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:d2:c6:4c:de:30:b1:cd:82:18:e6:e5:d4:6e:1d:e7:fd:66:
e6:9c:97:5f:18:0a:3c:59:d0:49:41:3c:4a:26:59:63:7e:01:
6f:ce:1b:2b:c4:01:cd:05:85:5f:75:be:d2:9c:f0:70:68:bc:
ac:76:45:b1:91:da:81:57:82:78:29:d5:18:3c:0a:76:20:02:
bc:3c:90:8c:7f:64:bc:ed:cf:bf:fe:a5:8a:e8:48:dc:de:85:
27:b0:3b:ed:88:d8:87:ff:c9:37:9a:77:87:38:ac:95:fa:c5:
86:85:b1:7b:fa:d1:76:fd:94:d4:1f:b4:5d:13:16:86:bd:76:
73:ab:a1:38:ff:dc:79:b2:41:7f:36:8f:f1:4a:88:d4:7f:dc:
6b:d5:7d:da:1d:da:65:06:2f:7b:85:77:2a:e3:38:02:1b:ca:
01:eb:48:b8:a6:a7:4e:6f:9e:b0:27:5f:bd:27:e6:01:4e:56:
40:88:7e:8e:d5:3f:f4:b5:5d:b5:3d:ed:59:3a:2e:b7:3e:a3:
ea:ec:17:c0:eb:a1:9c:b8:4d:d1:17:43:9d:3e:ef:2d:29:99:
ae:ed:db:1e:01:77:e6:da:02:47:bb:28:89:e0:75:95:58:bf:
0c:c5:76:94:9e:20:6e:83:2a:3f:66:55:83:f7:12:e8:68:76:
16:ba:e2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:44 2026 by rpki-client