Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/M7SliznTLMaJ4GHxrd5P66fafLw.roa
File: M7SliznTLMaJ4GHxrd5P66fafLw.roa (raw, json)
Hash identifier: lZ+tTrXUuvJX0P2NaXy1pNmkhfo0fwALwdwUtX0h0kk=
Subject key identifier: 33:B4:A5:8B:39:D3:2C:C6:89:E0:61:F1:AD:DE:4F:EB:A7:DA:7C:BC
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019F0CD9EEB5294242EE4736388EFC0E48D4
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/M7SliznTLMaJ4GHxrd5P66fafLw.roa
Signing time: Sun 28 Jun 2026 06:10:36 +0000
ROA not before: Sun 28 Jun 2026 06:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 2.58.168.0/24 maxlen: 24
2.58.169.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
77.242.158.0/24 maxlen: 24
88.151.57.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
92.52.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0c:d9:ee:b5:29:42:42:ee:47:36:38:8e:fc:0e:48:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 28 06:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33b4a58b39d32cc689e061f1adde4feba7da7cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:ad:e1:83:ec:49:73:cb:52:25:4f:c8:fc:
bb:11:76:58:57:14:67:9b:23:1e:f1:b5:ad:fd:c0:
8c:fa:ff:8c:0c:94:15:16:da:6a:8a:1d:9f:3d:ce:
a9:c8:e3:75:b1:b2:f4:02:62:d3:2e:a4:fb:ef:f1:
cb:10:81:fe:e3:c4:d9:cc:c6:00:db:8a:81:a6:2c:
b2:a4:54:87:ab:8d:2f:69:c0:f9:b2:e0:65:41:c0:
e2:3d:b2:7f:65:11:d8:16:d9:20:99:8e:c7:1f:f3:
3b:87:10:03:3d:d0:12:de:74:5f:ad:67:34:de:61:
77:ce:5f:89:ec:be:a7:bb:61:2c:7a:39:d7:4b:01:
f4:59:92:de:00:b2:60:42:bf:9a:63:9e:6d:a8:58:
38:17:7f:44:c4:fe:31:80:7f:85:c6:3e:92:eb:3a:
aa:44:e5:d9:e7:90:84:55:8f:da:c8:ca:78:19:68:
03:2d:c4:f5:90:e1:6f:23:a9:a0:63:8c:f6:ca:32:
cc:5c:e5:41:9c:11:76:eb:3d:6d:48:a6:50:36:5b:
53:28:be:5a:5b:bc:c6:3c:43:5f:75:02:74:6b:9d:
81:6c:39:07:bd:11:d0:a1:e9:92:bc:d4:a2:f9:2a:
b0:87:c7:0d:44:f1:3c:f7:58:59:bb:8c:24:c2:53:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B4:A5:8B:39:D3:2C:C6:89:E0:61:F1:AD:DE:4F:EB:A7:DA:7C:BC
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/M7SliznTLMaJ4GHxrd5P66fafLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/23
77.242.150.0/24
77.242.156.0/24
77.242.158.0/24
88.151.57.0-88.151.58.255
88.209.217.0/24
92.52.214.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c5:cb:24:4d:42:24:39:a2:21:0f:a4:4a:f1:13:09:2f:6e:
79:43:57:9c:71:d4:60:28:2c:8f:0f:48:2a:a8:5e:9b:d4:7f:
6c:7e:32:81:7d:a3:ac:ff:22:fc:ba:03:ec:41:6e:eb:88:54:
5f:b3:39:67:ef:a1:01:24:c3:7d:33:38:96:ed:84:f2:8f:ca:
26:de:ad:cd:8a:24:66:aa:9e:9a:62:96:36:82:a6:df:b5:3b:
3e:4d:8a:09:cf:76:af:3b:9f:d4:63:48:75:83:84:9e:88:6a:
a9:e7:36:03:89:d1:ea:db:ad:a2:5f:4f:7c:dc:58:5b:05:4e:
46:42:0e:74:8e:bb:f7:3a:52:b1:61:64:1c:45:4d:3f:dc:a1:
0a:a7:90:b0:4e:c7:f3:70:d2:82:ce:a3:ba:d3:e2:2f:b4:44:
ce:2c:2a:b9:6c:c1:ae:b3:d2:f1:b0:1a:c0:c6:5c:42:4a:72:
9e:86:7c:e4:84:a6:c6:7c:62:6b:42:cc:3e:18:de:7f:1b:5e:
b3:ab:1f:d3:70:4d:39:7e:bb:b4:e2:67:b1:36:d3:8c:27:c3:
a9:1c:4b:ad:95:b1:0e:9d:9a:87:62:be:01:42:11:7b:16:fe:
a4:94:e7:81:21:6c:17:6a:9f:6e:e9:34:11:2b:ea:2f:7d:7c:
eb:61:03:52
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZ8M2e61KUJC7kc2OI78DkjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjYwNjI4MDYxMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2I0YTU4YjM5ZDMyY2M2ODllMDYxZjFhZGRlNGZlYmE3ZGE3Y2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiKt4YPsSXPLUiVPyPy7EXZYVxRn
myMe8bWt/cCM+v+MDJQVFtpqih2fPc6pyON1sbL0AmLTLqT77/HLEIH+48TZzMYA
24qBpiyypFSHq40vacD5suBlQcDiPbJ/ZRHYFtkgmY7HH/M7hxADPdAS3nRfrWc0
3mF3zl+J7L6nu2EsejnXSwH0WZLeALJgQr+aY55tqFg4F39ExP4xgH+Fxj6S6zqq
ROXZ55CEVY/ayMp4GWgDLcT1kOFvI6mgY4z2yjLMXOVBnBF26z1tSKZQNltTKL5a
W7zGPENfdQJ0a52BbDkHvRHQoemSvNSi+Sqwh8cNRPE891hZu4wkwlP5eQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFDO0pYs50yzGieBh8a3eT+un2ny8MB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvTTdTbGl6blRMTWFKNEdIeHJkNVA2NmZhZkx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQBAjqoAwQA
TfKWAwQATfKcAwQATfKeMAwDBABYlzkDBABYlzoDBABY0dkDBABcNNYwDQYJKoZI
hvcNAQELBQADggEBAE3FyyRNQiQ5oiEPpErxEwkvbnlDV5xx1GAoLI8PSCqoXpvU
f2x+MoF9o6z/Ivy6A+xBbuuIVF+zOWfvoQEkw30zOJbthPKPyiberc2KJGaqnppi
ljaCpt+1Oz5NignPdq87n9RjSHWDhJ6IaqnnNgOJ0erbraJfT3zcWFsFTkZCDnSO
u/c6UrFhZBxFTT/coQqnkLBOx/Nw0oLOo7rT4i+0RM4sKrlswa6z0vGwGsDGXEJK
cp6GfOSEpsZ8YmtCzD4Y3n8bXrOrH9NwTTl+u7TiZ7E204wnw6kcS62VsQ6dmodi
vgFCEXsW/qSU54EhbBdqn27pNBEr6i99fOthA1I=
-----END CERTIFICATE-----
Generated at Mon Jul 20 13:30:30 2026 by rpki-client