Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/RySRLJ_wtFeMGvls7p91gE0Oz_Y.roa
File: RySRLJ_wtFeMGvls7p91gE0Oz_Y.roa (raw, json)
Hash identifier: rvcl51Dgi71vgcqD4I/WTKRT5J4pD4Cod+/QE0iGtKg=
Subject key identifier: 47:24:91:2C:9F:F0:B4:57:8C:1A:F9:6C:EE:9F:75:80:4D:0E:CF:F6
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A008B13C9051399C1BB95D5AA1AE0B8992
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/RySRLJ_wtFeMGvls7p91gE0Oz_Y.roa
Signing time: Sun 16 Aug 2026 03:50:28 +0000
ROA not before: Sun 16 Aug 2026 03:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 77.242.157.0/24 maxlen: 24
88.209.200.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:08:b1:3c:90:51:39:9c:1b:b9:5d:5a:a1:ae:0b:89:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 16 03:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4724912c9ff0b4578c1af96cee9f75804d0ecff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:c1:52:df:51:f4:8c:66:82:f7:bc:8b:25:
50:60:77:10:51:7c:eb:f2:c3:76:bf:1a:34:b8:17:
1c:2e:cd:58:9a:6c:6b:ac:c5:7a:67:f3:89:38:f4:
32:d4:e8:87:2c:e4:a7:84:07:74:77:52:03:aa:0c:
b9:4a:0f:d2:44:30:10:c8:5e:9f:b0:46:39:4e:64:
ec:bb:15:5d:d7:39:f8:0e:0d:da:d3:1d:b1:6a:12:
ae:6b:6b:4a:68:77:95:1b:29:4f:c3:99:70:06:32:
29:89:0e:f4:c0:99:54:c3:8e:57:ce:0a:9f:cb:fc:
1a:de:68:12:02:7f:3e:81:9a:73:77:bd:7a:62:f4:
12:58:6f:b9:04:ba:ce:30:d8:8a:73:cd:b2:ea:ab:
6a:db:f1:b5:2a:54:bb:97:ad:31:70:74:aa:14:b8:
b7:87:71:5c:4f:ad:bf:bd:7a:39:6c:36:41:ad:49:
2e:a0:31:7f:61:f5:d8:96:32:be:fc:83:3f:5c:a3:
31:64:fb:ce:04:82:9d:86:56:1d:19:bb:54:ab:fe:
8d:d8:62:fd:21:8c:07:f9:5f:e0:73:e8:06:4e:16:
16:d2:eb:d0:b6:1b:eb:52:65:61:d3:ad:28:ca:f0:
f6:03:b4:ba:91:0d:a1:7f:5f:21:f0:17:17:2a:cc:
e2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:24:91:2C:9F:F0:B4:57:8C:1A:F9:6C:EE:9F:75:80:4D:0E:CF:F6
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/RySRLJ_wtFeMGvls7p91gE0Oz_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.157.0/24
88.209.200.0/24
88.209.211.0/24
88.209.220.0/24
88.209.224.0/23
Signature Algorithm: sha256WithRSAEncryption
08:19:36:f2:f4:db:7c:28:c2:4a:46:52:63:50:07:1d:0a:a9:
d4:79:52:59:12:ae:0c:a2:69:f2:bb:38:1c:a2:db:74:11:e0:
09:39:e5:e4:27:6a:35:56:76:7d:e5:56:a6:b1:c5:00:3d:93:
40:95:c2:3b:7d:8e:46:2f:b0:89:4d:19:83:62:01:0d:2b:c6:
35:81:aa:14:d4:57:10:41:52:ff:64:0a:5c:0b:d3:44:f3:6b:
9b:13:62:e3:88:76:39:5a:d8:5d:08:d0:cb:ce:a5:03:77:76:
0c:1d:4d:7c:bd:50:d6:94:be:41:ac:c3:7e:e1:86:f6:ea:83:
1b:a5:c4:eb:0b:69:8e:2c:d8:2a:fc:0b:e6:b4:d3:5c:71:86:
fe:4a:ce:ea:a5:18:26:75:b9:fe:df:64:05:c8:60:a0:0f:bf:
b9:21:53:02:95:3b:92:b6:46:39:68:fa:a3:57:d0:01:a8:ee:
c4:cb:9b:46:65:dd:a0:11:cf:ce:02:9d:cb:ea:06:93:5c:3c:
01:02:81:6d:61:a3:40:81:61:4d:c7:2a:db:32:7b:36:d3:73:
c5:dc:4f:05:c1:4a:2c:fc:8c:4f:6b:f3:a8:82:4e:99:45:b8:
c3:51:88:9d:cd:a9:7a:a7:f3:6b:11:87:d6:3f:3e:db:9c:0b:
79:7c:3a:c1
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaAIsTyQUTmcG7ldWqGuC4mSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjYwODE2MDM1MDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzI0OTEyYzlmZjBiNDU3OGMxYWY5NmNlZTlmNzU4MDRkMGVjZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJfBUt9R9Ixmgve8iyVQYHcQUXzr
8sN2vxo0uBccLs1YmmxrrMV6Z/OJOPQy1OiHLOSnhAd0d1IDqgy5Sg/SRDAQyF6f
sEY5TmTsuxVd1zn4Dg3a0x2xahKua2tKaHeVGylPw5lwBjIpiQ70wJlUw45Xzgqf
y/wa3mgSAn8+gZpzd716YvQSWG+5BLrOMNiKc82y6qtq2/G1KlS7l60xcHSqFLi3
h3FcT62/vXo5bDZBrUkuoDF/YfXYljK+/IM/XKMxZPvOBIKdhlYdGbtUq/6N2GL9
IYwH+V/gc+gGThYW0uvQthvrUmVh060oyvD2A7S6kQ2hf18h8BcXKsziKQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEckkSyf8LRXjBr5bO6fdYBNDs/2MB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvUnlTUkxKX3d0RmVNR3ZsczdwOTFnRTBPel9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATfKdAwQA
WNHIAwQAWNHTAwQAWNHcAwQBWNHgMA0GCSqGSIb3DQEBCwUAA4IBAQAIGTby9Nt8
KMJKRlJjUAcdCqnUeVJZEq4Momnyuzgcott0EeAJOeXkJ2o1VnZ95VamscUAPZNA
lcI7fY5GL7CJTRmDYgENK8Y1gaoU1FcQQVL/ZApcC9NE82ubE2LjiHY5WthdCNDL
zqUDd3YMHU18vVDWlL5BrMN+4Yb26oMbpcTrC2mOLNgq/AvmtNNccYb+Ss7qpRgm
dbn+32QFyGCgD7+5IVMClTuStkY5aPqjV9ABqO7Ey5tGZd2gEc/OAp3L6gaTXDwB
AoFtYaNAgWFNxyrbMns203PF3E8FwUos/IxPa/Oogk6ZRbjDUYidzal6p/NrEYfW
Pz7bnAt5fDrB
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:16 2026 by rpki-client