Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VQI8VCl5yaNcYGXPIZc6WuKabc0.roa
File: VQI8VCl5yaNcYGXPIZc6WuKabc0.roa (raw, json)
Hash identifier: WTR4FHVPY/mnXoltoBM98zfCTabZVRQukgNSkSJEJ4k=
Subject key identifier: 55:02:3C:54:29:79:C9:A3:5C:60:65:CF:21:97:3A:5A:E2:9A:6D:CD
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019F3BE04EE83C47E42BA70DC5F92AB1A649
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VQI8VCl5yaNcYGXPIZc6WuKabc0.roa
Signing time: Tue 07 Jul 2026 09:19:43 +0000
ROA not before: Tue 07 Jul 2026 09:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 5.182.114.0/24 maxlen: 24
88.209.229.0/24 maxlen: 24
88.209.232.0/24 maxlen: 24
88.209.233.0/24 maxlen: 24
88.209.234.0/24 maxlen: 24
88.209.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:e0:4e:e8:3c:47:e4:2b:a7:0d:c5:f9:2a:b1:a6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 7 09:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55023c542979c9a35c6065cf21973a5ae29a6dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:eb:b8:46:3b:46:d3:99:86:e7:ea:73:a8:
21:b5:6b:ab:28:56:44:86:59:da:0d:1f:fc:55:6b:
0b:2b:2a:dc:4e:1c:76:a0:16:5f:88:e2:0a:db:4c:
52:6d:f4:ed:ab:f0:fc:a2:fc:cb:84:ae:02:4a:fa:
45:57:60:9a:00:3d:bf:64:25:7c:3e:b5:02:0f:01:
d5:4a:77:df:37:d5:c1:54:b9:07:ff:1b:d8:06:8c:
3b:42:07:ac:38:8f:f7:78:5f:7d:3e:9e:09:67:96:
aa:a1:59:cb:9a:16:4f:51:c4:2e:7d:95:d1:c4:b2:
65:6f:de:fd:f9:02:b5:91:af:51:20:02:4b:e1:e2:
65:63:3f:9b:46:a6:97:ed:3f:f8:dd:ad:49:09:63:
77:66:88:a8:9e:20:34:71:db:86:07:53:55:63:09:
a7:78:fa:91:3a:15:83:6d:fe:06:ef:a5:12:c4:8a:
02:c9:94:e6:fa:35:e0:b2:16:17:c1:6f:1f:94:bc:
38:77:99:c8:7a:88:6c:d5:8f:67:cb:19:a1:d4:c2:
5d:f1:69:3c:a1:73:79:5d:4d:9b:4f:c0:ff:f8:af:
88:3e:a6:ab:b6:f6:31:06:d9:2c:fc:fe:77:77:34:
e8:e3:4e:69:75:c7:78:38:37:6f:56:e5:94:9c:7e:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:02:3C:54:29:79:C9:A3:5C:60:65:CF:21:97:3A:5A:E2:9A:6D:CD
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VQI8VCl5yaNcYGXPIZc6WuKabc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.114.0/24
88.209.229.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
30:f9:0b:d1:ee:9a:0d:7f:df:a6:7a:e5:36:bd:c2:93:ed:b4:
72:e5:30:25:08:ad:9d:6c:39:54:26:5e:db:05:f1:a9:e6:86:
f8:80:f1:cc:0e:bf:c8:26:f2:c4:99:5b:da:5e:7e:9c:6c:d7:
e7:81:96:84:21:cc:3f:79:e7:b0:98:b6:c5:f5:59:9a:4d:56:
66:22:2a:ec:ab:00:c7:2a:96:b8:4f:14:ca:be:78:80:da:e6:
55:66:6e:ed:0b:e4:08:0a:9b:f7:59:28:97:10:1d:98:28:b5:
20:70:f4:10:0c:ab:b3:41:c6:20:12:a8:68:13:25:9f:31:d3:
5d:08:f8:c6:26:36:bb:6e:9d:fb:91:e1:b5:b1:96:06:e6:f2:
c7:70:f1:68:6e:db:91:2b:89:19:4c:c7:a7:ef:f0:92:96:78:
70:19:91:9e:55:bf:fb:f0:1c:a7:6d:4f:79:99:ae:54:67:e2:
1a:f3:0a:97:7f:88:e8:d2:eb:27:ad:ea:ea:af:e9:58:28:8d:
c4:1c:29:a5:82:cf:f9:48:3c:15:89:20:fe:87:98:16:f4:8b:
41:d2:c8:ec:41:02:6f:c6:55:ab:9a:f1:cc:41:5c:29:cf:c7:
2d:1f:7a:6e:34:dd:1d:d5:49:28:15:b6:ca:a6:d8:01:ed:0a:
5f:79:05:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:51 2026 by rpki-client