Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/X1W_fta1YInwLXNF7t2v2HvAVLM.roa
File: X1W_fta1YInwLXNF7t2v2HvAVLM.roa (raw, json)
Hash identifier: jWQ9sX0ydyHUrce8XCzHcdwhfV+EPm/6e7mlrb185Eg=
Subject key identifier: 5F:55:BF:7E:D6:B5:60:89:F0:2D:73:45:EE:DD:AF:D8:7B:C0:54:B3
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A15177988D0E54611296751771D0349F7A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/X1W_fta1YInwLXNF7t2v2HvAVLM.roa
Signing time: Mon 19 Oct 2026 00:02:34 +0000
ROA not before: Mon 19 Oct 2026 00:02:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 83.137.154.0/24 maxlen: 24
88.209.194.0/24 maxlen: 24
88.209.229.0/24 maxlen: 24
88.209.232.0/24 maxlen: 24
88.209.233.0/24 maxlen: 24
88.209.234.0/24 maxlen: 24
88.209.235.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:77:98:8d:0e:54:61:12:96:75:17:71:d0:34:9f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 19 00:02:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f55bf7ed6b56089f02d7345eeddafd87bc054b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:d5:61:61:27:9f:fb:ee:28:e4:30:bb:12:
54:08:8a:40:77:83:27:2b:b9:c9:dc:bd:9b:c7:ee:
37:42:14:5a:c1:f2:c2:ad:cd:94:54:18:e7:7d:16:
47:55:cd:ea:d8:a5:08:30:08:a3:1d:0e:2e:79:27:
ef:0a:31:54:76:96:e5:76:1d:94:17:f3:ac:d3:18:
e0:c3:88:7f:6c:c6:f3:5d:19:57:e9:eb:d7:b9:7d:
cf:5c:11:bf:65:be:2c:0b:bc:28:a6:ae:0e:7e:55:
17:9e:61:ad:40:24:2a:f4:64:54:b0:bc:c8:1b:af:
ce:71:a0:0d:30:10:4a:b6:fd:4c:f6:a4:d0:a4:39:
a8:97:4a:6f:ef:6c:b9:9f:bf:54:48:4a:34:dc:4b:
97:e4:0f:d2:b5:65:3a:90:30:cf:55:28:3b:88:bf:
97:7e:ae:af:c6:b4:77:a5:a1:36:80:37:18:81:d8:
ba:e1:67:ab:e2:de:6b:81:b0:3d:03:6c:05:7c:2d:
9e:0d:37:2b:c7:2d:7a:92:d2:63:cc:85:3b:43:70:
ed:10:b7:da:b0:b6:0a:b8:79:6f:59:31:c7:c8:d1:
43:e6:ac:0f:6d:42:d8:21:46:b3:d3:25:8e:5e:78:
d2:37:d5:d7:61:eb:86:49:98:39:45:91:3f:e1:59:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:55:BF:7E:D6:B5:60:89:F0:2D:73:45:EE:DD:AF:D8:7B:C0:54:B3
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/X1W_fta1YInwLXNF7t2v2HvAVLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.154.0/24
88.209.194.0/24
88.209.229.0/24
88.209.232.0/22
92.52.219.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0e:d0:f7:f3:34:35:fd:68:01:4f:f4:c8:b8:85:d5:c0:3c:
50:f6:7d:fb:66:14:f7:4e:34:2f:63:6f:78:19:be:4b:5e:70:
60:55:54:22:84:43:e8:37:dc:7a:11:5a:58:ad:ac:9e:71:22:
cd:ee:14:2d:e7:04:f0:c2:02:21:43:3c:56:72:4f:2c:f8:66:
9d:4b:1b:26:9c:f6:da:5d:38:fb:f7:9d:c6:57:a2:7f:be:41:
9f:c5:39:d5:1a:df:9f:2b:ef:5e:7c:80:8a:e4:cc:3e:b3:d4:
91:8a:39:b7:3d:34:95:5c:f8:ed:a3:14:0e:7d:38:82:68:c4:
69:3a:a8:15:66:ec:77:55:dd:ad:fb:b1:a5:af:61:6d:60:a0:
8f:ae:cd:ba:e9:a6:10:1b:9e:7f:7f:ca:28:4a:4c:f3:16:6e:
40:1b:ff:90:11:e7:5f:0e:ed:1b:c7:4b:85:30:64:5c:f0:55:
ef:20:e5:31:c8:79:32:a5:af:60:d2:17:8d:32:e1:5b:9c:8c:
b6:02:c4:be:c5:04:2d:c2:8e:fc:97:ce:8a:eb:11:8f:b7:58:
17:4e:a7:f5:6b:06:63:70:30:63:d1:00:63:61:44:26:2f:76:
40:ad:b7:fd:53:65:8b:ce:11:44:67:37:ab:64:c4:f5:c1:5c:
84:68:79:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:30 2026 by rpki-client