Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ctqwlN0mJeCi6IaPoDms5ntNEHg.roa
File: ctqwlN0mJeCi6IaPoDms5ntNEHg.roa (raw, json)
Hash identifier: cjqxaeZALDy4NNWjgSD1lfLck8MqVXY9nbzKU5rdwO8=
Subject key identifier: 72:DA:B0:94:DD:26:25:E0:A2:E8:86:8F:A0:39:AC:E6:7B:4D:10:78
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019F55858E73E7273F8516DB7B4118D7587D
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ctqwlN0mJeCi6IaPoDms5ntNEHg.roa
Signing time: Sun 12 Jul 2026 08:50:43 +0000
ROA not before: Sun 12 Jul 2026 08:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 83.137.154.0/24 maxlen: 24
88.209.203.0/24 maxlen: 24
88.209.230.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:85:8e:73:e7:27:3f:85:16:db:7b:41:18:d7:58:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 12 08:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72dab094dd2625e0a2e8868fa039ace67b4d1078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:00:9a:6e:4f:dd:e8:dc:e0:3f:1a:e5:d8:
d8:4c:03:7e:d6:ec:3f:32:6c:b7:6b:2b:96:a5:8c:
65:3d:f6:d2:eb:3d:fa:f1:48:91:f3:37:7b:47:c8:
ce:95:a0:41:8c:23:bc:db:c0:0c:7b:61:2b:7e:1e:
a7:38:cb:66:f9:99:0e:fa:bb:08:91:a0:fc:d4:72:
a5:ed:7b:c1:e1:6c:41:83:8c:a9:45:41:48:0c:cd:
d1:b9:8c:6f:48:a1:4d:6a:4d:99:e3:2e:49:b6:3b:
c7:37:c0:b7:f3:9b:39:86:d2:4c:d4:c3:56:47:58:
d4:15:ba:be:14:d7:bc:91:9d:2a:9b:82:db:20:a1:
5b:48:aa:0b:b8:24:f6:51:42:f0:a3:dc:06:43:59:
82:f7:9a:dd:d2:a1:a0:09:3f:4d:ac:d1:e6:a6:a7:
1f:c9:87:b8:e7:58:8d:19:ad:6d:db:fc:1a:3b:2e:
92:10:23:1c:2b:a2:22:9e:eb:43:66:50:0e:1c:8b:
d7:87:a7:f0:90:8d:ca:2e:d8:91:e1:e0:4b:8a:a6:
b4:41:5f:c0:b6:10:b0:a2:53:1d:f4:0c:68:15:ab:
87:99:12:ff:fc:06:c0:d2:90:1a:fb:02:23:37:ee:
05:b4:e3:34:45:00:14:3f:9c:f7:96:d9:e0:99:9a:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DA:B0:94:DD:26:25:E0:A2:E8:86:8F:A0:39:AC:E6:7B:4D:10:78
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ctqwlN0mJeCi6IaPoDms5ntNEHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.154.0/24
88.209.203.0/24
88.209.230.0/24
88.209.255.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e2:f0:d8:25:fe:52:78:b6:da:96:67:f0:e7:96:0e:57:b6:
a6:a9:6e:ec:46:55:66:82:e7:c1:28:b1:d0:7b:1c:43:2d:9a:
ed:51:9b:06:2d:7c:16:ae:88:db:80:cc:f9:8e:d2:40:48:e8:
0f:08:bb:cd:10:84:ab:e0:3d:9e:8f:2e:7f:3f:54:38:80:c6:
0d:70:a8:0f:ac:0e:94:f6:9b:bd:52:ca:98:92:66:bd:55:3e:
ee:b9:49:5f:39:d2:8b:0c:71:0b:b2:b5:51:7d:98:28:cc:0b:
c1:e5:86:08:cb:3f:4a:d7:03:27:dc:97:6b:ea:52:be:42:59:
16:30:84:03:8a:e6:8e:cd:ee:99:d0:72:09:23:c7:75:9c:d6:
6a:c2:f7:11:07:41:5e:27:38:9e:df:6a:63:c8:b6:59:f9:dd:
c7:ba:3a:d7:71:d2:62:3a:74:c0:c0:2e:1a:4b:e6:96:eb:2a:
41:c6:56:b5:20:cf:f8:7f:3b:eb:69:ae:26:f2:d2:99:6d:bc:
57:98:70:6f:43:61:0e:ba:38:a3:69:fb:f3:69:b4:87:a8:d2:
4b:d7:37:16:8e:1e:2e:5a:ca:bd:00:27:aa:32:6f:d8:3d:87:
bf:35:7f:a9:46:6e:19:c4:ce:d0:45:f4:52:73:ce:9b:ea:93:
d4:c4:64:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:33 2026 by rpki-client