Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/l-_84pYsPYkl26dzR-5wTWUqUeY.roa
File: l-_84pYsPYkl26dzR-5wTWUqUeY.roa (raw, json)
Hash identifier: aCBDbqHWAht5jQnBsZsD+zeP/xuj+LQks2xjRheJHg0=
Subject key identifier: 97:EF:FC:E2:96:2C:3D:89:25:DB:A7:73:47:EE:70:4D:65:2A:51:E6
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A008B13B82BCA7396F84514FE248C53980
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/l-_84pYsPYkl26dzR-5wTWUqUeY.roa
Signing time: Sun 16 Aug 2026 03:50:27 +0000
ROA not before: Sun 16 Aug 2026 03:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54339
IP address blocks: 77.242.157.0/24 maxlen: 24
88.209.200.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:08:b1:3b:82:bc:a7:39:6f:84:51:4f:e2:48:c5:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 16 03:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97effce2962c3d8925dba77347ee704d652a51e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:3f:35:eb:6b:e8:67:48:9e:3b:ec:87:9b:
4a:22:18:e8:50:ce:eb:27:ac:4a:d5:7a:b7:a4:23:
74:07:50:98:18:cb:d9:db:6d:c4:ca:16:06:60:c9:
91:c2:6d:bb:10:82:37:84:2e:77:ec:6b:97:99:b6:
f7:8f:2f:27:73:83:e1:f0:0c:fa:25:b3:11:95:d0:
8d:b9:74:c7:35:bb:bc:9c:a9:55:be:76:1d:e4:44:
f2:5e:b9:1b:9f:82:56:ce:ad:05:f3:1d:e5:d7:ce:
3d:ad:38:9a:99:6d:74:6b:79:0c:a3:c6:c1:82:df:
79:c3:da:80:a1:ce:3b:bb:9d:6a:4c:e6:28:7f:27:
76:30:0a:e6:68:9b:3e:c7:92:1c:cc:c2:18:5e:02:
2c:36:a2:62:2c:82:10:13:5e:0a:f9:ce:c1:df:3e:
cc:99:4c:10:96:93:fb:c3:10:1f:b5:9a:d6:2f:b0:
7c:e5:b0:c6:25:8b:80:31:04:4a:43:07:e1:77:aa:
8e:8a:16:8a:d3:f8:2a:f6:44:72:39:9a:d9:a4:bc:
cd:c8:30:9e:74:4e:08:80:2f:af:f0:d7:f7:2e:ae:
2c:de:05:70:0c:13:53:e3:8e:c8:16:6d:eb:78:88:
72:a5:10:ce:82:7f:35:39:b4:d8:2f:55:02:69:6f:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EF:FC:E2:96:2C:3D:89:25:DB:A7:73:47:EE:70:4D:65:2A:51:E6
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/l-_84pYsPYkl26dzR-5wTWUqUeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.157.0/24
88.209.200.0/24
88.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4f:0c:6e:e0:9d:62:08:9c:bd:0d:d8:8d:af:b8:b6:6d:d5:
c9:e1:bc:65:d9:5c:ac:3a:77:03:77:5b:a2:8e:bc:5e:99:7f:
3f:98:ac:d5:ac:cf:4f:a5:03:6a:77:fd:32:e3:1c:7a:60:7c:
18:09:ec:c2:26:6e:14:77:4c:2b:a2:fb:de:b3:a4:e1:f7:be:
f5:b0:17:94:b5:8c:bc:8a:41:14:24:43:d1:f7:64:48:7f:64:
03:7c:30:c5:1d:31:df:8b:9c:d8:e6:49:1b:07:0f:58:2d:df:
13:1d:21:51:23:88:ed:4b:fd:9e:08:fd:8c:87:dc:1a:db:c6:
9c:00:6f:6e:16:38:02:58:c9:30:ef:71:84:9e:a7:64:f2:e7:
d7:e3:5b:d5:76:83:52:38:9e:f9:f3:29:59:b8:b8:35:46:3c:
1c:d6:93:d7:7d:23:e2:51:72:70:31:61:54:ac:30:e4:f8:8e:
83:a7:28:ed:e5:13:4a:3a:ae:ab:a0:bd:4e:fe:f8:0f:64:a1:
f3:df:63:d7:56:eb:02:c1:07:52:4c:ed:ac:4a:02:51:cb:a9:
d8:3d:64:4b:eb:94:c5:f0:e5:70:12:ac:77:5f:ac:64:b9:0f:
fb:d1:af:02:23:c2:15:ef:cd:55:a8:5d:b9:4c:55:23:7e:79:
ed:cf:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:24 2026 by rpki-client