Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pnLgUl8jay0syaf9JqQUfaeAme0.roa
File: pnLgUl8jay0syaf9JqQUfaeAme0.roa (raw, json)
Hash identifier: sho6xMqpOLlUtSlItzZIRvS9oCcgKH5PphefEcpFNA4=
Subject key identifier: A6:72:E0:52:5F:23:6B:2D:2C:C9:A7:FD:26:A4:14:7D:A7:80:99:ED
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019FDD922AEF4EF6EAFF1877C058A184D66A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pnLgUl8jay0syaf9JqQUfaeAme0.roa
Signing time: Fri 07 Aug 2026 18:52:51 +0000
ROA not before: Fri 07 Aug 2026 18:52:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.137.153.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.198.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
88.209.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:92:2a:ef:4e:f6:ea:ff:18:77:c0:58:a1:84:d6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 7 18:52:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a672e0525f236b2d2cc9a7fd26a4147da78099ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:f4:be:1d:4a:5f:50:cf:cc:32:bf:28:9e:
6f:86:b8:6c:b7:31:16:35:c1:99:6a:ef:14:04:48:
7e:02:7c:30:45:58:33:22:cf:52:cf:77:63:52:fd:
57:fd:69:c1:a1:a0:73:5e:fc:a0:d5:88:76:d8:d8:
ac:bc:ef:43:3b:a1:6d:ac:bf:bb:5a:30:4d:bd:cd:
76:27:9f:6a:df:e6:ca:e5:b5:89:8c:27:ba:20:5a:
b5:c3:bd:f7:38:da:29:e5:9a:4d:b5:29:e7:16:c5:
85:34:f6:17:e0:27:68:b6:24:b4:7e:65:4e:bf:27:
38:9a:7a:64:dc:18:e9:35:f4:ea:61:27:83:cb:f8:
0f:89:5c:7c:f0:78:ba:41:7b:01:c5:07:df:f9:83:
b5:67:f6:48:05:37:80:0b:c0:21:87:e9:36:48:89:
7c:d2:66:a6:9e:84:80:78:c5:93:d5:f5:f5:58:80:
60:13:a6:88:cd:a4:f1:1d:0c:37:f8:d0:af:4b:57:
55:70:75:82:a9:11:f4:9b:bb:10:c8:ff:e1:3e:34:
f8:37:f8:70:3a:b9:fd:6a:f7:5e:9f:3e:88:6a:98:
63:82:85:1e:fd:eb:d3:b9:e1:0c:e0:ea:ca:ba:41:
1e:e0:52:d7:c6:27:2d:43:0c:cc:25:36:9d:82:3d:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:72:E0:52:5F:23:6B:2D:2C:C9:A7:FD:26:A4:14:7D:A7:80:99:ED
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pnLgUl8jay0syaf9JqQUfaeAme0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.153.0/24
83.137.158.0/23
88.151.56.0/23
88.209.198.0/24
88.209.201.0/24
88.209.216.0/24
88.209.226.0/24
88.209.228.0/24
88.209.232.0/22
88.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:42:7f:6e:06:96:bf:7f:3e:66:ea:fd:03:d1:dd:47:8f:96:
b9:b9:1b:83:ba:9e:4a:c6:be:70:3d:06:e5:65:cd:f5:31:c1:
28:de:9d:23:c9:8e:a0:a0:41:dc:0f:10:a9:63:07:55:69:29:
41:44:c8:2a:9f:70:2a:f5:a7:bf:15:4d:7d:8b:e4:47:34:18:
54:26:a4:02:ad:23:08:57:9a:a3:9b:ba:44:42:71:f7:82:07:
f1:86:ae:83:46:50:ff:d5:93:b6:75:e2:cf:e1:44:43:49:fd:
af:3f:63:71:76:14:21:d0:6b:80:e1:ec:d8:0b:ff:fd:d6:32:
0b:08:12:8f:73:53:0d:00:1c:0d:d0:ca:e9:43:d1:50:bd:6a:
e5:15:0b:ca:1b:ab:5c:64:35:40:63:c9:a4:d9:78:60:73:e7:
40:9a:3c:2d:02:e8:f8:bb:cf:92:e3:ea:ee:e6:fb:47:e0:45:
3d:55:bb:d5:5a:45:96:95:03:38:f9:89:f1:b2:2e:99:70:7a:
fb:f7:7c:b5:77:65:ab:c6:06:fb:51:e6:1b:40:52:2b:5f:3d:
87:a3:9e:f6:18:dd:5b:4d:2a:f2:0e:c5:76:e0:ab:f9:59:d3:
10:c9:3a:ba:98:35:ed:c5:7c:5e:65:ab:7f:5e:69:b3:85:9f:
ca:c5:eb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:30 2026 by rpki-client