Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/x_Y_1TuF_rl9S68ZchsGWxog_GY.roa
File: x_Y_1TuF_rl9S68ZchsGWxog_GY.roa (raw, json)
Hash identifier: iN996GjlsZRB0Zufy6wcexTiscgG6jwfpD65jTbPBcA=
Subject key identifier: C7:F6:3F:D5:3B:85:FE:B9:7D:4B:AF:19:72:1B:06:5B:1A:20:FC:66
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A057606E27B446A70771EC4E7AB9B6C5B0
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/x_Y_1TuF_rl9S68ZchsGWxog_GY.roa
Signing time: Mon 31 Aug 2026 10:32:12 +0000
ROA not before: Mon 31 Aug 2026 10:32:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.144.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.154.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:60:6e:27:b4:46:a7:07:71:ec:4e:7a:b9:b6:c5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 31 10:32:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7f63fd53b85feb97d4baf19721b065b1a20fc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:f0:ad:52:2a:4e:4e:d0:57:7f:c1:7f:4d:
6f:79:5b:4e:bd:92:d4:92:ca:e9:f1:4e:b5:92:35:
8e:ad:16:3a:a3:f6:75:c0:94:bc:25:74:0b:54:f2:
f5:a4:54:99:9e:e4:60:d8:64:6b:bc:07:63:b5:3d:
6c:d4:7d:c2:ad:66:0f:1e:a4:38:db:98:54:31:cb:
db:9f:21:bc:ad:c3:a5:17:cd:88:ca:28:6b:95:42:
54:5d:9b:42:38:67:62:b3:96:06:00:a5:e5:1f:6b:
16:bd:79:01:ba:fb:65:c9:bc:28:9a:18:8d:05:b6:
b6:9e:72:f7:a1:34:57:0b:1f:30:82:8f:f6:07:40:
5f:55:f1:53:15:66:07:d1:08:a7:70:e6:71:e8:31:
b2:88:19:55:1e:75:d3:20:46:1d:a3:ba:fd:63:4d:
27:5b:38:30:3c:5c:15:de:ec:9e:43:5f:5c:e3:5b:
0f:99:88:35:28:39:ed:83:f6:19:fa:df:0b:51:80:
ee:c3:0b:8c:18:d3:e9:45:18:61:41:d0:a1:c1:d6:
76:21:d3:02:27:c1:13:cc:88:b1:9f:0e:c0:96:ba:
8e:d5:2f:f0:34:be:b6:cb:3d:e0:6a:13:a7:fd:e2:
8b:09:a4:90:ed:e1:48:fd:57:b6:48:16:73:30:3c:
98:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F6:3F:D5:3B:85:FE:B9:7D:4B:AF:19:72:1B:06:5B:1A:20:FC:66
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/x_Y_1TuF_rl9S68ZchsGWxog_GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
77.242.154.0/24
88.151.61.0-88.151.63.255
88.209.196.0/24
88.209.209.0-88.209.210.255
88.209.212.0/22
88.209.219.0/24
92.52.208.0/21
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
3f:0c:7b:f0:d1:c1:b8:5a:f3:99:1f:eb:7c:c2:89:b7:16:d7:
3a:9f:6d:9c:95:f7:86:1c:5a:07:41:1d:83:fb:d0:44:dc:57:
80:0c:e1:61:92:2c:9e:d5:81:89:3c:86:26:38:4f:7f:f6:a4:
42:8e:84:35:cd:96:3f:e1:c4:63:fb:23:88:0f:9b:e0:bb:ca:
d2:52:56:a6:2b:6c:e2:da:bf:d0:50:91:2c:2e:27:09:e9:ef:
6e:6a:0a:84:59:a6:43:e6:2c:da:62:70:57:30:95:fd:be:c4:
d4:21:61:05:23:f2:5e:82:a6:1a:24:81:d0:df:1b:12:68:b5:
9d:3d:19:1b:f6:b9:ba:b4:86:78:be:17:25:9f:fe:ba:e7:65:
2e:84:45:49:a5:8c:3f:1a:14:a1:d5:9d:65:64:3b:9f:e2:a2:
a1:12:8b:06:24:9d:0f:c8:40:e7:0b:0e:53:ba:63:d7:33:2a:
3b:cd:69:9e:ef:d3:79:20:a2:bd:fd:33:c6:88:02:f5:0c:73:
86:82:37:b8:1f:82:27:83:47:d2:07:62:97:12:bf:53:b7:60:
11:88:ca:58:8e:19:51:e3:46:ba:35:8f:7b:5a:c6:a9:57:80:
2a:48:4d:31:e5:54:6e:88:9e:0b:f3:aa:f0:33:8a:d5:7f:84:
3b:1f:27:b2
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgISAaBXYG4ntEanB3HsTnq5tsWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjYwODMxMTAzMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2Y2M2ZkNTNiODVmZWI5N2Q0YmFmMTk3MjFiMDY1YjFhMjBmYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS7wrVIqTk7QV3/Bf01veVtOvZLU
ksrp8U61kjWOrRY6o/Z1wJS8JXQLVPL1pFSZnuRg2GRrvAdjtT1s1H3CrWYPHqQ4
25hUMcvbnyG8rcOlF82IyihrlUJUXZtCOGdis5YGAKXlH2sWvXkBuvtlybwomhiN
Bba2nnL3oTRXCx8wgo/2B0BfVfFTFWYH0QincOZx6DGyiBlVHnXTIEYdo7r9Y00n
WzgwPFwV3uyeQ19c41sPmYg1KDntg/YZ+t8LUYDuwwuMGNPpRRhhQdChwdZ2IdMC
J8ETzIixnw7AlrqO1S/wNL62yz3gahOn/eKLCaSQ7eFI/Ve2SBZzMDyY9QIDAQAB
o4IClzCCApMwHQYDVR0OBBYEFMf2P9U7hf65fUuvGXIbBlsaIPxmMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEveF9ZXzFUdUZfcmw5UzY4WmNoc0dXeG9nX0dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGsBggrBgEFBQcBBwEB/wSBnDCBmTB6BAIAATB0MAwDBAAt
CakDBAItCagDBAEtDgoDBAAtWF0wDAMEBE3ykAMEAE3ylAMEAE3ylwMEAE3ymjAM
AwQAWJc9AwQGWJcAAwQAWNHEMAwDBABY0dEDBABY0dIDBAJY0dQDBABY0dsDBANc
NNADBAOy+MgDBADBin0wGwQCAAIwFQMFAyoAH0ADBQMqBfXAAwUDKgzxwDANBgkq
hkiG9w0BAQsFAAOCAQEAPwx78NHBuFrzmR/rfMKJtxbXOp9tnJX3hhxaB0Edg/vQ
RNxXgAzhYZIsntWBiTyGJjhPf/akQo6ENc2WP+HEY/sjiA+b4LvK0lJWpits4tq/
0FCRLC4nCenvbmoKhFmmQ+Ys2mJwVzCV/b7E1CFhBSPyXoKmGiSB0N8bEmi1nT0Z
G/a5urSGeL4XJZ/+uudlLoRFSaWMPxoUodWdZWQ7n+KioRKLBiSdD8hA5wsOU7pj
1zMqO81pnu/TeSCivf0zxogC9QxzhoI3uB+CJ4NH0gdilxK/U7dgEYjKWI4ZUeNG
ujWPe1rGqVeAKkhNMeVUboieC/Oq8DOK1X+EOx8nsg==
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:44 2026 by rpki-client