Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/cuwNGevfHgbpgeY_PoDPDuoemSE.roa
File: cuwNGevfHgbpgeY_PoDPDuoemSE.roa (raw, json)
Hash identifier: ADT35j/t3+/EO1eFkctm+rxX0FYrz+tEz3vIHb9jz40=
Subject key identifier: 72:EC:0D:19:EB:DF:1E:06:E9:81:E6:3F:3E:80:CF:0E:EA:1E:99:21
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A05CF3BD0F71729042549B9838408D5AB4
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/cuwNGevfHgbpgeY_PoDPDuoemSE.roa
Signing time: Tue 01 Sep 2026 12:31:12 +0000
ROA not before: Tue 01 Sep 2026 12:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 87.58.200.0/24 maxlen: 24
87.58.203.0/24 maxlen: 24
150.237.68.0/24 maxlen: 24
150.237.69.0/24 maxlen: 24
150.237.70.0/24 maxlen: 24
150.237.71.0/24 maxlen: 24
150.251.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:f3:bd:0f:71:72:90:42:54:9b:98:38:40:8d:5a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Sep 1 12:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72ec0d19ebdf1e06e981e63f3e80cf0eea1e9921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:ec:e6:95:9c:71:65:f0:d7:a9:9f:4a:f0:
6f:26:3f:df:fa:89:1f:b4:a7:01:76:59:6d:75:9a:
26:55:01:7f:9e:5f:93:18:9a:e4:a8:e3:f3:4a:f6:
29:4d:7f:9d:6f:b5:63:8e:79:41:5f:3f:15:78:c2:
35:2e:fe:b4:d8:e3:6b:83:26:9d:60:6f:0c:fe:bc:
95:30:2e:e8:2e:11:da:2b:c9:fd:0e:ff:c7:f4:6b:
61:57:52:72:94:b5:ca:2a:19:b6:4c:91:0b:3f:ce:
17:94:78:0f:cc:80:16:d7:b6:e7:ac:0d:bd:e1:37:
92:73:20:5e:d7:44:c7:5a:08:7d:1b:b5:06:f9:d1:
1b:0f:91:7c:ec:0c:9f:87:02:41:dc:0d:60:c4:91:
18:e9:4b:6f:cb:8c:51:2f:32:b0:ae:97:74:50:27:
cb:30:c7:ca:2c:cf:0a:1b:6b:79:9d:bb:02:c7:59:
3d:3b:9f:07:62:d0:be:58:b7:9c:b9:03:ba:c7:44:
ed:a4:f1:93:01:f3:85:d7:cf:13:30:b9:e5:86:84:
5b:61:a9:b3:cb:99:ac:4a:62:a4:fa:71:4d:05:34:
d6:1f:50:03:b4:f1:30:a2:c0:db:fc:0e:aa:78:85:
bb:4b:c1:0f:3c:71:d5:a9:88:b5:11:2d:0e:86:ae:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EC:0D:19:EB:DF:1E:06:E9:81:E6:3F:3E:80:CF:0E:EA:1E:99:21
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/cuwNGevfHgbpgeY_PoDPDuoemSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.200.0/24
87.58.203.0/24
150.237.68.0/22
150.251.156.0/24
Signature Algorithm: sha256WithRSAEncryption
90:4e:4f:5d:4c:0d:38:6a:f0:50:3a:e4:0a:11:98:34:af:12:
1f:97:cb:94:81:86:5d:c5:b6:81:12:b4:14:1b:88:cc:72:3c:
96:e5:7f:25:2c:f1:6f:50:71:30:63:db:cc:1a:e1:84:cd:5f:
32:65:66:91:c6:39:91:68:64:85:24:f9:b4:69:22:fa:31:6a:
29:0a:17:84:84:58:1e:31:21:59:cd:08:cb:f6:f1:a5:e2:6c:
1b:30:3d:57:23:d6:8d:1d:45:9c:f3:dc:36:d9:da:35:6c:81:
8b:7e:8d:8e:c0:06:a3:0a:fd:d7:e3:a7:ad:18:81:e2:01:2b:
d9:1c:00:83:0f:35:d9:38:c1:94:3b:95:88:fc:ba:5d:7e:b6:
d5:dc:1e:2e:71:7e:1c:79:70:70:dd:4f:39:9e:66:17:ce:67:
77:b6:64:77:7d:6d:ae:92:3f:d5:43:81:52:d8:de:e5:27:90:
18:3f:30:f1:63:6a:07:75:b7:88:c1:eb:97:ce:60:19:34:eb:
1c:3a:97:53:d6:a4:60:58:32:87:b2:c4:e0:ea:fa:6b:7e:ad:
61:2e:3f:f0:d3:2e:b9:7b:9d:83:04:62:df:8e:e8:76:61:04:
cb:76:b1:55:2e:e4:e1:e6:bc:05:a9:cd:47:85:91:ab:5f:c3:
4c:df:7d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:05 2026 by rpki-client