Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/CPP_xRW2A0WJfAuBSIiZNh9s2jk.roa
File: CPP_xRW2A0WJfAuBSIiZNh9s2jk.roa (raw, json)
Hash identifier: RoRRyMaN6wn3ECV69tj01wk77kgumZZwueyOHn8JloA=
Subject key identifier: 08:F3:FF:C5:15:B6:03:45:89:7C:0B:81:48:88:99:36:1F:6C:DA:39
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01A0A941C0AB978CB96B57AE237F837E8B0E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/CPP_xRW2A0WJfAuBSIiZNh9s2jk.roa
Signing time: Wed 16 Sep 2026 08:07:33 +0000
ROA not before: Wed 16 Sep 2026 08:07:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.152.0/22 maxlen: 24
77.47.210.0/24 maxlen: 24
77.47.211.0/24 maxlen: 24
77.47.242.0/24 maxlen: 24
77.47.248.0/24 maxlen: 24
77.47.249.0/24 maxlen: 24
77.47.252.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
185.143.57.0/24 maxlen: 24
195.178.128.0/22 maxlen: 24
195.178.128.0/24 maxlen: 24
195.178.129.0/24 maxlen: 24
195.178.132.0/22 maxlen: 24
195.178.136.0/24 maxlen: 24
195.178.139.0/24 maxlen: 24
195.178.143.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.148.0/24 maxlen: 24
195.178.149.0/24 maxlen: 24
195.178.154.0/24 maxlen: 24
195.178.156.0/24 maxlen: 24
212.111.194.0/24 maxlen: 24
212.111.200.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.215.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:41:c0:ab:97:8c:b9:6b:57:ae:23:7f:83:7e:8b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 16 08:07:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08f3ffc515b60345897c0b81488899361f6cda39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:46:54:54:a2:61:da:76:56:2d:56:b2:c0:
8f:23:61:d4:c2:88:ca:63:36:e8:83:aa:01:43:6f:
c6:9a:98:8a:7a:58:9b:db:40:eb:4d:40:a0:ee:00:
b5:7a:1d:77:0b:79:ad:10:50:8f:19:3d:f6:f4:9c:
23:6e:a1:14:71:72:db:28:db:62:30:01:f9:4b:68:
07:7b:40:f4:a7:65:c2:2e:c9:52:00:0f:22:9c:fc:
cd:6d:f5:1d:33:7e:f6:ab:0e:33:2d:ac:19:c0:fb:
11:31:cc:a0:02:a5:96:e6:31:98:2e:a2:73:8b:9a:
ef:8b:3e:ad:6b:4e:38:35:b9:f6:26:69:6c:cb:0a:
27:cd:3c:f3:08:76:f7:5a:a1:8c:cb:57:48:3e:46:
78:81:a2:65:90:28:31:3c:1a:b3:0d:cf:83:dc:6f:
29:63:98:cd:52:8e:4a:7c:44:b6:f5:e3:b5:68:f7:
b9:90:96:d4:83:dd:d8:6d:36:b1:92:16:93:5b:43:
7d:fe:58:ee:26:5b:37:cd:b9:6d:df:36:f5:f5:53:
ab:93:a8:50:ba:6e:b9:22:bf:38:92:60:ce:26:7d:
36:f6:78:2b:58:02:f3:e1:b1:77:87:de:51:c1:04:
16:bd:13:23:81:fc:58:3a:9c:46:35:0c:83:f4:7e:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F3:FF:C5:15:B6:03:45:89:7C:0B:81:48:88:99:36:1F:6C:DA:39
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/CPP_xRW2A0WJfAuBSIiZNh9s2jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
77.47.210.0/23
77.47.242.0/24
77.47.248.0/23
77.47.252.0/22
185.143.56.0/22
195.178.128.0-195.178.136.255
195.178.139.0/24
195.178.143.0-195.178.149.255
195.178.154.0/24
195.178.156.0/24
212.111.194.0/24
212.111.200.0/24
212.111.207.0/24
212.111.215.0-212.111.217.255
Signature Algorithm: sha256WithRSAEncryption
30:c7:09:09:16:b6:59:fc:c1:0e:97:0d:d3:f7:1e:74:d1:86:
8b:98:3e:44:dd:61:f2:c1:80:56:85:32:6c:06:61:64:18:23:
98:94:a2:bf:02:9e:09:d8:db:84:a5:eb:a8:9b:7c:36:f8:03:
ba:ae:a4:1c:ee:90:1f:b6:38:57:e4:a1:bb:79:f2:eb:0d:3e:
98:24:ec:74:31:85:ef:62:bf:60:92:60:3b:6c:6a:2e:42:53:
ce:82:54:46:60:9b:6d:7d:12:0d:bb:1c:3b:b2:9f:b5:0d:08:
e9:e4:12:9a:36:28:0d:22:18:06:11:8a:13:98:7e:bb:cf:89:
3c:ad:4f:f5:a1:58:40:68:cf:c0:40:2a:4c:dd:55:b7:43:50:
b7:06:aa:d0:04:ca:2d:33:62:8b:fd:9b:2c:d9:e6:03:12:72:
c0:e8:dd:f4:5d:44:69:f7:43:5b:5e:b2:cc:a9:0f:79:0a:ce:
b2:67:dc:19:8c:be:e9:ec:c1:8c:87:fa:9f:fc:1e:2b:9d:a4:
d3:92:57:b7:c1:60:6c:a1:29:27:ab:83:b3:18:77:b1:37:3f:
86:c9:01:36:cd:cd:50:22:f6:b2:e5:17:39:4c:36:0d:8a:97:
89:55:aa:f0:3f:fa:95:c8:5b:41:04:4e:f0:c6:d8:cb:ec:2e:
61:74:f0:9c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:48:52 2026 by rpki-client