Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/CesieB_LUyO200SAh66V-9-80pc.roa
File: CesieB_LUyO200SAh66V-9-80pc.roa (raw, json)
Hash identifier: Ius3uNi59qMsm0VJAkowjdShluT36eExRoTpd81WK84=
Subject key identifier: 09:EB:22:78:1F:CB:53:23:B6:D3:44:80:87:AE:95:FB:DF:BC:D2:97
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 01A127186FCBDCFD3EC79874507DCAB54CA8
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/CesieB_LUyO200SAh66V-9-80pc.roa
Signing time: Sat 10 Oct 2026 18:34:35 +0000
ROA not before: Sat 10 Oct 2026 18:34:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208673
IP address blocks: 178.214.97.0/24 maxlen: 24
178.214.99.0/24 maxlen: 24
178.214.100.0/24 maxlen: 24
178.214.101.0/24 maxlen: 24
178.214.102.0/24 maxlen: 24
178.214.103.0/24 maxlen: 24
178.214.104.0/24 maxlen: 24
178.214.107.0/24 maxlen: 24
178.214.110.0/24 maxlen: 24
178.214.111.0/24 maxlen: 24
178.214.112.0/24 maxlen: 24
178.214.113.0/24 maxlen: 24
178.214.114.0/24 maxlen: 24
178.214.116.0/24 maxlen: 24
178.214.118.0/24 maxlen: 24
178.214.119.0/24 maxlen: 24
185.53.88.0/24 maxlen: 24
185.53.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:18:6f:cb:dc:fd:3e:c7:98:74:50:7d:ca:b5:4c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Oct 10 18:34:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09eb22781fcb5323b6d3448087ae95fbdfbcd297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:5c:06:b6:cf:e7:30:8d:1b:c7:91:11:57:
35:83:8c:ea:84:55:23:df:41:da:6f:a4:fa:34:72:
ec:15:73:50:d6:99:42:38:fa:4f:10:3b:65:ca:6e:
10:b4:59:10:ba:51:0f:b4:ab:2d:05:90:3d:33:93:
2a:ad:0a:90:c4:91:64:66:a8:88:7c:45:30:ad:04:
9f:fd:e9:d2:b5:42:8a:78:a6:5a:65:37:22:72:1b:
47:02:7f:a0:1c:5a:57:17:da:a8:20:a9:d4:ab:e9:
ec:ce:84:51:28:b9:9d:fb:07:72:9d:59:f2:98:a1:
43:1f:26:e6:f7:2e:c0:7f:aa:ff:f1:50:ca:70:94:
df:61:58:de:20:5a:bd:68:70:2d:6d:52:58:de:7d:
83:e6:94:02:36:a6:ad:fb:d3:cd:83:8a:20:0e:12:
89:f1:47:77:87:6d:d6:2f:5d:86:76:c9:a4:f7:e5:
51:e7:a4:d2:e7:ec:b2:47:7a:34:8e:05:d1:77:ab:
da:93:20:bc:24:31:46:ac:ae:b7:33:9d:e3:0a:35:
f2:31:a3:6e:a6:7b:c4:50:39:38:63:63:43:3d:63:
ed:54:c0:b3:e8:5c:d0:06:42:ce:ce:37:f6:9e:4a:
5c:d7:ab:7d:bd:95:18:d9:54:e0:33:85:00:74:4b:
f1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EB:22:78:1F:CB:53:23:B6:D3:44:80:87:AE:95:FB:DF:BC:D2:97
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/CesieB_LUyO200SAh66V-9-80pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.97.0/24
178.214.99.0-178.214.104.255
178.214.107.0/24
178.214.110.0-178.214.114.255
178.214.116.0/24
178.214.118.0/23
185.53.88.0/23
Signature Algorithm: sha256WithRSAEncryption
39:67:6a:f2:d9:7a:1a:90:18:7f:3e:fa:40:be:8a:13:53:ac:
9c:2d:11:15:48:4d:1a:95:20:6a:b7:26:4a:da:e6:dc:73:e6:
04:5b:8d:ae:32:68:71:4b:fa:64:79:b2:32:0d:4d:81:59:0b:
01:5e:8b:d3:0c:3a:07:84:9d:07:11:97:d4:54:e1:c7:29:62:
c8:58:f3:01:d6:fe:aa:93:d7:65:dd:52:44:78:e1:d3:08:d4:
c5:2a:ca:65:58:c8:07:53:84:6b:48:3a:a1:6d:1f:17:12:4e:
12:97:4c:75:c7:33:9f:79:81:5b:b9:e6:79:1d:b7:3b:bb:ce:
09:be:83:71:9b:99:7a:1f:66:ee:a9:8c:4d:00:60:7e:2f:45:
38:4f:6f:9b:c7:d1:07:21:3c:20:bb:bb:6e:34:97:f9:d5:02:
0a:13:2f:cb:52:58:aa:4b:9a:d0:d3:28:f1:86:61:df:d3:a0:
3e:c7:54:34:ca:46:63:6a:b5:9a:41:c2:f0:14:47:2a:a5:89:
be:b1:3e:e5:f3:9d:1e:89:82:2a:be:6c:50:c3:81:ac:f5:a2:
93:d6:06:8f:b8:f4:b9:2c:06:75:e3:ed:0a:05:eb:36:00:85:
fd:ed:07:46:e9:6c:4e:f8:b0:10:92:42:4f:40:28:12:04:6d:
b3:e6:cb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:43:54 2026 by rpki-client