Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/cddCVYALDFJtBMyXzZ9UKlRUTrY.roa
File: cddCVYALDFJtBMyXzZ9UKlRUTrY.roa (raw, json)
Hash identifier: gzrPQjV17vSdcuXdvHZRVOack/k8pRc08FPRrAr0hyY=
Subject key identifier: 71:D7:42:55:80:0B:0C:52:6D:04:CC:97:CD:9F:54:2A:54:54:4E:B6
Certificate issuer: /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial: 019C4178109F64892513EB6F48A7EAFA6398
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/cddCVYALDFJtBMyXzZ9UKlRUTrY.roa
Signing time: Mon 09 Feb 2026 08:15:13 +0000
ROA not before: Mon 09 Feb 2026 08:15:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207375
IP address blocks: 31.14.182.0/24 maxlen: 24
37.156.69.0/24 maxlen: 24
37.156.70.0/24 maxlen: 24
45.81.169.0/24 maxlen: 24
84.247.44.0/23 maxlen: 25
85.204.109.0/24 maxlen: 24
86.105.24.0/24 maxlen: 24
86.105.232.0/24 maxlen: 24
86.107.186.0/23 maxlen: 23
89.32.171.0/24 maxlen: 24
89.32.240.0/21 maxlen: 21
89.33.17.0/24 maxlen: 24
89.33.30.0/24 maxlen: 24
89.33.65.0/24 maxlen: 24
89.35.34.0/24 maxlen: 24
89.35.76.0/24 maxlen: 24
89.35.88.0/24 maxlen: 24
89.35.91.0/24 maxlen: 24
89.35.163.0/24 maxlen: 24
89.35.248.0/24 maxlen: 24
89.37.40.0/24 maxlen: 24
89.46.40.0/23 maxlen: 23
89.47.176.0/23 maxlen: 23
89.47.178.0/24 maxlen: 24
89.47.180.0/23 maxlen: 23
89.47.182.0/24 maxlen: 24
93.113.72.0/21 maxlen: 21
176.223.144.0/20 maxlen: 20
188.211.172.0/22 maxlen: 22
188.212.157.0/24 maxlen: 24
188.213.86.0/23 maxlen: 23
188.240.70.0/24 maxlen: 24
193.164.216.0/23 maxlen: 23
2a00:bba0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:78:10:9f:64:89:25:13:eb:6f:48:a7:ea:fa:63:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Validity
Not Before: Feb 9 08:15:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71d74255800b0c526d04cc97cd9f542a54544eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:05:2b:34:9f:03:47:2c:94:fc:a2:83:8a:
2d:32:12:88:f5:93:e0:14:3d:1e:d7:6c:ae:3c:67:
65:2d:a1:a4:b1:7d:eb:5f:56:a6:e4:93:15:2b:0a:
9d:05:90:52:33:21:18:d9:29:33:96:90:62:e1:f1:
6d:90:35:c3:d0:17:f5:d7:40:1a:b7:29:89:b8:2a:
40:7a:4e:cb:1d:c7:ad:61:a2:27:37:85:ec:38:c2:
ee:ed:9e:ec:94:17:c2:6b:b5:d2:43:32:1d:cb:fd:
c9:d7:62:40:3c:47:8b:51:85:4d:c4:ba:f3:20:93:
99:aa:ea:15:26:69:2d:8a:43:54:12:28:d0:76:75:
61:85:d9:ea:77:e9:f6:5d:2a:6a:1a:16:c7:50:a9:
f9:bc:6b:86:8d:2c:7a:80:e3:71:ca:bf:ef:30:18:
69:67:5e:b6:c4:5e:2d:15:f8:2e:db:20:51:d3:09:
b7:64:fd:f5:dc:cc:6b:9c:56:d2:9a:67:a7:64:ed:
13:94:59:13:8f:a3:50:68:d5:71:ab:b7:bf:1f:3e:
c0:2d:a2:ef:56:23:95:e8:65:c3:48:ac:88:3f:59:
d1:4d:fa:b6:78:53:19:ac:3e:4d:a2:28:d0:47:52:
71:a5:06:64:e9:5a:d3:84:46:ff:8f:b0:f0:7c:84:
f3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D7:42:55:80:0B:0C:52:6D:04:CC:97:CD:9F:54:2A:54:54:4E:B6
X509v3 Authority Key Identifier:
keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/cddCVYALDFJtBMyXzZ9UKlRUTrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.182.0/24
37.156.69.0-37.156.70.255
45.81.169.0/24
84.247.44.0/23
85.204.109.0/24
86.105.24.0/24
86.105.232.0/24
86.107.186.0/23
89.32.171.0/24
89.32.240.0/21
89.33.17.0/24
89.33.30.0/24
89.33.65.0/24
89.35.34.0/24
89.35.76.0/24
89.35.88.0/24
89.35.91.0/24
89.35.163.0/24
89.35.248.0/24
89.37.40.0/24
89.46.40.0/23
89.47.176.0-89.47.178.255
89.47.180.0-89.47.182.255
93.113.72.0/21
176.223.144.0/20
188.211.172.0/22
188.212.157.0/24
188.213.86.0/23
188.240.70.0/24
193.164.216.0/23
IPv6:
2a00:bba0::/32
Signature Algorithm: sha256WithRSAEncryption
76:32:2c:2e:51:e3:66:43:28:ed:cd:54:de:af:56:87:df:6f:
b3:0f:32:12:f9:a7:a6:4a:0d:80:46:0f:55:a2:19:af:e9:17:
33:f9:67:0a:f2:9d:19:14:11:e9:78:30:68:53:6f:6c:79:53:
dc:2c:97:e6:f0:a9:a5:41:27:b0:fe:ac:de:20:40:ea:55:e1:
86:b3:fd:11:e6:ff:db:38:ca:c1:3a:fe:48:1c:cb:dd:1e:54:
e0:45:d1:88:89:3c:4e:f8:42:8d:95:3f:42:ec:77:7b:51:16:
ec:61:d7:08:35:87:3d:e4:03:9b:38:fb:d5:d1:4a:9b:e2:a9:
46:2f:e1:10:4a:17:84:5f:81:a7:fd:8e:32:f2:78:a9:36:23:
2a:ce:80:79:0d:6c:63:07:52:43:90:1e:6b:12:fc:c1:67:9f:
7b:f3:9a:34:df:e4:ed:57:a3:91:75:d9:98:33:62:f5:24:bf:
f2:35:c5:40:30:98:a2:48:b6:50:65:72:72:e9:88:75:3f:de:
63:b7:43:ac:8c:2a:ef:88:f1:5c:70:44:41:6b:68:21:3d:4a:
89:67:cc:76:83:d6:4e:27:7c:3f:ca:aa:d7:2c:1c:c7:a4:ad:
6b:e6:cc:1d:9f:93:6d:1d:ac:a6:8d:66:9f:c1:fa:8e:cf:f2:
50:2d:a0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:11:07 2026 by rpki-client