Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-NsEHLx-eCVp3HdDoeVIIDfOsCY.roa
File: 1-NsEHLx-eCVp3HdDoeVIIDfOsCY.roa (raw, json)
Hash identifier: pj0S6oIRxdwKeKdRCJ8qFa3eLIG38zihiKc5Ag9MNh0=
Subject key identifier: F8:DB:04:1C:BC:7E:78:25:69:DC:77:43:A1:E5:48:20:37:CE:B0:26
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019D7B28BF0FEAACF7E4998F4CDCB423588B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-NsEHLx-eCVp3HdDoeVIIDfOsCY.roa
Signing time: Sat 11 Apr 2026 06:09:20 +0000
ROA not before: Sat 11 Apr 2026 06:09:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 5.182.114.0/24 maxlen: 24
83.137.154.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.194.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.229.0/24 maxlen: 24
88.209.232.0/24 maxlen: 24
88.209.233.0/24 maxlen: 24
88.209.234.0/24 maxlen: 24
88.209.235.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7b:28:bf:0f:ea:ac:f7:e4:99:8f:4c:dc:b4:23:58:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 11 06:09:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8db041cbc7e782569dc7743a1e5482037ceb026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:e4:9c:29:db:57:b5:71:7a:32:a2:4b:e0:
54:4a:a0:a4:b5:d0:50:07:1a:f4:89:99:05:3b:fd:
ad:60:aa:55:11:5f:4f:05:fe:77:04:3f:e4:c7:33:
75:a3:28:ad:4f:7a:75:c1:14:ee:8f:a8:72:c6:c2:
7a:2a:05:3e:77:cb:7e:69:eb:b8:4e:2a:5b:2e:f7:
4c:b7:0f:fa:1b:a0:d8:9a:7d:e0:cd:3a:17:f3:38:
f1:e4:e1:f0:56:8f:07:7a:6f:da:cc:5d:93:7e:11:
cc:f9:55:b0:cd:7c:ca:3c:41:6f:c4:f1:2c:f6:19:
81:87:c0:99:a9:e6:db:f9:aa:1f:45:ae:f4:55:52:
02:ab:85:00:59:3a:55:a4:3b:37:ec:3c:29:40:2a:
2b:7d:3f:9f:a5:af:5c:1a:9f:4c:07:a5:24:1c:e9:
8d:12:3d:30:65:23:ee:72:91:4d:e3:ac:52:3a:16:
07:3f:21:83:a8:59:9d:ca:27:d4:1b:63:20:4d:4a:
9a:ce:5c:40:6d:4a:2e:4a:19:54:e6:e0:17:84:31:
6a:15:c2:eb:b5:d8:42:29:0a:07:6d:20:80:8c:1a:
70:39:3c:a7:e9:d7:1f:bd:15:8a:8a:38:21:06:e7:
b3:90:25:44:d2:1a:c6:0f:9c:c8:c2:90:ae:b1:0e:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DB:04:1C:BC:7E:78:25:69:DC:77:43:A1:E5:48:20:37:CE:B0:26
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-NsEHLx-eCVp3HdDoeVIIDfOsCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.114.0/24
83.137.154.0/24
88.151.63.0/24
88.209.194.0/24
88.209.216.0/24
88.209.229.0/24
88.209.232.0/22
92.52.219.0/24
Signature Algorithm: sha256WithRSAEncryption
25:dd:0c:27:f5:a1:84:d6:d0:2e:da:12:91:2c:a9:ce:af:ad:
4d:56:d2:dd:eb:24:df:c5:de:89:f8:20:f2:62:53:79:95:0e:
48:d5:c0:b5:2d:0a:f3:3f:88:65:36:58:2a:bc:d3:3a:40:75:
de:14:f0:7f:cd:d6:ee:11:7b:88:3e:ae:69:00:3e:20:34:28:
0c:45:8d:d6:14:f9:ba:73:c6:fe:b5:ec:89:c4:ce:5d:6c:00:
f6:b2:fe:1b:66:ed:b5:b9:9c:2c:98:99:0a:94:bf:d2:63:d0:
c2:de:13:f5:a9:a3:63:e2:b9:29:49:34:b7:50:ce:c8:64:05:
51:ea:01:0d:ef:00:22:d8:4a:f5:94:b4:2a:8f:a8:39:f5:c6:
0b:ae:a8:96:1d:1d:cb:5b:3a:43:ce:0c:61:1e:35:e1:25:9a:
0f:db:fa:b4:bc:52:6f:31:21:a7:06:a6:b9:40:57:d7:c0:c8:
27:b8:49:c6:69:2a:f2:de:bb:84:10:ed:29:35:ef:92:6a:f4:
65:01:37:71:35:38:1f:76:7f:d8:f1:95:51:54:47:f0:7c:ac:
a0:a0:ec:92:64:e8:61:f3:32:4a:33:1a:be:46:94:7a:18:e8:
9c:49:e1:56:59:6e:8f:f7:cd:35:38:23:c8:82:a2:8e:4b:cf:
59:fb:8d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:05 2026 by rpki-client