Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/IcVzu3lVvO4droOgJkbiBM6JBzc.roa
File: IcVzu3lVvO4droOgJkbiBM6JBzc.roa (raw, json)
Hash identifier: 1gfPsVTMi+WkfIi6RmrznildXFEPyv0nT+/coDMKDEw=
Subject key identifier: 21:C5:73:BB:79:55:BC:EE:1D:AE:83:A0:26:46:E2:04:CE:89:07:37
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019EA65C586FE4EE5D0DB4ABD1791453A33E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/IcVzu3lVvO4droOgJkbiBM6JBzc.roa
Signing time: Mon 08 Jun 2026 08:32:10 +0000
ROA not before: Mon 08 Jun 2026 08:32:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.242.146.0/23 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:5c:58:6f:e4:ee:5d:0d:b4:ab:d1:79:14:53:a3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 8 08:32:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21c573bb7955bcee1dae83a02646e204ce890737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:4b:63:bb:96:2f:98:d1:71:35:2e:c2:97:
11:69:a7:b1:d1:2f:f8:26:4c:14:56:8f:ab:af:36:
50:10:5e:02:5d:b3:06:53:aa:ef:ba:6e:23:76:c8:
cd:c3:4a:0b:9b:6b:83:42:09:4e:34:8b:8a:78:f6:
0e:f7:da:a1:aa:0b:56:82:9e:80:86:64:0f:35:77:
41:5e:e4:13:b6:24:46:98:0a:2c:24:c9:63:42:5a:
78:cf:88:ef:18:d6:9a:4d:2c:7d:9f:8f:01:97:71:
34:4c:f7:ea:26:8e:e5:18:02:ca:89:8d:63:96:e3:
f3:7a:61:73:fc:cd:a4:c3:d0:e7:09:f3:10:3c:dc:
a8:28:37:28:cb:33:0d:d4:0c:f9:a0:44:ff:ac:f7:
aa:5a:59:33:71:db:42:77:c0:66:f0:1f:ff:a6:2e:
ce:40:1c:79:31:3e:af:79:98:87:92:cd:64:7e:ef:
be:7a:89:82:42:85:1e:74:f1:fb:ee:a4:bc:41:c7:
43:d0:1d:6d:05:0b:cb:02:f2:d3:72:a1:1a:83:9e:
20:e6:5a:cb:f5:a8:31:ac:6e:73:1b:c1:e7:82:0d:
c1:f4:ac:49:3c:d4:a5:0f:ce:82:ab:5a:cd:0d:2d:
ad:82:5c:02:af:1d:c4:b3:f5:ac:34:9b:63:cc:6c:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C5:73:BB:79:55:BC:EE:1D:AE:83:A0:26:46:E2:04:CE:89:07:37
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/IcVzu3lVvO4droOgJkbiBM6JBzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.146.0/23
88.151.56.0/23
88.209.201.0/24
88.209.216.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:38:51:22:31:ed:5f:9c:d1:3d:e8:d4:3f:b5:31:e5:49:e2:
a7:d1:1e:e8:16:98:ea:71:88:ac:8b:7c:b6:32:ab:fa:7b:f0:
05:b8:66:99:93:95:3b:9c:af:cf:32:36:ec:38:f9:f7:ba:c7:
02:b1:9d:ed:a1:3c:a4:09:89:0a:41:46:01:08:01:4e:67:5b:
f4:08:39:01:1d:be:0b:1b:ab:98:4f:6d:d5:a1:b1:23:03:8c:
5f:1a:79:54:7e:91:45:7c:40:a6:65:30:ba:ab:b3:87:ec:ad:
55:6e:7b:df:6e:0f:83:dd:e1:ca:84:c7:54:82:bc:bb:2a:3c:
70:0c:b7:0e:80:b4:20:ab:ae:60:a1:53:5f:b4:a1:44:73:63:
51:22:1b:38:ea:63:4d:be:27:59:72:ae:43:07:8d:e6:81:32:
b3:02:52:dd:ee:74:4b:f7:b0:40:00:fb:9c:14:bd:67:4e:ab:
92:ca:5b:ba:ec:00:65:7e:c0:82:3d:55:3a:ae:95:ab:28:7b:
ad:16:5c:45:5d:ad:df:fd:83:25:c6:c6:19:ed:cb:d7:2e:17:
3c:ff:13:30:a8:0a:6d:d8:de:19:58:a2:a4:96:73:9e:23:72:
f6:7e:a4:7a:27:df:02:17:17:38:85:72:30:b1:e9:e3:de:f6:
4f:0f:a6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:27 2026 by rpki-client