Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mTd7XvcDuUN2DG4uSN1Xu0dl-2U.roa
File: mTd7XvcDuUN2DG4uSN1Xu0dl-2U.roa (raw, json)
Hash identifier: TDCGsKMUOaf2u45RBP43sdcfUFGQMDT4ZuJCc2A0WLo=
Subject key identifier: 99:37:7B:5E:F7:03:B9:43:76:0C:6E:2E:48:DD:57:BB:47:65:FB:65
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019D7B28BFA9DF2FA146AA5A11DAFB704F4A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mTd7XvcDuUN2DG4uSN1Xu0dl-2U.roa
Signing time: Sat 11 Apr 2026 06:09:21 +0000
ROA not before: Sat 11 Apr 2026 06:09:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 5.182.114.0/24 maxlen: 24
77.242.145.0/24 maxlen: 24
77.242.149.0/24 maxlen: 24
77.242.157.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.200.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.229.0/24 maxlen: 24
88.209.232.0/24 maxlen: 24
88.209.233.0/24 maxlen: 24
88.209.234.0/24 maxlen: 24
88.209.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7b:28:bf:a9:df:2f:a1:46:aa:5a:11:da:fb:70:4f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 11 06:09:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99377b5ef703b943760c6e2e48dd57bb4765fb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:87:9b:06:4a:a1:fc:cb:1d:bd:f0:59:52:31:
fb:81:7c:46:0b:91:3e:d4:89:40:0e:c5:a0:22:18:
a5:14:3f:3b:69:67:8f:37:a4:3d:74:e0:e3:bd:b0:
a1:eb:04:bf:da:5f:14:b1:97:63:45:49:a0:ee:c8:
3c:84:b0:79:a6:d0:b9:aa:50:74:7b:10:5f:a5:09:
a6:06:cc:4d:ee:a8:a8:43:d0:0b:38:98:05:11:d1:
a8:0f:13:03:dc:8b:d1:4d:71:bd:92:24:1a:50:3f:
36:05:c5:3b:34:02:9b:84:da:33:5f:77:ac:d0:e4:
f7:72:85:70:12:d6:d1:3b:37:99:cb:9d:56:40:d4:
f4:d9:07:4d:fa:81:4e:d8:f2:f3:f4:42:93:13:90:
0b:97:58:d5:cf:70:eb:94:d9:e1:b3:47:28:11:7a:
2e:09:28:8b:85:38:2f:7e:b3:aa:36:52:00:56:7d:
9f:19:cb:23:44:1f:c4:9d:84:bd:76:d6:b2:51:4f:
9e:13:1f:1d:b0:f6:99:3d:31:de:60:3c:70:04:c4:
bc:d8:aa:86:85:0b:59:59:5f:39:d3:6e:71:73:cc:
65:d9:78:6d:52:d7:91:30:49:d7:e3:9c:79:ea:66:
c2:e8:0c:c3:03:f5:f4:99:dd:a6:9f:5c:36:98:fe:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:37:7B:5E:F7:03:B9:43:76:0C:6E:2E:48:DD:57:BB:47:65:FB:65
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mTd7XvcDuUN2DG4uSN1Xu0dl-2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.114.0/24
77.242.145.0/24
77.242.149.0/24
77.242.157.0/24
88.151.63.0/24
88.209.200.0/24
88.209.211.0/24
88.209.220.0/24
88.209.224.0/23
88.209.229.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
50:b0:e5:d8:3a:72:c1:6f:6a:b5:a2:25:93:36:ff:a1:24:11:
ec:8c:e7:ff:a0:b0:5a:da:12:fb:0e:5b:83:e5:2f:3c:e4:67:
e4:5a:5c:17:91:c1:b9:13:24:0d:fe:ae:64:bd:57:fb:03:c4:
5e:b8:ac:49:d7:16:d7:c7:e5:f9:51:94:e8:30:75:f6:2b:90:
8c:97:f8:06:85:e3:98:8b:30:6c:16:a3:1b:5e:08:23:c7:a1:
24:db:cd:99:df:81:bf:9d:d7:28:93:1d:3a:d2:77:86:11:ba:
c8:9d:2e:2d:76:bf:2c:12:3f:53:ca:79:1e:71:f2:b8:96:34:
e3:d3:69:bc:ac:ec:e3:76:2a:35:6c:8d:cd:f8:33:8c:c0:d5:
db:37:18:bd:58:2c:4e:3d:ef:1f:b9:2a:3c:e4:9b:ed:5e:4a:
1a:4b:40:17:b5:dd:c1:96:dd:3b:b4:64:44:cc:c7:1d:84:d7:
d8:d8:dd:1a:7f:f3:f8:69:2f:bb:24:03:fa:f6:62:e3:02:02:
f7:26:16:cf:71:06:70:92:13:da:a4:a3:43:80:2d:a4:a8:a0:
5c:6e:32:2b:78:1f:1b:7c:68:c5:39:9e:e6:2d:4d:8e:29:1b:
c4:38:a0:20:ae:f6:76:b2:c0:7e:5e:cf:77:ca:27:07:f0:8c:
69:b4:45:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:42 2026 by rpki-client