Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tUODhl9BHob7C8bkCdeYc_Pg5BQ.roa
File: tUODhl9BHob7C8bkCdeYc_Pg5BQ.roa (raw, json)
Hash identifier: gDjAS+mz8+AorNq75Vb1x8jNLGPvVGSU1qMuAh09Nno=
Subject key identifier: B5:43:83:86:5F:41:1E:86:FB:0B:C6:E4:09:D7:98:73:F3:E0:E4:14
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019D7B28BDF5E70241816432FD79A1F747DD
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tUODhl9BHob7C8bkCdeYc_Pg5BQ.roa
Signing time: Sat 11 Apr 2026 06:09:20 +0000
ROA not before: Sat 11 Apr 2026 06:09:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 5.182.114.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7b:28:bd:f5:e7:02:41:81:64:32:fd:79:a1:f7:47:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 11 06:09:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b54383865f411e86fb0bc6e409d79873f3e0e414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:4a:ba:f0:d2:13:43:6c:71:34:07:78:ee:
97:cc:a6:ea:dd:a4:6b:90:b9:14:18:a2:44:a4:25:
cb:90:15:9c:cf:82:7c:43:78:e6:66:cd:99:e5:a3:
e1:31:da:76:79:4c:3f:99:8f:a5:79:df:4c:04:36:
22:41:e6:7e:4c:84:2a:f4:a9:8b:9e:d5:7f:f2:b4:
6f:5e:d5:6b:b1:8d:a0:39:17:47:f1:b5:14:fb:66:
c2:25:e5:b1:25:98:bd:f6:42:7b:db:c6:9d:40:bc:
63:be:44:b2:20:21:18:29:af:c3:b1:ab:0e:b1:69:
cb:ac:22:3a:0b:e2:30:34:9b:78:16:56:02:aa:f8:
a5:89:2d:d7:09:4d:54:a7:d8:4b:d7:2d:8d:ea:f8:
47:e7:2e:f0:c4:f5:bc:af:5f:62:6d:1e:50:91:33:
7a:4f:ea:30:2f:24:81:a2:ba:95:ae:d2:9e:08:69:
ee:61:96:fb:30:7f:e6:8c:a7:fb:17:b8:7a:30:4c:
1a:4d:23:d0:bb:02:5f:cb:44:90:ca:69:0a:61:69:
9c:5e:44:4f:70:3c:27:00:cb:90:0c:46:2c:3f:d2:
a3:e4:8c:00:29:6f:8b:da:cc:28:91:a3:34:1a:22:
19:0b:b0:74:82:c4:83:5c:b0:25:f4:54:f1:37:44:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:43:83:86:5F:41:1E:86:FB:0B:C6:E4:09:D7:98:73:F3:E0:E4:14
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tUODhl9BHob7C8bkCdeYc_Pg5BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.114.0/24
88.151.63.0/24
88.209.221.0/24
88.209.240.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:c5:98:25:85:49:68:ed:0b:ee:e2:45:ab:85:76:84:7c:9d:
98:a5:55:8f:a2:a3:df:af:da:5b:06:7c:c9:af:fb:c4:26:da:
f6:15:a6:29:ad:cd:15:85:58:71:44:e4:c2:3c:0e:86:34:b5:
ec:da:9c:cc:ad:5b:99:c2:1c:e4:60:00:5a:30:7d:a6:8d:e1:
db:87:f7:b7:55:1a:b0:63:da:ab:6f:2a:3e:4a:d4:02:68:b3:
81:61:2e:3b:ed:a4:e3:4b:0f:ae:94:31:0e:7e:d3:f1:03:5e:
36:57:d2:fd:31:61:d8:e1:3a:c8:89:f9:77:cb:b6:cb:a7:1f:
48:10:3f:1d:fe:07:7f:75:e7:6d:80:5f:55:6c:f3:44:0a:2d:
fd:d7:60:95:a4:59:67:c3:57:51:d8:cb:2f:05:6b:22:ca:20:
7e:f1:65:fb:20:e7:45:19:96:e3:89:f4:ac:d3:e5:2e:8a:7d:
35:d7:e6:90:30:dc:f0:df:1a:bd:52:80:d7:eb:c9:67:39:23:
bb:d8:db:b1:8b:aa:b5:db:1e:e9:f2:2b:a4:6b:8e:76:a9:fa:
25:1b:9d:9a:64:24:78:c1:71:c3:5b:4f:39:5a:42:a9:f4:e5:
9e:12:f9:5f:07:68:b2:e1:3d:ac:ee:95:80:f9:bf:e4:27:ff:
c3:de:22:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:37:56 2026 by rpki-client