Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/upSbRMNnxG2ylwfUtURsJ3bxtNQ.roa
File: upSbRMNnxG2ylwfUtURsJ3bxtNQ.roa (raw, json)
Hash identifier: mky2Qs0AJCLM4nhOYK0/Rl4J20evzMeN8B/lZFydtzs=
Subject key identifier: BA:94:9B:44:C3:67:C4:6D:B2:97:07:D4:B5:44:6C:27:76:F1:B4:D4
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019D811EEABA3D1853278220E177B6AB93E1
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/upSbRMNnxG2ylwfUtURsJ3bxtNQ.roa
Signing time: Sun 12 Apr 2026 09:56:20 +0000
ROA not before: Sun 12 Apr 2026 09:56:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.182.112.0/24 maxlen: 24
77.242.146.0/23 maxlen: 24
77.242.159.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.61.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
88.209.198.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
88.209.227.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
88.209.247.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:81:1e:ea:ba:3d:18:53:27:82:20:e1:77:b6:ab:93:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 12 09:56:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba949b44c367c46db29707d4b5446c2776f1b4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:6b:44:36:86:ca:1d:c8:24:69:81:ac:5c:
06:bb:c4:98:19:ac:3e:88:91:1c:0c:de:aa:5f:88:
60:d8:f7:5a:70:c6:86:0c:a4:9e:19:d9:b4:42:a3:
b6:e6:a5:7b:d6:5e:c4:48:e6:e2:8e:0b:c8:a6:34:
f6:c8:fa:73:96:3d:0e:0e:66:ed:b1:4f:b9:c0:f0:
f4:4f:76:10:91:59:11:51:02:56:86:61:e7:8a:78:
b0:03:0a:2d:41:f6:c5:0d:ae:85:ff:7e:e1:13:96:
fe:e8:37:ed:04:8a:34:ad:64:b7:21:2d:1f:d3:c2:
9b:56:a3:d7:0c:7d:79:01:63:bb:d9:b1:74:dc:37:
dd:f5:fa:22:d6:b0:4f:c0:93:f4:0f:fe:75:9b:e1:
7b:8c:90:d5:80:13:82:66:7f:a4:6c:3e:cc:46:8e:
c5:de:86:39:dc:b7:5f:13:40:bd:6b:6b:e6:73:ba:
65:3a:da:7c:f9:66:52:02:dc:65:3e:06:f6:00:10:
a7:a7:61:17:43:d5:9d:00:3d:12:90:bd:71:3d:13:
db:0f:d4:c2:f2:23:4b:6a:4b:22:b7:1f:2d:cc:22:
f6:b8:49:ca:08:ed:04:d6:a8:09:9f:e3:5b:aa:cc:
1c:04:49:47:dd:6c:d6:35:1e:e9:b2:77:ad:27:dc:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:94:9B:44:C3:67:C4:6D:B2:97:07:D4:B5:44:6C:27:76:F1:B4:D4
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/upSbRMNnxG2ylwfUtURsJ3bxtNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
77.242.146.0/23
77.242.159.0/24
83.137.153.0/24
83.137.158.0/24
88.151.56.0/23
88.151.61.0-88.151.62.255
88.209.198.0/24
88.209.201.0/24
88.209.209.0/24
88.209.226.0/23
88.209.232.0/22
88.209.247.0/24
88.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:52:84:66:26:e4:2d:ca:cb:ec:75:b8:1d:4a:14:a6:94:f5:
13:60:3a:2c:31:14:d9:5d:9a:17:1e:5c:c4:1e:1b:c4:72:41:
12:b3:ad:4f:cf:af:6d:05:8a:7e:7c:9b:27:f6:69:53:a2:dc:
60:e8:f7:c1:c6:d1:cc:21:f7:35:25:01:ec:7a:c1:47:1b:8e:
17:56:02:45:b6:21:80:42:d3:eb:20:27:c4:c8:df:13:d6:b7:
9a:1a:c2:ab:6f:5a:11:69:d2:8e:59:a6:9a:cd:5e:87:17:16:
80:09:fc:f6:a1:e0:29:21:4f:6c:55:e9:70:c3:e4:18:07:86:
8a:94:fd:93:ab:21:5d:fa:bb:2b:0a:93:e5:96:6f:06:19:09:
ab:6c:21:a8:cc:4c:92:ea:da:2f:1e:8f:23:3b:9e:4b:ee:a0:
08:23:0c:22:22:35:70:a7:7f:77:45:5a:ec:eb:15:a1:82:ef:
bf:79:20:3b:34:4d:6b:4d:d7:10:24:d1:fc:47:fe:0f:7c:7b:
8d:3b:31:37:e4:63:d9:34:8c:da:63:17:eb:ba:a9:2c:88:14:
21:79:af:04:f0:40:e3:01:f1:3b:42:99:25:50:f4:c8:ab:a9:
20:9c:dc:19:4d:58:fc:b9:b4:ed:e7:9d:e7:80:33:23:7d:f1:
9b:fe:27:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:59 2026 by rpki-client