Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/yZFDQ2r1QfFeLUyZVXNNbA_wP28.roa
File: yZFDQ2r1QfFeLUyZVXNNbA_wP28.roa (raw, json)
Hash identifier: 8kj3LqF1iVRGrMYtJSTCYp1IezJP4n7oP1W8pfH6tR0=
Subject key identifier: C9:91:43:43:6A:F5:41:F1:5E:2D:4C:99:55:73:4D:6C:0F:F0:3F:6F
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019C46AA52DC4EDF8BEB2E13CED8922F91AB
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/yZFDQ2r1QfFeLUyZVXNNbA_wP28.roa
Signing time: Tue 10 Feb 2026 08:28:13 +0000
ROA not before: Tue 10 Feb 2026 08:28:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 2.58.171.0/24 maxlen: 24
88.209.192.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:aa:52:dc:4e:df:8b:eb:2e:13:ce:d8:92:2f:91:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 10 08:28:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c99143436af541f15e2d4c9955734d6c0ff03f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6a:97:d6:bc:6e:61:4f:c1:de:ea:f2:5e:b7:
fb:09:09:ef:40:b7:b6:b9:4e:37:fb:58:fc:4e:55:
f4:39:ac:5d:44:04:23:f6:dd:8f:ba:79:5d:3d:64:
3c:ec:48:7e:36:5d:6d:19:7b:a1:d3:da:fa:4b:c6:
0a:6d:38:40:4f:dd:86:77:bd:38:f0:41:1c:ea:e4:
8b:ec:58:63:72:d4:6d:11:ee:6a:17:c3:4b:9d:8c:
68:01:5d:2d:c6:50:40:8b:d0:78:5e:75:25:9f:c9:
11:b1:c8:53:03:14:fd:77:3d:ff:5b:66:a3:d8:c2:
f0:15:09:d5:1a:8e:bc:5c:0b:40:09:71:f9:c9:14:
98:a5:c7:61:3a:0e:7c:c9:6d:60:a6:dc:42:27:a8:
2d:14:5f:3a:74:b9:50:be:34:a0:eb:0a:8d:05:27:
5c:a1:3d:bf:44:3e:30:18:61:7b:69:ae:36:11:30:
4d:ff:ec:83:6e:d8:47:31:14:7e:d6:13:35:3d:4f:
6d:a2:f1:a5:0b:08:d9:6b:d1:b7:ff:d8:35:4b:14:
b6:a1:30:10:a7:49:e5:5b:77:30:dd:30:93:80:8b:
d7:25:69:5a:98:16:9d:1a:97:af:7d:f3:72:cf:8e:
0d:e1:af:9e:ab:7d:2d:22:69:ae:10:1e:ce:d6:83:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:91:43:43:6A:F5:41:F1:5E:2D:4C:99:55:73:4D:6C:0F:F0:3F:6F
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/yZFDQ2r1QfFeLUyZVXNNbA_wP28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.171.0/24
88.209.192.0/24
88.209.222.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b0:00:eb:13:39:1e:3d:bd:c3:35:f5:1a:ec:36:fb:35:9a:
73:b0:46:38:12:30:c2:51:5e:7d:3a:81:94:8d:9f:07:15:b6:
df:23:f7:b1:f8:15:18:3f:e7:08:60:9a:53:36:0a:22:5b:92:
1b:7b:a0:9f:34:00:05:1c:3f:4f:1b:ab:3e:5b:e9:d7:57:f9:
8d:70:3e:cd:49:ae:19:ab:04:96:c8:7a:a4:9b:9d:9b:1f:b8:
9f:be:77:60:9f:e7:81:1b:55:42:ef:09:ef:f5:06:63:ca:ec:
8a:7e:9a:08:37:88:cb:a3:4a:e5:4e:ed:1f:09:2d:0c:06:1e:
9e:d1:14:12:63:8e:ab:eb:1e:4e:8f:15:53:e9:a1:a3:bb:df:
d3:14:90:29:52:ad:f2:17:d2:cd:92:2c:9d:07:88:a5:8b:c4:
76:5f:e8:b7:e1:dd:dc:4c:77:bd:1d:e3:ca:e0:e3:01:34:97:
ac:38:07:48:24:0c:83:e0:7c:d5:60:56:a4:69:83:d1:c4:e5:
b4:46:39:3f:ef:68:67:6b:fc:6d:34:69:07:96:64:75:cb:c5:
5d:1d:17:c9:b0:68:93:5f:a5:01:0e:09:c1:2d:f8:a2:d9:f6:
e1:60:56:1a:eb:b8:93:5a:94:40:a0:68:b0:c6:c8:8d:4d:eb:
2c:53:73:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:00 2026 by rpki-client