Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zffZXi23wkuG6xY6GDvUi3zIG08.roa
File: zffZXi23wkuG6xY6GDvUi3zIG08.roa (raw, json)
Hash identifier: x0W4kUCHJRM5TM8Lrj3Xqlyo1vAMeGkknbTLOc5XApg=
Subject key identifier: CD:F7:D9:5E:2D:B7:C2:4B:86:EB:16:3A:18:3B:D4:8B:7C:C8:1B:4F
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A075A98AC3D1A3863EC2062CF664E2BDEF
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zffZXi23wkuG6xY6GDvUi3zIG08.roa
Signing time: Sun 06 Sep 2026 07:40:40 +0000
ROA not before: Sun 06 Sep 2026 07:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.182.112.0/24 maxlen: 24
77.242.159.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
88.209.227.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
88.209.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:a9:8a:c3:d1:a3:86:3e:c2:06:2c:f6:64:e2:bd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 6 07:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdf7d95e2db7c24b86eb163a183bd48b7cc81b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:9f:d9:ca:c7:c5:3e:0a:5d:0a:48:59:e6:
7c:18:8a:79:d8:a9:1f:8c:75:e2:50:7d:e2:0a:5a:
8d:e4:67:d6:81:7a:6f:6b:3f:59:70:4f:8c:ba:ec:
b2:81:d6:a4:12:61:13:0f:05:50:25:00:3e:4b:d0:
ae:6d:0a:f2:0b:bb:03:03:3b:fd:41:cd:e3:cb:f7:
b0:1e:63:ca:bd:37:6d:dd:e3:ca:42:e3:b8:f3:37:
6c:ae:71:4f:b7:76:3a:a3:a5:96:81:11:6c:ff:55:
92:64:db:85:71:44:2c:c9:72:1f:15:9f:f1:68:23:
e2:28:7a:62:bf:b4:c2:22:e7:a0:1b:0d:d2:a4:fd:
96:22:6e:7e:c6:20:fe:a8:4e:7e:f5:99:16:c5:5a:
d7:90:96:35:84:f1:b0:9f:9b:10:61:1c:b2:84:5c:
ba:01:30:6a:56:d1:92:79:4f:9c:ce:b8:35:ba:25:
a8:51:39:9e:70:25:2f:fe:a1:2b:e6:d8:d8:3b:a3:
41:76:c9:ef:d1:9f:5c:9a:2d:d0:37:01:93:d1:67:
14:eb:8c:7a:4d:9b:3c:54:20:c8:59:33:b7:98:84:
b0:86:7e:2a:9a:62:ec:2f:79:aa:40:ab:18:76:6a:
76:41:bb:e8:df:03:ad:bd:49:eb:9e:7b:4f:95:ec:
df:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F7:D9:5E:2D:B7:C2:4B:86:EB:16:3A:18:3B:D4:8B:7C:C8:1B:4F
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zffZXi23wkuG6xY6GDvUi3zIG08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
77.242.159.0/24
83.137.153.0/24
83.137.158.0/24
88.151.56.0/23
88.209.216.0/24
88.209.226.0-88.209.228.255
88.209.232.0/22
88.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:b1:77:1b:e9:bf:01:00:0d:fc:1d:29:c5:d2:3e:79:b2:dd:
8e:d2:35:f6:2a:67:40:86:d5:7a:a2:73:1f:84:3c:26:59:da:
69:15:b0:7c:84:88:89:a4:54:99:78:78:55:ba:96:45:10:f0:
c0:10:4f:c2:71:86:b6:2a:af:65:80:f8:2d:95:6a:5c:3c:53:
40:57:c8:6c:6a:d4:f9:a9:11:ae:ab:e7:38:40:69:0f:02:f0:
8d:4c:8d:bc:9b:4b:b4:f3:e4:9d:8b:2d:60:b7:63:80:15:bf:
ee:cc:10:87:12:c6:20:61:c5:46:93:d4:33:03:05:6c:13:31:
77:ce:e8:b8:55:c0:07:dc:ca:fc:97:a0:5d:47:50:ce:76:2b:
8c:a4:b8:9d:57:d1:48:c7:77:a3:78:80:d7:3f:08:c4:e4:21:
11:b8:21:26:0c:14:c2:00:6a:8f:75:35:f2:3b:02:f4:4b:49:
99:39:dd:54:de:19:95:54:18:be:f3:83:f4:d0:45:e3:18:fa:
fc:a7:48:22:54:d4:68:c6:75:4c:b0:45:52:c4:4b:b4:ac:bb:
9a:c1:7e:5f:3b:f3:24:91:37:85:46:30:7a:d0:6b:06:70:c0:
a2:2b:66:91:4a:0a:09:c6:60:c9:b4:a4:e8:63:b5:ae:e8:cb:
bc:82:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:12:58 2026 by rpki-client