Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/CJWICYUF8PQfPfv_l-YsbRABMGA.roa
File: CJWICYUF8PQfPfv_l-YsbRABMGA.roa (raw, json)
Hash identifier: ckHVpf/nWip1+cSgGyvEj2vXDYp/OYjzyt+VU9SRBuw=
Subject key identifier: 08:95:88:09:85:05:F0:F4:1F:3D:FB:FF:97:E6:2C:6D:10:01:30:60
Certificate issuer: /CN=b3b5a7544fbb987980a3ff1c71ebf3fb1cf6ac9e
Certificate serial: 019F23682F9F122BC9C364CCA0449370BB31
Authority key identifier: B3:B5:A7:54:4F:BB:98:79:80:A3:FF:1C:71:EB:F3:FB:1C:F6:AC:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/CJWICYUF8PQfPfv_l-YsbRABMGA.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57255
IP address blocks: 45.88.4.0/24 maxlen: 24
91.230.156.0/24 maxlen: 24
213.177.184.0/24 maxlen: 24
2a0e:f300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2f:9f:12:2b:c9:c3:64:cc:a0:44:93:70:bb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5a7544fbb987980a3ff1c71ebf3fb1cf6ac9e
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=089588098505f0f41f3dfbff97e62c6d10013060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:96:28:46:92:ec:b3:12:df:51:64:05:13:
83:0f:83:6c:bd:95:43:3c:6a:d6:f6:9f:4e:b8:4d:
f2:b0:47:f0:fc:61:37:44:bc:cb:66:3b:5e:e6:2e:
ef:6f:8b:75:dd:1a:88:b4:f8:7e:76:04:ad:af:a3:
4c:a6:16:c0:37:43:81:ea:d9:35:0f:0f:4f:7f:17:
f5:7a:6f:65:6c:63:18:73:f9:a4:de:4e:37:04:35:
58:e0:1a:31:75:8c:5b:e5:80:3e:44:de:59:bf:55:
a4:18:96:8f:37:e9:e8:2a:72:de:a7:6a:89:fa:d8:
71:a9:3e:16:12:e4:42:29:7a:5f:b0:59:11:ed:36:
a7:08:08:40:cb:22:c7:69:1b:f1:ca:41:34:62:3c:
49:c7:44:08:db:db:c4:20:dc:67:9c:9c:6f:dc:a9:
2a:2b:5b:0a:e0:62:80:b6:db:0e:bc:c2:60:4b:39:
ef:f6:7f:5d:6e:f1:76:da:94:f7:e5:8b:7b:0b:51:
b8:0e:c0:70:4f:c3:a8:42:57:18:cf:be:77:74:e2:
d7:9e:db:3b:6a:a0:55:61:ea:9e:03:f1:e9:8d:0c:
2c:92:ce:8b:22:1b:dd:bf:94:dd:f5:86:d7:21:52:
36:47:1a:58:47:2c:7b:aa:61:78:27:19:ef:26:fc:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:95:88:09:85:05:F0:F4:1F:3D:FB:FF:97:E6:2C:6D:10:01:30:60
X509v3 Authority Key Identifier:
keyid:B3:B5:A7:54:4F:BB:98:79:80:A3:FF:1C:71:EB:F3:FB:1C:F6:AC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/CJWICYUF8PQfPfv_l-YsbRABMGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.4.0/24
91.230.156.0/24
213.177.184.0/24
IPv6:
2a0e:f300::/29
Signature Algorithm: sha256WithRSAEncryption
2c:35:a8:ab:53:bc:92:69:5c:2f:c2:fe:b0:2b:09:c7:5b:a1:
aa:69:a2:98:45:02:ed:cb:75:25:3a:ee:e9:0b:05:c7:83:0d:
45:e4:17:a3:b8:08:27:6d:87:48:fc:f0:80:e3:c7:ae:77:9c:
b5:65:e0:81:11:d1:0e:35:8e:12:3b:78:47:f4:e4:65:3b:4a:
a6:20:1d:03:eb:5f:f8:37:94:0c:1b:73:ae:ce:c0:77:9f:53:
eb:11:5e:65:0d:7e:28:f9:53:7b:ec:fe:73:6a:c3:b7:96:73:
a6:e8:bb:d2:16:a7:8f:37:31:ea:ba:76:1b:34:7b:01:56:4b:
2a:3f:55:dd:b0:5e:e8:61:2a:96:a7:c3:75:ab:8e:9a:1f:a7:
05:b1:2c:a4:c2:f0:f2:5b:fa:54:ac:fe:0c:d6:79:e6:d5:08:
19:11:b5:b4:93:3d:d1:69:66:6f:04:a6:05:91:3b:59:0d:4e:
e5:6b:2f:45:34:e8:e7:6d:fe:a2:a3:e7:bd:ff:69:94:0c:d9:
f8:11:e6:17:7c:fe:22:3c:64:7a:ab:c7:86:cd:f6:24:3a:57:
a1:43:e8:9c:2e:49:f5:2e:96:40:c8:eb:3b:5f:5b:f0:01:d5:
6b:7a:95:15:9d:be:d1:5b:98:03:92:b7:eb:70:46:b3:7a:fb:
d8:28:f4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:06 2026 by rpki-client