Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/cnSZycaPAr-8qBiNQNyob6XJNdg.roa
File: cnSZycaPAr-8qBiNQNyob6XJNdg.roa (raw, json)
Hash identifier: jdaVtlV8/p/vkDmIu25w1vHpL3twefyNagXQXSpVOxc=
Subject key identifier: 72:74:99:C9:C6:8F:02:BF:BC:A8:18:8D:40:DC:A8:6F:A5:C9:35:D8
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0D33E5CA12453200BEDB1992FE8071336
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/cnSZycaPAr-8qBiNQNyob6XJNdg.roa
Signing time: Thu 24 Sep 2026 11:47:54 +0000
ROA not before: Thu 24 Sep 2026 11:47:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218587
IP address blocks: 193.17.5.0/24 maxlen: 24
193.17.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:3e:5c:a1:24:53:20:0b:ed:b1:99:2f:e8:07:13:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 24 11:47:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=727499c9c68f02bfbca8188d40dca86fa5c935d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:8c:e1:e4:49:cd:c9:50:d6:e5:1e:8e:33:
fe:bd:ce:0e:99:1e:4b:59:ed:24:71:09:6c:c6:2a:
1a:db:d1:80:51:fa:81:ec:12:9e:a5:9f:4b:fd:63:
28:4e:5a:3f:f1:d5:81:06:da:ae:ab:7a:4e:fe:2f:
05:da:87:ea:df:73:4f:2c:9c:fa:71:d4:d5:e1:dd:
b6:5c:ae:00:24:d5:c1:49:41:c9:4a:82:78:6c:c0:
08:73:2a:be:5c:1a:29:08:31:7d:0c:fd:a0:51:09:
3e:37:b3:ae:c9:24:33:b9:6d:dd:e2:77:d2:bf:a2:
0c:1c:fa:f7:f1:2d:60:ef:b3:3b:41:0b:fc:40:c8:
89:0c:3b:e0:78:03:58:aa:4a:f1:ca:02:f8:b2:71:
e2:85:4f:1d:1d:70:e5:f6:7b:73:98:d1:69:80:9b:
3b:27:08:53:c0:b2:7c:34:4c:9c:2a:35:9c:a7:40:
cd:51:20:90:85:d4:42:b8:09:1f:cc:9b:8a:75:4d:
b1:a8:a4:41:f1:62:e7:19:48:f6:85:da:7b:d7:4a:
07:6e:5e:64:1b:4f:0e:f0:04:af:32:d4:2e:ba:74:
ba:73:38:ad:ee:fa:9b:27:a7:26:e4:2d:41:84:e7:
9b:16:f5:f2:5d:19:ce:0d:35:e6:fa:e0:65:a8:2e:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:74:99:C9:C6:8F:02:BF:BC:A8:18:8D:40:DC:A8:6F:A5:C9:35:D8
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/cnSZycaPAr-8qBiNQNyob6XJNdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.5.0-193.17.6.255
Signature Algorithm: sha256WithRSAEncryption
44:75:50:32:cb:ad:0e:f7:c5:c4:37:94:33:15:cc:cf:e3:c5:
8f:ab:e3:08:49:ff:f2:75:c2:a7:e2:34:25:b0:de:56:e6:cc:
5c:34:9f:de:34:71:31:4a:e6:ae:78:5f:d6:76:91:92:28:a7:
b1:22:1e:cb:c5:95:db:0c:0d:5f:99:55:7b:da:34:48:97:96:
d6:ea:36:10:99:db:30:e5:c2:83:b4:b9:34:15:2d:13:23:ad:
b8:0f:a4:d9:17:42:5e:74:bc:b9:2b:25:ce:db:3a:c6:8d:ff:
28:0c:fb:ba:8c:0b:42:db:dd:82:00:d8:e1:fb:71:60:b2:13:
89:61:90:23:71:da:ad:0b:9a:38:a2:53:40:65:ad:dc:96:91:
c9:d9:82:ef:65:63:88:a4:22:c1:48:50:69:bb:2e:75:4f:cb:
88:79:d1:37:ec:9e:29:09:b3:26:56:18:94:64:4c:8e:ea:87:
d9:c1:d0:06:80:b5:38:1a:7c:00:4a:77:39:06:4e:65:01:5d:
9d:a5:fa:96:bb:a3:43:07:a9:c9:64:9a:1d:5c:79:91:f1:04:
b6:d3:0a:68:6c:f6:55:91:b8:ee:1c:92:7b:1f:57:45:af:f5:
7d:57:e5:af:25:9c:ed:6f:d8:6c:11:67:f7:c1:3b:e7:91:4d:
1e:b1:0d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:03:22 2026 by rpki-client