Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/cuYS1DC8TtaNi4Tj3Goy1LKQlsA.roa
File: cuYS1DC8TtaNi4Tj3Goy1LKQlsA.roa (raw, json)
Hash identifier: 3er8GQLb1qpl051EJHCa5wcRDIhDTq902liKuNe3ILw=
Subject key identifier: 72:E6:12:D4:30:BC:4E:D6:8D:8B:84:E3:DC:6A:32:D4:B2:90:96:C0
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 01A1ADCAAF7DE438CD4FC8EF820538D12875
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/cuYS1DC8TtaNi4Tj3Goy1LKQlsA.roa
Signing time: Thu 05 Nov 2026 22:18:23 +0000
ROA not before: Thu 05 Nov 2026 22:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201667
IP address blocks: 194.61.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ad:ca:af:7d:e4:38:cd:4f:c8:ef:82:05:38:d1:28:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Nov 5 22:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72e612d430bc4ed68d8b84e3dc6a32d4b29096c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:51:38:cd:90:42:f9:87:f5:d4:05:5d:4b:
5d:cc:0e:e2:aa:42:70:a3:78:1f:ef:36:a4:fd:5e:
3e:6a:8b:a2:40:12:65:9c:2c:42:d2:e6:1e:d3:ae:
60:22:e4:ac:2c:0e:09:00:34:c0:c5:39:5e:44:25:
cf:8c:25:e9:80:53:59:ed:27:93:a7:0f:fd:c2:a1:
e8:ec:f9:5f:1e:81:43:90:98:ac:c8:6d:88:a1:e8:
e3:27:46:bd:c2:69:35:3a:ff:1d:bc:e8:77:38:2c:
1f:08:2c:4a:5f:89:07:8b:fc:12:65:18:b0:4b:c4:
c1:6b:fe:db:f3:45:98:ee:ca:9c:eb:75:00:03:3e:
c4:75:e5:ed:1a:dd:ac:6a:a6:63:97:d2:a6:13:2a:
48:40:98:0a:6d:0f:28:a1:e9:3f:c9:60:7d:94:e7:
4e:14:79:c8:56:80:56:c6:b9:68:39:a9:af:51:47:
d7:42:3d:10:32:9f:82:4a:b0:35:12:4a:1a:bd:a8:
54:d4:40:fc:97:81:3c:17:7d:7c:b7:a4:99:91:f4:
4a:0b:2a:40:5e:86:bc:17:5e:96:7c:ad:5d:61:10:
f5:11:72:62:b1:02:23:08:bd:c0:c1:12:67:6d:c2:
2f:f2:65:a8:35:cd:88:ed:71:aa:5a:11:04:49:7a:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E6:12:D4:30:BC:4E:D6:8D:8B:84:E3:DC:6A:32:D4:B2:90:96:C0
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/cuYS1DC8TtaNi4Tj3Goy1LKQlsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.239.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:09:91:9d:db:04:78:6c:61:b4:e8:03:71:29:67:f0:1a:d0:
c6:5b:8e:fd:8b:dc:0e:a3:1f:40:0d:a3:66:85:cf:d9:15:c8:
21:58:5d:70:ec:1a:95:06:d8:87:4b:eb:23:58:e2:d5:a7:3c:
1e:b2:d1:7d:7d:b4:3c:c4:b3:da:5a:03:66:4f:65:bc:ba:ec:
ad:62:37:7c:89:0f:5b:bd:4f:43:99:e2:37:4b:13:52:8d:e9:
4d:16:32:f0:96:14:cb:61:22:4f:f6:44:d8:dc:9e:63:d2:c6:
1a:26:de:46:e0:1d:e5:0c:df:55:67:fe:af:7b:06:42:c3:78:
2e:92:d9:c4:e9:86:66:0a:69:15:82:ff:a2:2f:7b:73:34:55:
a7:af:66:dd:f7:28:0b:06:fd:37:2c:36:ce:18:0c:63:c3:75:
3c:13:f6:cf:1f:ff:53:a7:da:16:f2:59:eb:62:f3:24:f1:41:
3d:70:00:11:5d:41:3f:49:61:4e:53:d6:f2:0b:d6:b0:0f:e4:
e1:eb:9b:02:a9:c5:2d:b8:36:55:45:a9:00:77:a3:53:b1:c5:
d2:75:9d:8b:c2:ac:85:e5:c3:47:ba:03:f9:79:51:2f:0c:51:
bd:e9:c6:98:7f:16:ae:16:28:ed:11:2b:88:8b:bf:71:20:dc:
d7:0e:cb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:49 2026 by rpki-client