Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/cnyVAm6n-mPk7D9NoefcfJS4h-I.roa
File: cnyVAm6n-mPk7D9NoefcfJS4h-I.roa (raw, json)
Hash identifier: hg++FUgze8SJYZRhrwDxmY/icpo7b2MPk9WotmoOGz0=
Subject key identifier: 72:7C:95:02:6E:A7:FA:63:E4:EC:3F:4D:A1:E7:DC:7C:94:B8:87:E2
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01A0C4FD42A065DBFB49518B8BDE84A6E53F
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/cnyVAm6n-mPk7D9NoefcfJS4h-I.roa
Signing time: Mon 21 Sep 2026 17:22:07 +0000
ROA not before: Mon 21 Sep 2026 17:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49367
IP address blocks: 94.176.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:fd:42:a0:65:db:fb:49:51:8b:8b:de:84:a6:e5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Sep 21 17:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=727c95026ea7fa63e4ec3f4da1e7dc7c94b887e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:44:b1:89:7e:7e:a8:c3:a7:78:77:51:6d:
f9:a4:88:cc:b7:41:18:ae:c5:d3:4c:55:fb:80:b5:
d4:3d:89:54:16:87:b5:29:d5:e6:2a:ba:b9:37:14:
55:2e:b2:a4:3b:fe:8b:84:05:21:73:ee:71:bb:0e:
2b:fb:71:bc:29:d5:a0:03:23:fe:f8:a7:06:c3:a8:
3d:df:3a:a5:f6:3a:21:0f:51:3d:55:1e:89:5b:8f:
e6:f4:38:ec:62:42:c2:a3:ea:0c:a2:af:22:d6:1a:
25:01:bd:31:25:70:26:80:4c:73:7a:3f:ed:bc:77:
cb:95:00:c4:bb:b8:e1:50:d0:3f:3e:53:aa:b2:06:
db:eb:a4:e4:6b:37:da:27:29:a2:7a:8f:33:f9:6d:
a4:f6:fe:ea:89:89:47:3c:92:0b:76:0b:0b:01:ab:
16:79:5b:17:c9:32:86:43:39:18:cd:f5:9d:df:96:
0c:a4:1d:f8:e1:52:93:79:d0:b0:04:94:c0:69:14:
f3:de:91:3b:44:80:ba:ad:6c:ac:19:5f:e0:1f:04:
23:9f:6a:32:c0:ce:f4:c1:08:59:61:28:0a:c5:dd:
e8:0c:22:10:a9:96:4d:18:84:a0:93:34:11:8d:87:
83:2d:c2:6f:2c:ac:1f:68:8a:c6:e1:5b:1b:57:fb:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7C:95:02:6E:A7:FA:63:E4:EC:3F:4D:A1:E7:DC:7C:94:B8:87:E2
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/cnyVAm6n-mPk7D9NoefcfJS4h-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.108.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:ed:02:a5:8c:f7:8d:32:83:47:99:c2:fe:34:0d:7a:ef:53:
90:bc:16:e8:3a:ab:22:d4:db:d3:23:72:a8:74:ee:fe:08:6c:
4c:55:21:87:0f:d7:5f:66:7a:ee:6b:c5:c5:cb:ed:2d:1d:69:
ad:1b:87:5a:15:bb:8b:ae:30:7d:04:d4:d7:00:2c:0b:f6:c4:
c6:aa:13:5a:ab:ac:05:64:a9:f5:e3:bf:e1:b8:69:d2:d3:ec:
60:11:f1:e7:ab:cb:60:2c:81:19:8b:39:0f:77:e9:a6:b3:64:
31:26:e6:46:6f:35:98:35:de:b4:28:ed:8d:1a:44:9b:77:05:
b9:ea:90:5e:0e:bd:01:9b:15:84:50:66:9f:fa:84:5b:9d:71:
9b:ac:ae:ef:9a:e5:8e:79:67:78:7a:10:7d:f1:59:14:e0:13:
4d:2b:b8:b0:de:cf:2f:f0:64:f6:a5:6b:57:2e:dd:30:71:56:
c6:cb:0f:ef:d5:69:9c:5a:c8:d9:e2:c7:cf:d6:e3:2f:c1:bf:
76:71:30:aa:12:d4:b7:21:84:13:59:d1:3f:ca:26:9c:c4:2e:
4e:2d:05:02:62:bb:b6:b5:8b:b0:0a:dc:0c:89:96:fc:1e:5a:
c0:19:19:19:fa:97:20:09:86:df:59:c8:8c:e6:3f:87:b9:60:
fb:4e:72:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:06:36 2026 by rpki-client