Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/Cp9szG8ZiUmehxIxFtxHs6_E6Pk.roa
File: Cp9szG8ZiUmehxIxFtxHs6_E6Pk.roa (raw, json)
Hash identifier: kSkecPG1pI9smWNol14Zb1L2v9Bc+8lRVfBtFoCklw8=
Subject key identifier: 0A:9F:6C:CC:6F:19:89:49:9E:87:12:31:16:DC:47:B3:AF:C4:E8:F9
Certificate issuer: /CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Certificate serial: 019F2368D918EE8ED21BCC155A00A66512C4
Authority key identifier: 15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/Cp9szG8ZiUmehxIxFtxHs6_E6Pk.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51557
IP address blocks: 93.89.224.0/20 maxlen: 20
185.33.232.0/22 maxlen: 22
185.111.232.0/23 maxlen: 23
185.111.234.0/24 maxlen: 24
185.111.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d9:18:ee:8e:d2:1b:cc:15:5a:00:a6:65:12:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a9f6ccc6f1989499e87123116dc47b3afc4e8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7b:a3:9d:8f:67:ea:9f:d3:14:bb:57:a5:04:
ae:03:f3:86:13:85:6e:00:4c:1c:bd:14:42:9c:32:
29:3b:81:55:27:95:de:85:12:34:2c:ce:ab:97:4e:
93:e4:67:12:d9:15:67:4e:81:10:03:ad:c8:f9:55:
9e:36:a0:f6:e8:c7:50:5b:5f:2d:7c:48:67:80:91:
74:3e:7d:ce:ce:20:ca:a7:9c:a9:26:32:dd:55:ce:
f2:82:7b:4c:a6:7b:34:58:0a:c3:13:d0:64:0b:86:
5f:41:f9:91:38:6c:50:01:b5:50:7c:a9:b0:5d:f4:
f8:65:f1:63:48:83:e9:78:da:27:42:1f:66:5e:76:
86:b6:f2:9d:85:c7:97:2a:a3:8e:9a:75:bc:1c:16:
44:d7:83:e8:ee:7e:34:13:32:26:25:ee:9f:a1:a6:
11:da:6b:2b:27:ed:f4:61:e4:9d:47:05:c0:53:99:
af:87:e7:c1:f5:0f:b2:79:cf:cf:7f:76:2f:11:0e:
41:4e:a0:89:13:02:bf:45:4a:4f:df:28:3d:b6:cb:
71:f6:13:78:50:06:15:8f:ba:7f:43:0c:d1:d6:98:
be:ba:0a:27:e8:5e:63:94:04:e4:76:ab:f5:fc:13:
5b:94:7a:5f:6b:2f:7f:8c:7e:b7:49:00:48:2b:89:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9F:6C:CC:6F:19:89:49:9E:87:12:31:16:DC:47:B3:AF:C4:E8:F9
X509v3 Authority Key Identifier:
keyid:15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/Cp9szG8ZiUmehxIxFtxHs6_E6Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.224.0/20
185.33.232.0/22
185.111.232.0/22
Signature Algorithm: sha256WithRSAEncryption
33:45:dd:0c:47:89:17:55:2b:f6:fa:9e:8f:99:57:07:ea:03:
e8:d4:50:8b:e8:0f:a8:86:3f:fc:23:77:7c:0d:c7:e0:cc:ca:
4b:ec:88:bc:99:2f:f8:fd:f5:a1:71:e1:95:07:cd:40:e2:c1:
a3:6a:d9:ad:79:7e:be:63:b3:80:30:99:f3:4e:cc:20:9f:06:
6e:b1:49:50:e1:1b:1b:b9:f3:0e:40:5d:d5:24:d8:2c:38:e1:
69:56:eb:a7:68:f1:bc:a7:c5:f9:47:72:e1:5b:89:9e:1d:79:
1f:ed:cc:62:84:01:c4:a7:66:b9:3a:62:a4:74:6c:fd:3a:23:
f5:99:a6:30:52:d2:d3:dc:1a:b3:86:e8:0a:b5:1b:93:2a:a5:
28:52:85:94:3d:b2:ac:34:c5:dc:6c:5d:11:c2:c1:9b:79:0a:
83:47:17:35:cb:d1:24:5d:ff:24:b4:05:8a:a6:8c:76:cf:d5:
57:ca:dd:34:f0:cc:a4:15:f0:87:2c:64:93:b0:fe:a4:8d:56:
34:99:3e:9d:86:ff:5e:ba:c2:be:d4:0d:e4:2b:fd:16:52:e2:
54:83:97:a3:39:3d:04:ee:b6:6f:3a:c4:5e:ee:37:7e:56:17:
58:62:b9:a6:e5:ca:66:22:b6:11:6d:c4:05:56:d2:2e:68:50:
ac:5c:a4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:40:42 2026 by rpki-client