Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/cIxKBh6oU9S_NcB8Ln8qgQPRqMc.roa
File: cIxKBh6oU9S_NcB8Ln8qgQPRqMc.roa (raw, json)
Hash identifier: qT7a6QcaDtE4QIrrmB5EqTQOJdhXraa8fLtpECGlH+U=
Subject key identifier: 70:8C:4A:06:1E:A8:53:D4:BF:35:C0:7C:2E:7F:2A:81:03:D1:A8:C7
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 019F859221AE261160F45ACA29BAB6FCE7F0
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/cIxKBh6oU9S_NcB8Ln8qgQPRqMc.roa
Signing time: Tue 21 Jul 2026 16:46:14 +0000
ROA not before: Tue 21 Jul 2026 16:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216031
IP address blocks: 91.211.162.0/23 maxlen: 24
194.49.111.0/24 maxlen: 24
194.49.115.0/24 maxlen: 24
194.49.116.0/24 maxlen: 24
194.50.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:92:21:ae:26:11:60:f4:5a:ca:29:ba:b6:fc:e7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Jul 21 16:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=708c4a061ea853d4bf35c07c2e7f2a8103d1a8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:0e:00:75:6d:fb:4c:45:d3:a4:2d:21:3b:
1d:2c:48:8e:66:09:3b:c1:18:07:01:5d:8a:90:84:
36:7e:07:7c:41:b9:09:6c:40:0d:f2:5b:4c:46:df:
1e:6b:30:3c:67:cf:8c:41:db:72:f4:33:00:d1:47:
5e:92:a3:df:f6:a1:c8:53:6d:29:b0:9b:71:8b:9d:
9e:ce:98:55:69:ce:00:7b:49:b4:3b:3e:b7:ba:46:
65:c4:f6:47:fb:fa:6f:ff:61:a8:e3:ef:71:f5:6c:
e2:73:73:84:53:c5:fe:9b:06:e2:eb:1a:23:64:22:
18:e5:0c:01:1c:80:ad:9d:fa:8e:1e:e2:7b:2e:43:
54:53:aa:67:6e:ae:9d:35:e2:e5:80:01:84:99:81:
10:98:9e:24:df:8d:05:db:74:56:82:54:ec:fe:85:
cb:5e:8d:e0:bc:4c:e4:7c:1d:2e:90:2d:23:29:4e:
80:43:82:cf:f1:e3:a2:53:72:05:a9:5c:4d:6f:19:
7f:28:76:09:73:a2:da:00:14:29:ac:8a:81:04:d9:
c7:46:f1:f4:7e:aa:7c:5b:7e:4d:e9:6b:84:1e:44:
04:a1:1e:c5:e3:90:c2:a8:aa:b4:9a:96:e3:c6:d2:
30:38:19:33:b5:0d:5e:cc:26:e6:06:52:1c:cf:ef:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8C:4A:06:1E:A8:53:D4:BF:35:C0:7C:2E:7F:2A:81:03:D1:A8:C7
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/cIxKBh6oU9S_NcB8Ln8qgQPRqMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.162.0/23
194.49.111.0/24
194.49.115.0-194.49.116.255
194.50.3.0/24
Signature Algorithm: sha256WithRSAEncryption
60:76:e2:b7:6b:f1:7e:bb:08:42:db:4d:c1:74:5f:62:5e:0f:
c9:69:ce:71:22:f1:d5:e9:af:ca:b1:4e:95:b8:da:d6:0c:fc:
44:a6:39:37:f2:95:18:95:f3:d8:1d:1b:64:40:7c:1c:c6:dd:
6a:16:6f:1d:52:1e:39:f9:42:50:65:b0:2f:c9:9f:f9:be:86:
ea:e2:59:ce:70:91:df:12:5d:42:e8:92:5c:06:17:19:76:2b:
d3:82:7a:d3:ea:2e:69:bc:b1:58:b6:13:c2:e5:ce:73:a4:78:
5e:b7:6f:2a:7c:01:46:a5:29:1d:ec:21:93:66:f2:a9:7a:20:
85:04:7c:01:7a:85:49:c7:86:27:a9:d6:b2:fe:c4:2a:4b:22:
ae:5b:29:e4:29:91:60:ca:9f:3a:0b:f4:89:ed:23:a9:50:21:
ca:a3:6f:05:71:2d:10:ff:1a:fd:33:a6:93:64:10:b1:d6:51:
15:e9:73:ff:22:6a:c5:ac:d1:3c:e5:09:ed:9b:05:5e:e0:8e:
16:e7:9b:3f:96:ab:86:ba:1c:de:eb:20:c4:4d:78:6d:3d:f2:
5f:3c:52:e1:c7:47:15:fb:5c:db:7e:0b:8b:7b:be:7a:0b:20:
91:90:2c:4b:27:ae:fa:a7:11:54:b9:e0:9f:c8:0c:c2:1d:1b:
6d:35:eb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:59:10 2026 by rpki-client