Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/CUqZc8hec0Ms-egOcTLYoCv3kIM.roa
File: CUqZc8hec0Ms-egOcTLYoCv3kIM.roa (raw, json)
Hash identifier: ZlTiAUnMG4BkW/1TEjOoZRHb8X1Pe28FH9YpKcWqV/8=
Subject key identifier: 09:4A:99:73:C8:5E:73:43:2C:F9:E8:0E:71:32:D8:A0:2B:F7:90:83
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 019DCB6FACA24E6307CFDD8C6F8B59ED8A44
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/CUqZc8hec0Ms-egOcTLYoCv3kIM.roa
Signing time: Sun 26 Apr 2026 20:16:26 +0000
ROA not before: Sun 26 Apr 2026 20:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203323
IP address blocks: 2.58.58.0/24 maxlen: 24
2a09:e244:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cb:6f:ac:a2:4e:63:07:cf:dd:8c:6f:8b:59:ed:8a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Apr 26 20:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=094a9973c85e73432cf9e80e7132d8a02bf79083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:76:38:43:13:47:75:e3:2a:0b:f4:f0:04:
e2:34:cd:ce:6d:2f:68:75:5c:90:e7:c2:01:cb:35:
82:df:98:eb:87:16:3a:ab:58:b0:f7:af:66:24:0d:
6e:97:c8:a5:e3:d7:30:a8:77:16:fe:dc:8a:5b:36:
22:6b:1f:22:92:d1:cf:9b:5b:fc:30:29:34:a3:3c:
52:46:49:b7:14:61:5a:b6:d4:bd:84:da:15:98:8e:
1b:4e:c4:23:2f:20:49:9d:7d:29:fa:6a:6b:cd:48:
5b:a8:c3:73:49:77:37:3d:e0:26:0c:34:78:06:5d:
60:b0:26:72:bf:83:57:e2:45:e0:58:e6:44:7e:1a:
4e:de:d2:e8:a0:4f:f7:26:8e:f0:b9:32:39:54:54:
b9:c3:ba:97:50:cd:af:cb:21:b7:21:c9:50:95:d4:
94:fc:9c:98:b9:76:15:e4:37:79:59:44:c7:bd:51:
51:90:69:86:95:05:94:0e:70:77:1b:32:16:03:3b:
03:40:87:6a:75:f0:81:74:50:9a:b6:f0:fe:d1:c3:
59:b4:e8:8c:a9:4f:2b:74:e0:ec:8a:67:39:15:60:
5c:04:e5:8a:93:ea:b6:fd:c8:42:c8:4c:11:5f:b3:
88:c4:82:8f:34:80:6f:18:bd:33:60:f7:e1:1b:7b:
54:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4A:99:73:C8:5E:73:43:2C:F9:E8:0E:71:32:D8:A0:2B:F7:90:83
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/CUqZc8hec0Ms-egOcTLYoCv3kIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.58.0/24
IPv6:
2a09:e244:b000::/36
Signature Algorithm: sha256WithRSAEncryption
30:22:b7:80:8b:22:e3:c2:ed:1b:f6:d1:bb:96:aa:d7:0a:7c:
59:8e:92:19:13:6a:f7:a0:4e:0b:f2:e6:3f:50:a4:47:3d:78:
72:c9:70:74:0f:26:84:fb:2b:9f:4d:0e:de:7e:12:07:11:fd:
ad:c3:59:79:eb:2a:80:0a:aa:9f:4c:d2:f6:97:16:ca:71:12:
ed:65:95:3c:f6:4a:9a:31:f3:1e:e6:ab:cf:4b:60:0d:ad:d0:
5b:f5:2a:63:37:9f:6b:09:6a:94:44:92:e2:e6:48:45:27:60:
ff:23:06:63:3e:94:95:b3:e5:d5:cf:7c:b2:83:61:7b:19:24:
ba:d5:8f:23:34:b0:7e:46:29:60:85:d9:00:17:3a:c3:66:5c:
86:4b:94:e8:55:35:18:a0:e7:0b:03:da:ed:13:a7:2a:0c:6d:
c9:a1:1b:0d:15:9c:d9:03:72:85:50:c4:af:73:2b:c3:89:e9:
18:02:36:a7:b9:60:66:af:dd:fa:8e:50:cb:9d:53:34:f3:1e:
06:47:36:f8:86:d8:5d:59:ad:78:bb:d2:68:98:c3:75:db:cd:
eb:60:be:e1:be:9c:fe:af:2c:dd:70:b6:6e:f6:c9:2a:68:ea:
f1:38:90:37:05:5d:57:72:00:48:30:c2:9b:48:71:a4:ee:6f:
65:70:0f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:38 2026 by rpki-client