Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/1hYxU510mvC8W-Z5Lh_4RiP_RwA.roa
File: 1hYxU510mvC8W-Z5Lh_4RiP_RwA.roa (raw, json)
Hash identifier: Qdg6Cvex+ogQOj7yX9Hv45NrkNDmCPh+AWkefNtDGNk=
Subject key identifier: D6:16:31:53:9D:74:9A:F0:BC:5B:E6:79:2E:1F:F8:46:23:FF:47:00
Certificate issuer: /CN=c34094e3236dcd1c835113791a3824da2973df9b
Certificate serial: 019CFBBBFF2F33A3D813744ABD64679A0A23
Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/1hYxU510mvC8W-Z5Lh_4RiP_RwA.roa
Signing time: Tue 17 Mar 2026 12:18:47 +0000
ROA not before: Tue 17 Mar 2026 12:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24812
IP address blocks: 80.64.80.0/20 maxlen: 24
80.64.80.0/24 maxlen: 24
80.64.81.0/24 maxlen: 24
80.64.82.0/24 maxlen: 24
80.64.83.0/24 maxlen: 24
80.64.84.0/24 maxlen: 24
80.64.85.0/24 maxlen: 24
80.64.86.0/24 maxlen: 24
80.64.87.0/24 maxlen: 24
80.64.88.0/24 maxlen: 24
80.64.89.0/24 maxlen: 24
80.64.90.0/24 maxlen: 24
80.64.91.0/24 maxlen: 24
80.64.92.0/24 maxlen: 24
80.64.93.0/24 maxlen: 24
80.64.94.0/24 maxlen: 24
80.64.95.0/24 maxlen: 24
91.196.96.0/22 maxlen: 22
91.196.96.0/24 maxlen: 24
91.196.97.0/24 maxlen: 24
91.196.98.0/24 maxlen: 24
91.196.99.0/24 maxlen: 24
176.105.192.0/22 maxlen: 24
176.105.193.0/24 maxlen: 24
176.105.194.0/23 maxlen: 23
176.105.194.0/24 maxlen: 24
176.105.196.0/24 maxlen: 24
176.105.197.0/24 maxlen: 24
176.105.198.0/24 maxlen: 24
176.105.199.0/24 maxlen: 24
176.105.200.0/22 maxlen: 22
176.105.200.0/23 maxlen: 23
176.105.204.0/23 maxlen: 23
176.105.204.0/24 maxlen: 24
176.105.206.0/23 maxlen: 23
176.105.208.0/22 maxlen: 22
176.105.208.0/24 maxlen: 24
176.105.209.0/24 maxlen: 24
176.105.210.0/23 maxlen: 23
176.105.212.0/22 maxlen: 24
176.105.212.0/23 maxlen: 23
176.105.214.0/24 maxlen: 24
176.105.215.0/24 maxlen: 24
176.105.216.0/23 maxlen: 24
176.105.218.0/23 maxlen: 23
176.105.218.0/24 maxlen: 24
176.105.220.0/24 maxlen: 24
176.105.221.0/24 maxlen: 24
176.105.222.0/24 maxlen: 24
176.105.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:bb:ff:2f:33:a3:d8:13:74:4a:bd:64:67:9a:0a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b
Validity
Not Before: Mar 17 12:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d61631539d749af0bc5be6792e1ff84623ff4700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:99:6d:a7:18:01:b3:c1:83:05:d7:81:11:
37:f7:86:bc:65:2f:c2:3f:20:1c:84:7f:52:e3:3e:
fb:93:ae:bc:a0:f9:38:b4:a0:12:d6:e7:bc:73:9c:
ea:8b:a1:40:51:b0:af:06:73:46:23:89:44:ad:3d:
4b:37:3d:a0:d7:0c:05:d1:94:41:18:d6:3a:0b:d5:
bc:21:75:d1:7d:71:19:72:dd:0f:97:77:eb:19:b6:
5f:f4:43:cf:98:d1:49:bd:14:28:d9:28:84:51:d3:
42:40:22:a3:85:6c:2f:88:d0:79:3a:7a:d7:66:f8:
1c:9c:21:5d:17:8c:08:2e:91:21:b2:6d:2c:ae:da:
3e:6f:55:a7:93:a8:52:d0:b2:4b:fc:6d:c4:b6:5a:
25:ad:b1:72:99:82:f4:42:fd:03:82:03:e7:87:be:
f8:0e:ff:6e:37:85:a3:e8:57:15:9e:0e:81:65:88:
65:cf:06:56:68:c9:81:e5:e5:9c:82:5f:6f:cf:45:
e2:e2:7b:58:db:10:42:d1:4c:a6:9c:d9:7e:25:80:
a6:db:99:c2:ef:0b:e8:9e:01:e1:87:1e:24:46:59:
c4:24:fc:53:a7:44:39:01:a3:08:82:21:c8:97:cd:
5a:85:33:99:6a:a4:d7:4f:50:24:7b:93:16:86:80:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:16:31:53:9D:74:9A:F0:BC:5B:E6:79:2E:1F:F8:46:23:FF:47:00
X509v3 Authority Key Identifier:
keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/1hYxU510mvC8W-Z5Lh_4RiP_RwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.80.0/20
91.196.96.0/22
176.105.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:b4:94:26:7d:c3:4b:93:40:72:1e:18:66:f0:d3:0a:f8:4a:
22:24:7f:30:40:f0:52:f6:af:d1:76:96:3f:30:81:ba:b7:8f:
7a:d9:b5:e0:d8:b5:88:b0:19:12:e2:c0:93:39:81:77:e6:c9:
21:4d:ca:7c:3a:ff:51:0f:a4:e7:4c:4d:81:25:4d:d0:9a:42:
e1:94:bf:55:2f:31:df:f6:c4:53:44:d5:23:01:b3:7f:92:65:
7c:70:11:7c:cb:3b:9a:89:cf:67:b7:84:a2:50:00:5d:1d:2a:
be:4a:ef:a4:1a:7b:ab:6a:29:83:92:93:c9:7e:25:48:94:51:
a3:62:88:45:4f:74:28:2c:8b:6a:82:56:68:c1:c7:d0:10:ca:
d9:3f:8f:20:0f:ea:5b:ed:5f:bd:71:46:5b:22:ed:79:79:5a:
77:9e:c3:70:df:9c:e9:f0:40:4b:e2:8a:b8:e2:b2:8a:80:cb:
5c:2a:0e:38:02:8d:d1:30:85:8a:7f:a8:3b:44:15:ef:28:7e:
20:ae:78:28:ca:0b:e0:53:dc:49:99:b2:7a:a2:d9:01:e9:cf:
df:ac:7b:ae:a0:30:74:9e:32:2b:36:07:c2:19:ae:81:52:33:
13:74:85:ba:71:7b:af:2b:66:0a:9a:53:79:60:70:f7:7f:dc:
3c:43:c8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:53:16 2026 by rpki-client