Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/_CvHVjnhBbmijPVLpSXCcZWaQuM.roa
File: _CvHVjnhBbmijPVLpSXCcZWaQuM.roa (raw, json)
Hash identifier: HHg7jU00eZJRbELNpzXT+RBYnxYT4jbBQU5L6HWkqvA=
Subject key identifier: FC:2B:C7:56:39:E1:05:B9:A2:8C:F5:4B:A5:25:C2:71:95:9A:42:E3
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 019ED9FBA4FFECEA302FE98DBB5F476B9975
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/_CvHVjnhBbmijPVLpSXCcZWaQuM.roa
Signing time: Thu 18 Jun 2026 09:06:48 +0000
ROA not before: Thu 18 Jun 2026 09:06:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42656
IP address blocks: 5.134.208.0/21 maxlen: 24
5.134.208.0/24 maxlen: 24
5.134.209.0/24 maxlen: 24
5.134.210.0/24 maxlen: 24
5.134.211.0/24 maxlen: 24
5.134.212.0/24 maxlen: 24
5.134.213.0/24 maxlen: 24
5.134.214.0/24 maxlen: 24
5.134.215.0/24 maxlen: 24
91.194.188.0/23 maxlen: 24
91.194.188.0/24 maxlen: 24
91.194.189.0/24 maxlen: 24
91.207.14.0/23 maxlen: 24
91.207.14.0/24 maxlen: 24
91.207.15.0/24 maxlen: 24
178.21.152.0/22 maxlen: 22
178.21.152.0/24 maxlen: 24
178.21.153.0/24 maxlen: 24
178.21.154.0/24 maxlen: 24
178.21.155.0/24 maxlen: 24
178.21.156.0/23 maxlen: 23
178.21.156.0/24 maxlen: 24
178.21.157.0/24 maxlen: 24
178.21.158.0/24 maxlen: 24
178.21.159.0/24 maxlen: 24
185.31.24.0/24 maxlen: 24
185.31.25.0/24 maxlen: 24
185.31.26.0/24 maxlen: 24
185.31.27.0/24 maxlen: 24
193.23.48.0/24 maxlen: 24
193.203.222.0/23 maxlen: 24
193.203.222.0/24 maxlen: 24
193.203.223.0/24 maxlen: 24
194.0.251.0/24 maxlen: 24
2a02:dc8::/30 maxlen: 48
2a02:dc8::/32 maxlen: 32
2a02:dc8:20::/48 maxlen: 48
2a02:dc8:22::/48 maxlen: 48
2a02:dc8:30::/48 maxlen: 48
2a02:dc8:31::/48 maxlen: 48
2a02:dc8:32::/48 maxlen: 48
2a02:dc8:33::/48 maxlen: 48
2a02:dcc:20::/48 maxlen: 48
2a02:dcc:22::/48 maxlen: 48
2a02:dcc:30::/48 maxlen: 48
2a02:dcc:31::/48 maxlen: 48
2a02:dcc:32::/48 maxlen: 48
2a02:dcc:33::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:fb:a4:ff:ec:ea:30:2f:e9:8d:bb:5f:47:6b:99:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Jun 18 09:06:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc2bc75639e105b9a28cf54ba525c271959a42e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:99:c2:b4:18:0c:98:22:81:14:bf:e1:8e:cc:
1a:b1:cd:64:a1:7e:28:4a:5e:55:50:82:e6:83:17:
9f:5f:b5:b5:b5:63:72:32:1b:3f:96:b5:ad:8a:f1:
00:2e:f3:93:05:ea:1b:01:88:8f:51:1f:f3:7e:2a:
00:e1:4c:86:0e:67:a2:e2:08:4e:e6:83:22:9c:50:
76:26:93:7d:22:83:91:15:61:13:2a:78:08:50:a6:
ae:e9:47:b7:21:76:bc:27:cd:c6:16:4c:e5:be:ae:
e6:53:fe:ce:87:cc:29:0e:9c:3a:c9:b8:2d:ee:70:
91:ea:1a:b3:9a:75:8d:f2:33:32:49:70:70:ed:f2:
65:5f:ba:31:fa:cb:2f:27:7e:52:50:ec:74:25:f3:
e5:6d:b3:74:1d:99:ad:25:47:d6:4a:6d:dd:c6:7e:
e9:f3:1c:98:2b:9d:c0:5c:93:64:a8:8e:66:aa:7c:
f4:12:cc:22:f4:b0:c8:25:c3:b5:bf:19:ec:84:10:
06:5c:32:37:cd:74:7e:d3:f2:30:46:1e:59:08:b1:
55:86:ed:e4:5f:d9:d0:b6:d0:65:63:68:f3:6a:6a:
7e:0e:4d:8e:44:c8:06:f0:69:01:c9:40:35:dd:14:
a2:f2:75:89:dd:0e:d3:2e:c1:58:92:a3:fb:86:46:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2B:C7:56:39:E1:05:B9:A2:8C:F5:4B:A5:25:C2:71:95:9A:42:E3
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/_CvHVjnhBbmijPVLpSXCcZWaQuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.208.0/21
91.194.188.0/23
91.207.14.0/23
178.21.152.0/21
185.31.24.0/22
193.23.48.0/24
193.203.222.0/23
194.0.251.0/24
IPv6:
2a02:dc8::/30
2a02:dcc:20::/48
2a02:dcc:22::/48
2a02:dcc:30::/46
Signature Algorithm: sha256WithRSAEncryption
80:88:e4:73:72:c7:5d:da:5c:a3:bf:58:87:8b:20:5c:61:73:
08:5c:64:7e:65:16:d2:de:27:a6:01:e3:46:01:6c:a5:1b:55:
36:62:e4:f9:d8:8d:45:4a:95:c1:9f:d3:8d:7b:e6:73:8f:70:
25:5c:0f:7f:7f:b6:c9:2d:ff:e1:03:ca:f2:46:55:ec:67:06:
a7:90:e2:4d:24:b2:11:01:a1:e6:bc:a4:d0:06:2b:06:63:4c:
5c:f6:60:c6:5f:75:91:d2:82:dd:0b:a4:d7:0a:b9:02:3f:0e:
a8:3e:cd:03:4e:a2:0d:cc:f9:07:7a:dc:16:80:93:12:95:e8:
0a:de:6e:72:56:15:22:71:82:7a:3b:44:f3:37:07:a4:27:ad:
11:ce:f8:d6:ed:1a:c8:12:2b:e3:70:5a:43:6a:c1:93:88:b4:
82:4e:e5:17:fc:78:30:d0:8c:2d:ab:c6:25:bc:99:ef:4b:00:
a9:53:d3:9f:96:f9:3c:00:67:eb:83:72:67:ce:4d:8e:9f:fc:
3c:65:42:2d:c9:f9:8b:d5:37:75:6c:d3:07:c0:a7:0b:80:58:
ee:33:2d:b7:a6:85:a2:83:02:d0:8f:e6:d8:32:a1:24:3c:ee:
c5:4a:86:6d:4c:90:64:a5:6f:d4:1f:ce:21:1d:2f:bc:bb:0a:
2a:81:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:38 2026 by rpki-client