Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/cqVoU67CwExthfXQtnUzx-lv3-A.roa
File: cqVoU67CwExthfXQtnUzx-lv3-A.roa (raw, json)
Hash identifier: 5F5B0oJP8h6OFxnMOS4l6tglzKyriTHb6L1MzQyUoV4=
Subject key identifier: 72:A5:68:53:AE:C2:C0:4C:6D:85:F5:D0:B6:75:33:C7:E9:6F:DF:E0
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 019ED148E713D9CCB13C391781109D6F6A6C
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/cqVoU67CwExthfXQtnUzx-lv3-A.roa
Signing time: Tue 16 Jun 2026 16:34:36 +0000
ROA not before: Tue 16 Jun 2026 16:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56701
IP address blocks: 45.157.212.0/22 maxlen: 22
45.157.212.0/23 maxlen: 23
45.157.212.0/24 maxlen: 24
45.157.213.0/24 maxlen: 24
45.157.214.0/23 maxlen: 23
45.157.214.0/24 maxlen: 24
45.157.215.0/24 maxlen: 24
77.73.234.0/24 maxlen: 24
91.214.122.0/23 maxlen: 23
91.214.122.0/24 maxlen: 24
91.214.123.0/24 maxlen: 24
161.104.24.0/22 maxlen: 22
161.104.24.0/23 maxlen: 23
161.104.24.0/24 maxlen: 24
161.104.25.0/24 maxlen: 24
161.104.26.0/23 maxlen: 23
161.104.26.0/24 maxlen: 24
161.104.27.0/24 maxlen: 24
168.222.196.0/22 maxlen: 22
168.222.196.0/23 maxlen: 23
168.222.196.0/24 maxlen: 24
168.222.197.0/24 maxlen: 24
168.222.198.0/23 maxlen: 23
168.222.198.0/24 maxlen: 24
168.222.199.0/24 maxlen: 24
178.236.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:48:e7:13:d9:cc:b1:3c:39:17:81:10:9d:6f:6a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Jun 16 16:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72a56853aec2c04c6d85f5d0b67533c7e96fdfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:16:3d:65:a2:5c:fe:d0:f7:56:a6:ba:0d:
b8:5e:4f:a6:13:2f:8c:0d:df:c6:2a:d2:e8:a6:7d:
a8:30:da:f8:e3:8a:14:47:79:f1:df:0d:6b:59:32:
34:bc:64:c3:83:32:20:90:28:96:00:4f:03:b7:69:
15:01:bb:64:74:52:c6:a3:29:17:e1:ca:33:a1:68:
c0:f2:ba:bd:2f:c9:b5:cf:e5:78:ee:9e:2d:bd:b1:
93:b8:8a:78:5a:5a:f9:c2:e9:dc:d1:7c:2e:c6:a8:
c9:98:a3:e6:97:dd:fe:17:52:d7:ee:c9:0d:46:e3:
46:f6:0e:17:75:09:eb:a8:d3:70:ac:39:0c:88:9b:
98:79:96:a3:2d:50:6e:58:58:db:55:dd:2a:a6:80:
43:e6:8f:08:1d:26:7b:ee:e5:af:f6:78:c5:07:bb:
38:f2:c1:a3:04:f8:44:3b:72:57:60:85:7a:6c:b3:
f1:7b:61:22:0c:e9:16:47:bb:60:aa:d3:25:e5:e2:
47:fc:1e:87:8e:3e:80:62:60:d3:70:ad:1b:71:c4:
9a:34:e3:5e:53:4b:b8:7a:83:dc:61:51:f8:19:cd:
e0:81:52:52:e9:98:53:e5:d5:98:dc:f9:7e:64:e1:
d2:9c:61:42:c1:7e:38:bf:53:d1:31:39:c8:61:20:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A5:68:53:AE:C2:C0:4C:6D:85:F5:D0:B6:75:33:C7:E9:6F:DF:E0
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/cqVoU67CwExthfXQtnUzx-lv3-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.212.0/22
77.73.234.0/24
91.214.122.0/23
161.104.24.0/22
168.222.196.0/22
178.236.29.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e1:69:6e:5a:cc:f1:79:25:93:6c:65:f6:df:9b:e2:7f:dc:
6b:37:4a:2e:fd:6e:18:2f:4a:ea:ca:00:8f:d7:ce:01:fa:15:
36:1f:09:e9:f3:23:a0:6c:00:ff:ff:69:9e:ec:b6:93:c6:13:
dc:13:ba:55:8b:94:c5:85:f5:c2:59:cd:d8:2b:a6:e1:b7:2b:
d6:7e:07:88:f2:b0:9f:ac:87:28:27:91:cd:be:40:2f:2a:84:
f5:6e:f8:69:9e:22:06:82:75:d3:b6:1a:d4:07:74:25:0d:63:
9a:df:39:0d:33:65:48:12:c5:76:4c:fe:44:33:16:9f:0c:5a:
97:0a:7f:5b:14:e7:71:bc:28:00:ad:35:b3:96:af:8f:32:c4:
ff:ea:c4:a5:a5:9e:ff:91:d6:26:74:6b:54:b8:37:35:88:bb:
de:c1:49:a6:d3:50:85:31:c5:d5:3a:8e:db:94:60:a0:ce:8a:
d1:2b:d7:26:ef:85:28:6b:b1:69:4e:25:d5:8a:de:47:0c:de:
7e:8c:ad:e8:06:18:5d:5b:7b:28:7f:10:ef:9c:b2:95:eb:31:
65:17:0f:0a:1f:fb:e4:a3:2d:11:e2:6d:e1:ca:11:3f:f7:88:
6c:c5:64:c1:4b:0a:06:e1:89:3e:4a:5b:7c:d8:72:9b:31:09:
17:5e:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:16 2026 by rpki-client