Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/cPYgxpTQJttUViNAAa1x_F8lekM.roa
File: cPYgxpTQJttUViNAAa1x_F8lekM.roa (raw, json)
Hash identifier: G9b5p61rO9ZEZmykx4lc6+UnUo8Kn3VRyuxj1NSSYeE=
Subject key identifier: 70:F6:20:C6:94:D0:26:DB:54:56:23:40:01:AD:71:FC:5F:25:7A:43
Certificate issuer: /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Certificate serial: 019E8C1D8B57C5F6A76A5669678D3346595D
Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/cPYgxpTQJttUViNAAa1x_F8lekM.roa
Signing time: Wed 03 Jun 2026 06:13:26 +0000
ROA not before: Wed 03 Jun 2026 06:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215047
IP address blocks: 45.129.74.0/24 maxlen: 24
89.31.212.0/23 maxlen: 23
185.218.225.0/24 maxlen: 24
217.180.52.0/23 maxlen: 23
2a14:5fc0::/30 maxlen: 30
2a14:5fc4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:1d:8b:57:c5:f6:a7:6a:56:69:67:8d:33:46:59:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Validity
Not Before: Jun 3 06:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70f620c694d026db5456234001ad71fc5f257a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:50:7b:4c:10:0e:d5:5d:f5:5b:d4:70:fe:
08:f3:66:a4:98:6d:8a:2c:a7:6d:d9:61:f5:7d:7d:
58:dd:54:8d:82:b4:f2:01:0a:aa:ed:9e:fe:62:a5:
71:79:ce:bb:e0:c6:ab:07:34:e9:c9:40:dc:ef:80:
b8:16:c5:17:04:4e:9f:44:05:91:29:da:59:db:57:
df:a8:89:5e:97:02:5f:c9:37:56:37:cc:f6:1e:a1:
52:d1:55:a8:7e:45:36:8b:69:18:24:15:6e:20:b8:
5b:7b:bb:a9:a8:37:fc:47:71:9f:67:20:e0:2e:0f:
98:21:07:47:cf:6f:df:4c:59:1b:fc:a2:ae:03:db:
4c:41:12:56:b7:ce:ca:fa:3f:34:c3:a8:42:9a:7b:
d8:c1:e0:20:d9:cf:14:f2:fc:48:32:82:e8:1c:91:
0f:91:e7:37:a9:1a:3a:1d:b6:2e:64:ab:47:ec:39:
5b:63:d5:be:5b:a1:d3:bc:4b:9f:ac:86:ca:ad:43:
a3:21:83:fb:1b:ec:5e:93:28:39:69:83:26:8e:e4:
ab:1a:87:c9:61:f5:73:86:06:cc:bc:1e:db:97:73:
8b:1d:d6:64:bc:27:44:d2:6b:d6:88:a3:12:85:e0:
11:e1:c9:5e:2e:b4:e4:49:4c:a5:43:7d:67:35:95:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F6:20:C6:94:D0:26:DB:54:56:23:40:01:AD:71:FC:5F:25:7A:43
X509v3 Authority Key Identifier:
keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/cPYgxpTQJttUViNAAa1x_F8lekM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.74.0/24
89.31.212.0/23
185.218.225.0/24
217.180.52.0/23
IPv6:
2a14:5fc0::/29
Signature Algorithm: sha256WithRSAEncryption
a1:13:d3:35:58:f5:32:65:b4:ac:c6:a7:7d:08:14:52:62:9d:
72:b6:b8:4e:85:79:49:7d:8e:e9:39:ca:50:5b:19:4b:5a:da:
2c:fc:01:be:d5:50:3b:51:40:a6:da:d6:08:cc:fd:64:26:e8:
23:84:1c:f8:c8:7e:69:b2:0e:a2:c3:72:6a:27:0c:71:88:dd:
5c:79:01:db:09:99:16:ac:b8:ae:e3:29:4b:aa:a6:e6:6c:da:
b5:8b:34:15:1b:07:a0:b7:fd:0b:a4:12:88:b9:71:31:51:7d:
9e:18:b9:bc:f1:51:93:bc:7a:c1:36:17:78:30:c4:5a:b5:ed:
7d:bb:e3:08:7e:e1:b6:33:4c:e1:dd:5c:c1:85:84:74:2c:4c:
75:47:15:78:99:03:62:b1:68:b5:23:f9:e7:80:35:0e:6e:8e:
d5:09:a6:7e:08:7e:1c:5f:94:6f:2a:d4:f9:96:b8:f7:46:c7:
ab:f0:18:67:ea:01:48:ef:fc:e1:5c:90:d5:91:e0:02:e1:48:
5a:c2:e1:1d:6e:9c:74:05:8b:3a:24:8f:32:39:ab:47:88:e1:
90:f2:29:f5:96:83:92:b2:96:62:14:7c:5b:42:30:48:1e:3b:
32:bd:4a:af:0b:4f:89:69:e9:d6:a0:6b:92:c1:58:4e:3a:a1:
45:fe:9a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:33 2026 by rpki-client