Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/yamNx3ecIuPVFeX-kSCh8y4Fx_c.roa
File: yamNx3ecIuPVFeX-kSCh8y4Fx_c.roa (raw, json)
Hash identifier: 4qY/8GmsvrTI7IdeRHY7SB9zEjFFEMpgAX8FcHmNPXk=
Subject key identifier: C9:A9:8D:C7:77:9C:22:E3:D5:15:E5:FE:91:20:A1:F3:2E:05:C7:F7
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 019F1858404FD801E9067535E998A7CCC99A
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/yamNx3ecIuPVFeX-kSCh8y4Fx_c.roa
Signing time: Tue 30 Jun 2026 11:44:24 +0000
ROA not before: Tue 30 Jun 2026 11:44:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39216
IP address blocks: 185.72.252.0/24 maxlen: 24
185.72.253.0/24 maxlen: 24
188.72.1.0/24 maxlen: 24
188.72.4.0/24 maxlen: 24
188.72.5.0/24 maxlen: 24
188.72.6.0/24 maxlen: 24
188.72.7.0/24 maxlen: 24
188.72.34.0/24 maxlen: 24
188.72.35.0/24 maxlen: 24
188.72.56.0/24 maxlen: 24
188.72.58.0/24 maxlen: 24
188.72.59.0/24 maxlen: 24
188.72.60.0/24 maxlen: 24
188.72.61.0/24 maxlen: 24
188.72.62.0/24 maxlen: 24
188.72.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:58:40:4f:d8:01:e9:06:75:35:e9:98:a7:cc:c9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jun 30 11:44:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9a98dc7779c22e3d515e5fe9120a1f32e05c7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:2d:6f:6c:19:1b:20:e0:36:7a:70:26:57:
df:ba:9f:98:b0:e4:9c:54:9a:c7:e8:a3:94:61:56:
9c:27:cf:06:45:a1:9e:27:0a:e3:67:43:e6:c5:e1:
0a:a5:8f:c8:19:c9:84:23:2e:54:c4:56:de:33:d4:
b5:78:95:51:98:af:a7:37:74:13:76:2e:b1:9a:da:
9d:ce:5e:0a:ba:18:f0:96:48:fc:55:c3:d5:36:0a:
ec:4a:9b:91:23:41:ee:16:44:77:00:7a:70:70:a2:
e3:d1:c5:4f:2d:fc:70:85:3e:7e:2e:a7:7a:65:2e:
e9:17:2b:d9:3a:0a:5c:91:9c:e3:29:56:50:44:fb:
09:a6:f9:48:87:03:49:50:a1:63:26:53:ee:be:35:
f2:32:9b:a1:93:b2:76:ad:16:3a:c0:df:33:5a:bf:
2a:e2:98:aa:db:6a:a4:f9:2a:59:08:74:4a:9e:34:
73:90:6a:c6:21:e5:09:08:5c:24:4e:06:b9:07:7e:
36:36:6d:b3:12:e2:ff:89:86:46:9a:09:ae:2b:d3:
17:a3:9c:5d:1e:11:29:b2:5b:c3:88:5c:75:22:1b:
b1:e1:10:1d:86:0c:89:42:f6:5f:a8:a2:1f:8d:14:
dc:c8:b6:38:79:84:14:b0:41:f1:16:41:98:06:5a:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A9:8D:C7:77:9C:22:E3:D5:15:E5:FE:91:20:A1:F3:2E:05:C7:F7
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/yamNx3ecIuPVFeX-kSCh8y4Fx_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.252.0/23
188.72.1.0/24
188.72.4.0/22
188.72.34.0/23
188.72.56.0/24
188.72.58.0-188.72.63.255
Signature Algorithm: sha256WithRSAEncryption
3d:67:fb:35:43:ac:c7:e4:4e:a5:6f:71:40:f6:60:9c:fa:f2:
0c:75:ab:37:ac:5c:e0:0e:3f:9a:ab:07:55:b9:85:47:71:da:
49:85:a7:0c:70:b1:3e:59:44:73:fe:80:a3:33:d2:52:7f:4c:
4a:e3:3f:87:8b:3d:00:e3:13:55:a3:d0:7b:45:d9:91:c0:95:
74:80:dd:ac:a7:bc:bc:1d:fb:65:f1:bc:d5:0e:18:bb:6e:d0:
c3:a6:d9:45:e4:91:22:55:b6:29:7f:40:33:be:63:60:b5:e1:
6a:38:87:18:5f:d9:b7:09:71:5a:6e:fc:e0:37:d0:58:f1:3f:
68:98:23:e6:e7:9c:ce:90:fa:19:d0:61:21:b8:92:82:d8:4d:
32:be:3f:a5:ee:5b:f5:6a:bf:ee:3f:4c:4d:a7:c8:ee:ab:51:
a6:bb:ad:82:dd:95:25:48:4e:e0:c7:ed:fa:5e:3f:e7:bf:ba:
77:41:71:14:00:7b:7b:d5:b1:05:ad:c4:8c:3d:27:82:79:9e:
84:3f:7a:6c:37:f4:d8:f8:89:b1:09:61:4b:ca:4f:bb:17:1d:
88:56:50:7a:f2:96:18:26:b6:76:b9:27:b9:de:01:b1:5e:b9:
50:68:62:61:3b:c1:a0:9a:c0:c7:00:c0:d0:04:2d:42:cd:fd:
7d:7e:84:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:26 2026 by rpki-client