Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/_wXRGRg_6zlng_X2cu0Vdmyx740.roa
File: _wXRGRg_6zlng_X2cu0Vdmyx740.roa (raw, json)
Hash identifier: qUv481U77SQNOCg85ZBm0jeo1hhfGdw3T12+hLvftSA=
Subject key identifier: FF:05:D1:19:18:3F:EB:39:67:83:F5:F6:72:ED:15:76:6C:B1:EF:8D
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 019F294DFAE167C92EFB857ED20A08F4AC3B
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/_wXRGRg_6zlng_X2cu0Vdmyx740.roa
Signing time: Fri 03 Jul 2026 18:46:44 +0000
ROA not before: Fri 03 Jul 2026 18:46:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201364
IP address blocks: 80.93.220.0/24 maxlen: 24
2a05:3040::/29 maxlen: 29
2a05:3040::/32 maxlen: 32
2a05:3041::/32 maxlen: 32
2a05:3042::/32 maxlen: 32
2a05:3043::/32 maxlen: 32
2a05:3044::/32 maxlen: 32
2a05:3045::/32 maxlen: 32
2a05:3046::/32 maxlen: 32
2a05:3047::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:4d:fa:e1:67:c9:2e:fb:85:7e:d2:0a:08:f4:ac:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jul 3 18:46:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff05d119183feb396783f5f672ed15766cb1ef8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:6d:37:c3:e4:14:35:3e:df:5d:39:c3:3f:
e1:c8:3b:ea:66:84:2c:09:3a:9e:96:d9:d8:be:2e:
c4:fd:2f:10:1a:15:92:b7:ea:d3:b4:75:3a:8c:c4:
79:3a:32:80:26:50:5d:39:27:31:58:8a:f3:bc:4f:
ba:ef:2b:9f:b8:9b:2c:24:5a:ed:b0:6f:02:1b:16:
fb:30:1d:67:14:77:b3:24:18:c9:95:8f:77:bf:08:
1d:cd:ae:19:c4:4c:aa:be:29:ae:63:a2:97:04:b8:
c6:e6:6d:55:61:84:61:04:15:74:28:d8:b5:04:a5:
1c:05:4d:14:7c:09:cb:31:55:2b:0d:a6:4d:6b:b4:
0b:b5:91:12:61:15:2e:20:e5:c6:7b:2b:ec:8c:b3:
ee:ee:9f:21:4a:33:16:60:e0:17:1e:be:d9:47:b1:
98:d1:a0:e4:77:a8:1f:d6:71:72:28:89:ed:88:8f:
f3:5d:a6:7d:7d:a9:da:e5:28:8a:c1:a6:8f:c9:d2:
49:18:72:3e:57:87:6d:62:c0:da:28:95:8c:73:96:
a3:a0:cd:07:1d:36:5a:38:99:98:39:fd:cf:02:e3:
7d:30:1b:4c:df:eb:89:9a:fc:04:8f:2e:df:21:ac:
d3:c8:fc:13:ac:a5:47:7b:d2:ae:3e:70:70:1b:73:
8d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:05:D1:19:18:3F:EB:39:67:83:F5:F6:72:ED:15:76:6C:B1:EF:8D
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/_wXRGRg_6zlng_X2cu0Vdmyx740.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.220.0/24
IPv6:
2a05:3040::/29
Signature Algorithm: sha256WithRSAEncryption
9a:25:b9:b2:3b:9c:76:3b:a2:8d:8b:25:8c:5a:b1:10:fe:59:
e5:87:3b:60:cf:1a:c9:41:6b:fa:9e:e0:4e:99:64:0b:80:96:
39:d0:c3:2d:94:f6:2d:17:07:70:c6:5a:af:a7:34:70:ff:82:
e7:48:3b:63:88:75:7d:4f:4a:f1:09:c4:d9:18:78:9a:b7:d8:
b7:8d:54:cc:4b:8d:f8:b8:2c:9b:71:a2:46:e0:26:d3:24:dd:
23:02:d0:b6:a5:eb:3e:f8:53:c7:26:1e:fa:19:bc:0f:07:ff:
e5:03:22:23:28:6d:d5:44:66:9a:d1:0c:24:54:b5:3f:b0:86:
e4:bc:79:ea:8c:f3:e1:c5:50:0d:47:fa:fc:f3:24:bc:b6:20:
49:8e:77:56:2d:a8:8b:90:81:5d:97:3e:b6:f0:a4:c6:16:24:
e0:93:2a:ab:f6:d5:be:b2:ba:61:df:99:d1:5b:c8:4e:ab:3d:
bd:92:ae:2d:75:86:15:d5:97:96:30:11:98:5c:14:a3:ad:48:
aa:8e:6f:e4:8f:81:67:dc:cc:f7:19:d2:18:d3:eb:55:2c:c5:
89:ff:7b:f8:a4:6b:63:39:6b:3c:ea:9c:4f:63:0e:28:9b:8a:
e4:b5:15:6e:f9:fb:e8:83:b6:76:57:7c:30:21:3e:c3:ce:d3:
99:81:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:47 2026 by rpki-client