Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/cGY6VU5LCoHNqWWYp31zTE9OfVQ.roa
File: cGY6VU5LCoHNqWWYp31zTE9OfVQ.roa (raw, json)
Hash identifier: JmT+NXbdK0ja4GM6w1yJIVMBiCu7leyjjpmQYwjqaI4=
Subject key identifier: 70:66:3A:55:4E:4B:0A:81:CD:A9:65:98:A7:7D:73:4C:4F:4E:7D:54
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019F1D5DF4936F5460981FDB701281E3A63E
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/cGY6VU5LCoHNqWWYp31zTE9OfVQ.roa
Signing time: Wed 01 Jul 2026 11:08:44 +0000
ROA not before: Wed 01 Jul 2026 11:08:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209183
IP address blocks: 72.56.42.0/23 maxlen: 24
72.56.44.0/23 maxlen: 24
72.56.46.0/24 maxlen: 24
72.56.47.0/24 maxlen: 24
72.56.48.0/24 maxlen: 24
72.56.50.0/24 maxlen: 24
72.56.51.0/24 maxlen: 24
72.56.56.0/24 maxlen: 24
72.56.57.0/24 maxlen: 24
72.56.59.0/24 maxlen: 24
72.56.60.0/24 maxlen: 24
72.56.61.0/24 maxlen: 24
72.56.216.0/24 maxlen: 24
72.56.217.0/24 maxlen: 24
72.56.222.0/24 maxlen: 24
72.56.223.0/24 maxlen: 24
72.56.225.0/24 maxlen: 24
72.56.227.0/24 maxlen: 24
72.56.228.0/24 maxlen: 24
72.56.230.0/24 maxlen: 24
72.56.231.0/24 maxlen: 24
72.56.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:5d:f4:93:6f:54:60:98:1f:db:70:12:81:e3:a6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Jul 1 11:08:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70663a554e4b0a81cda96598a77d734c4f4e7d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:57:91:73:40:9c:2b:7a:61:a9:57:fa:47:9e:
27:8a:61:7a:bb:46:be:d0:b0:26:64:81:be:88:0f:
96:fd:9d:08:e0:f9:e2:42:5d:e7:60:88:aa:44:83:
7b:97:5f:35:f5:f9:2f:7e:bd:f1:4d:8c:23:90:61:
49:f6:57:75:f2:20:51:67:5d:b4:3f:6d:86:c1:a7:
dd:36:9b:d5:98:71:89:61:bb:9f:4f:7a:e7:16:50:
8a:b1:8f:d2:25:f4:e6:f1:f6:d5:4e:bf:53:7c:73:
ec:3c:0e:f5:33:98:b8:ba:37:74:d8:c4:17:ad:d1:
d4:15:a1:ee:f5:00:b5:5a:79:47:ae:50:30:6d:87:
64:ac:01:72:bb:2f:5e:1f:f7:d3:47:f4:7a:c4:29:
de:6e:f9:d6:6a:dc:c9:44:e7:2c:ff:44:bb:97:b7:
f9:17:97:85:65:83:d2:ce:13:9c:fc:ad:1a:d2:f4:
06:a9:f1:84:2f:d6:74:98:5e:c3:32:c2:c5:87:ff:
6b:92:da:0f:b9:34:fa:a3:e5:84:da:49:70:77:98:
84:bb:14:1e:d2:96:ea:f2:bc:ac:e6:ed:6a:38:ac:
99:46:25:d4:93:63:15:8c:77:7f:11:7c:78:f2:fe:
1d:19:ba:76:75:88:22:4c:64:05:53:5d:87:b0:06:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:3A:55:4E:4B:0A:81:CD:A9:65:98:A7:7D:73:4C:4F:4E:7D:54
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/cGY6VU5LCoHNqWWYp31zTE9OfVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.42.0-72.56.48.255
72.56.50.0/23
72.56.56.0/23
72.56.59.0-72.56.61.255
72.56.216.0/23
72.56.222.0/23
72.56.225.0/24
72.56.227.0-72.56.228.255
72.56.230.0/23
72.56.254.0/23
Signature Algorithm: sha256WithRSAEncryption
08:c2:d2:f8:f1:91:9d:0d:1f:cf:7e:72:9f:cc:51:00:23:c8:
48:c1:d8:64:da:3b:ef:90:4e:36:bc:3b:e5:4c:4d:7b:46:d5:
5d:30:b5:ad:cb:44:c0:6a:61:56:34:1b:d1:1c:d2:10:6d:c8:
b8:02:46:e5:43:c2:dd:9d:63:f9:4e:5c:e6:e9:3d:a9:1c:4f:
a3:bd:d2:dd:04:d2:22:6d:b8:1c:a4:b2:6a:81:cd:3b:5b:db:
95:30:db:86:e1:22:87:90:b0:6c:8f:20:6a:25:de:29:c4:f1:
18:22:fd:b1:d5:1f:9f:c1:cd:db:ac:fd:21:59:92:e1:24:a3:
c8:46:1a:5d:db:92:1c:67:19:0b:dc:20:eb:5e:c4:0e:8b:73:
41:9b:9f:72:b3:9a:6c:15:d3:05:b7:c4:37:ce:19:4e:31:1d:
8b:a3:ff:56:72:87:83:a5:e5:20:49:41:2f:8b:2c:e3:eb:4e:
fa:4f:3e:72:4e:a8:29:1a:4a:21:46:13:03:a0:70:9b:87:55:
43:72:33:ec:cf:3e:90:13:9b:4f:af:f6:e4:d2:8c:a2:56:93:
45:97:1e:86:9c:a0:f0:c9:18:c2:16:2e:8c:e6:4d:bf:f6:f1:
c6:91:89:47:79:a0:aa:7c:16:0d:a6:b0:b7:8e:45:01:4e:1c:
b0:36:e9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:06 2026 by rpki-client