Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/cSrvIBBg9Bs2xIkNy9xHTScyMPc.roa
File: cSrvIBBg9Bs2xIkNy9xHTScyMPc.roa (raw, json)
Hash identifier: qTMbAxvVKSY9LQIKpalsM/DeRx12O22u83d40FQyhIo=
Subject key identifier: 71:2A:EF:20:10:60:F4:1B:36:C4:89:0D:CB:DC:47:4D:27:32:30:F7
Certificate issuer: /CN=8054ccdabdf4ab6dedba6e7ebc6b85561216a7c2
Certificate serial: 019F236884D3FCE44558E743C55308F077BD
Authority key identifier: 80:54:CC:DA:BD:F4:AB:6D:ED:BA:6E:7E:BC:6B:85:56:12:16:A7:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFTM2r30q23tum5-vGuFVhIWp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/cSrvIBBg9Bs2xIkNy9xHTScyMPc.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50949
IP address blocks: 193.201.98.0/24 maxlen: 24
194.28.88.0/22 maxlen: 24
2001:67c:320::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFTM2r30q23tum5-vGuFVhIWp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:84:d3:fc:e4:45:58:e7:43:c5:53:08:f0:77:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8054ccdabdf4ab6dedba6e7ebc6b85561216a7c2
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=712aef201060f41b36c4890dcbdc474d273230f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:a6:4f:2e:f5:91:61:5d:62:b8:69:f9:66:
1c:c1:7f:24:58:eb:53:1d:3a:c1:f6:1a:44:ba:e5:
33:d3:51:16:90:a1:31:31:e5:83:d1:8c:f4:41:86:
0e:2c:16:9a:33:e0:58:2b:78:7e:f7:63:5c:2b:66:
40:4c:ef:21:ef:66:c7:6d:c5:15:87:94:19:ec:0c:
bc:a5:be:1b:c1:d4:d1:2f:9a:f5:9f:a2:5c:9c:16:
e1:51:82:37:bd:aa:3b:18:0b:99:a2:22:fb:d7:42:
c4:c2:ee:c7:62:3c:a5:bf:9e:f8:84:dd:c3:2c:4f:
63:00:b3:5a:52:b3:71:81:5e:5f:96:91:5e:04:94:
84:ee:ac:0e:55:c1:36:21:72:d6:73:be:db:f9:3d:
fd:b5:ab:a3:7e:57:49:1c:d4:a4:94:b8:8a:cf:36:
44:70:74:b7:c3:5f:87:20:05:bd:2e:64:01:29:2e:
5f:75:a3:59:78:15:c1:54:24:6f:e0:85:96:10:78:
e7:89:0f:4b:73:d1:84:1a:d2:cf:4c:21:40:ad:12:
c2:c9:89:76:7f:ba:4e:ae:20:43:60:5d:d6:18:9a:
65:30:08:d6:5f:83:70:bd:c0:90:23:72:c2:60:76:
7a:35:02:1e:e7:02:f4:0c:80:99:0f:b1:47:b9:9f:
bc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2A:EF:20:10:60:F4:1B:36:C4:89:0D:CB:DC:47:4D:27:32:30:F7
X509v3 Authority Key Identifier:
keyid:80:54:CC:DA:BD:F4:AB:6D:ED:BA:6E:7E:BC:6B:85:56:12:16:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFTM2r30q23tum5-vGuFVhIWp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/cSrvIBBg9Bs2xIkNy9xHTScyMPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/gFTM2r30q23tum5-vGuFVhIWp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.98.0/24
194.28.88.0/22
IPv6:
2001:67c:320::/48
Signature Algorithm: sha256WithRSAEncryption
72:a8:37:09:dc:67:c0:20:c6:10:12:e5:61:44:36:8c:ca:42:
4f:eb:76:16:7b:99:d5:d8:1b:24:0b:e5:d2:dd:77:1f:9d:e8:
83:0c:4f:45:b4:fc:8d:2e:9d:bc:96:f0:fd:f2:0f:90:9e:b4:
fc:0e:04:9d:38:a1:1d:56:b3:f3:41:9d:9e:50:69:52:ce:a5:
45:3b:f8:16:4e:7c:7e:77:1d:f1:9b:7b:d1:2c:fa:1c:12:57:
e3:f6:3a:3e:c0:4e:4f:8a:c6:08:cf:4c:5c:a8:89:a0:5e:69:
23:05:8e:57:6b:3e:20:bf:8e:d6:00:06:a5:1b:1c:a0:18:52:
c3:59:90:a9:5a:88:25:49:1b:0c:94:19:08:11:10:88:31:32:
59:9b:c2:c3:e3:2b:81:1e:71:2b:5e:3b:27:a2:8f:63:83:82:
eb:cc:2b:2e:e5:c3:21:a1:27:72:f0:d3:eb:6c:2d:99:06:31:
05:cb:c9:13:67:a6:2b:12:d1:3c:b4:0f:31:dd:14:0a:c6:58:
a7:28:1c:61:aa:69:58:de:37:ab:52:ff:d6:c4:28:79:c0:cb:
e1:1c:77:94:be:df:10:b5:dc:27:e5:c9:47:81:86:90:a1:5d:
eb:fd:09:56:10:49:14:ee:8a:3c:80:ba:ae:b5:52:c5:56:c3:
16:f2:d8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:24:51 2026 by rpki-client