Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/cbz2LvC72XNqrvx7XIcWfWQcJGs.roa
File: cbz2LvC72XNqrvx7XIcWfWQcJGs.roa (raw, json)
Hash identifier: 6ZyBifFEMpLFq8cT3rfhVYcBqGdapM5Y/Vio3GKuQSM=
Subject key identifier: 71:BC:F6:2E:F0:BB:D9:73:6A:AE:FC:7B:5C:87:16:7D:64:1C:24:6B
Certificate issuer: /CN=a08259a41d9c90c871a4a4081eeac98e921c9c96
Certificate serial: 019F236916875725BCBDDC78E92166CC2DE5
Authority key identifier: A0:82:59:A4:1D:9C:90:C8:71:A4:A4:08:1E:EA:C9:8E:92:1C:9C:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/cbz2LvC72XNqrvx7XIcWfWQcJGs.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201877
IP address blocks: 83.139.194.0/24 maxlen: 24
83.139.200.0/24 maxlen: 24
83.139.209.0/24 maxlen: 24
83.139.210.0/24 maxlen: 24
83.139.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:16:87:57:25:bc:bd:dc:78:e9:21:66:cc:2d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08259a41d9c90c871a4a4081eeac98e921c9c96
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71bcf62ef0bbd9736aaefc7b5c87167d641c246b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:64:de:f4:d4:ec:7c:d8:64:31:bc:d3:e8:
ac:4b:ff:39:be:4a:95:cf:71:50:fe:4f:d8:9c:7f:
16:13:0a:98:e9:76:c3:2b:eb:18:5c:7c:5a:4a:80:
b8:8c:04:92:9f:a7:84:c9:6e:0d:35:21:5a:92:be:
9f:3a:2e:6b:bb:42:31:7a:57:ab:f9:16:19:0e:59:
1c:bd:88:bd:9f:3a:f6:25:40:9c:99:e0:1e:32:69:
71:bd:f3:c5:dc:a5:0e:61:ea:3e:59:2a:84:dc:cc:
7f:d0:89:2c:96:71:db:85:6f:1e:bf:06:ee:50:b6:
d7:f1:81:ae:a8:2c:2c:30:43:d9:e4:00:1b:9e:79:
d2:5d:43:ea:f6:5f:70:c1:ad:6e:c0:f7:6d:96:1a:
3b:b6:69:ad:c4:30:96:b6:fd:6d:ac:ad:c4:c0:0f:
10:8c:e4:28:e1:4f:18:20:d8:bb:57:8a:0d:8a:22:
22:61:f5:48:33:56:6f:9b:91:6f:d1:d6:ed:ab:d5:
23:61:b4:97:bb:83:f5:bb:00:5d:b1:ea:b9:02:49:
20:45:41:41:9c:35:ca:90:88:2d:5a:c0:e3:1a:26:
b1:9e:45:e6:6e:51:0a:5a:b1:c8:9b:ee:9e:1a:eb:
6b:37:b2:ed:22:a4:a8:45:08:9b:88:1b:32:4c:37:
63:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BC:F6:2E:F0:BB:D9:73:6A:AE:FC:7B:5C:87:16:7D:64:1C:24:6B
X509v3 Authority Key Identifier:
keyid:A0:82:59:A4:1D:9C:90:C8:71:A4:A4:08:1E:EA:C9:8E:92:1C:9C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/cbz2LvC72XNqrvx7XIcWfWQcJGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.194.0/24
83.139.200.0/24
83.139.209.0-83.139.211.255
Signature Algorithm: sha256WithRSAEncryption
26:d0:cc:88:ff:d4:41:d1:bd:6f:7b:59:62:02:4b:ee:b2:bc:
28:71:60:c2:d4:46:af:3d:12:ab:c8:18:d5:b3:28:5a:e6:9b:
34:d9:75:21:3a:97:02:f2:3c:3e:0d:c7:63:6d:1d:b8:05:f8:
29:83:29:a4:88:9d:18:67:5b:17:7d:0c:c7:49:d9:33:66:5f:
15:f1:9a:d9:c9:6d:f0:9c:fb:89:20:ca:ba:73:58:f1:20:77:
e1:8b:e2:da:67:83:27:b0:8f:7b:db:c5:80:3c:57:9d:ce:49:
89:8b:62:03:a5:13:8b:d6:69:1f:2c:0a:9b:94:f7:bc:f7:5a:
6c:a2:82:83:d2:bc:15:23:a1:4f:81:d0:7b:8c:58:d8:a7:ec:
58:34:3a:c4:2d:12:3e:f5:25:a8:63:f1:ad:44:84:53:7b:ca:
83:14:cb:33:9e:4a:5f:b5:62:d1:b1:9d:e9:85:a4:3c:c2:05:
d2:39:f0:13:d2:13:a7:20:65:e8:7a:ec:d3:a0:4d:1a:2a:a4:
7b:45:7a:1d:88:58:c0:1f:74:1e:33:89:76:1c:e6:4c:14:3a:
db:24:f4:d0:47:72:a6:6a:4e:4a:95:ba:16:d7:d1:69:b6:2b:
0b:ec:8e:f0:e9:59:68:7d:41:58:a0:40:61:87:33:c7:18:d2:
0f:ca:64:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:12 2026 by rpki-client