Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/cyswjofwxhiLYURwBc5pQOh-uII.roa
File: cyswjofwxhiLYURwBc5pQOh-uII.roa (raw, json)
Hash identifier: ceigelWuJhlhAehkLt//nXxIwryDIZplSDT94RKb2SI=
Subject key identifier: 73:2B:30:8E:87:F0:C6:18:8B:61:44:70:05:CE:69:40:E8:7E:B8:82
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F23693CEEE61A10D374E1F4B561329354
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/cyswjofwxhiLYURwBc5pQOh-uII.roa
Signing time: Thu 02 Jul 2026 15:18:47 +0000
ROA not before: Thu 02 Jul 2026 15:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48847
IP address blocks: 147.78.44.0/24 maxlen: 24
147.78.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3c:ee:e6:1a:10:d3:74:e1:f4:b5:61:32:93:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=732b308e87f0c6188b61447005ce6940e87eb882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:5e:99:c4:3f:a5:e4:9c:cf:e4:dc:0b:c2:
30:41:c9:be:8c:2c:54:2c:09:61:f6:d1:ab:52:40:
2d:82:64:48:3b:46:54:c7:d9:8c:ba:d6:17:94:0e:
e3:10:42:a5:1f:cb:80:36:ca:41:6c:5d:3e:31:25:
0d:14:7c:5d:be:ce:64:3a:6d:80:d2:6c:ed:ab:1f:
1c:51:79:5f:d4:2b:1c:b2:f4:5d:5f:01:6f:70:be:
82:ca:ab:9b:d1:47:94:70:0e:bc:ef:d5:ed:ee:20:
3d:72:b6:b4:12:51:98:fd:74:05:5c:e1:50:51:55:
ad:c4:49:2d:33:1b:b4:d3:09:b6:4a:d5:65:a1:4d:
a9:90:b5:54:53:87:02:c5:c6:2d:25:4b:82:a9:07:
56:bc:0e:a0:bc:90:1b:f6:4d:4f:1e:33:17:c4:e5:
25:67:1a:f4:65:bf:da:a4:a3:fa:a0:23:ab:f6:ec:
1e:02:db:80:4b:ee:8a:23:07:dd:34:71:1a:64:ac:
af:c0:58:8a:c9:05:cb:dc:d7:9d:53:a3:19:fc:11:
4c:69:d5:94:7a:83:f8:0d:3a:fc:07:16:f1:8a:87:
d7:0c:74:c4:be:70:90:1d:de:89:9e:77:a6:e4:15:
4e:f7:66:b6:50:fd:dc:7e:96:3c:2c:b3:05:18:c8:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2B:30:8E:87:F0:C6:18:8B:61:44:70:05:CE:69:40:E8:7E:B8:82
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/cyswjofwxhiLYURwBc5pQOh-uII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.44.0/23
Signature Algorithm: sha256WithRSAEncryption
70:4b:78:d8:a2:3c:68:e5:2d:42:d1:9f:5d:41:5d:f2:34:c7:
b7:94:1d:20:9a:d0:ac:76:10:65:2e:a4:5c:50:c6:74:88:0d:
51:6c:f1:67:bf:52:fd:02:f0:7e:01:33:a7:fd:46:59:d5:67:
27:ee:4e:51:e0:34:68:e5:6e:76:17:ab:6c:1b:ab:e5:40:89:
78:17:70:e1:c8:8b:15:57:d2:d6:1a:53:3f:83:42:21:91:69:
bc:39:f5:b2:1c:6a:73:61:ca:99:f8:a7:df:ac:71:b1:af:5e:
fa:d7:57:52:1d:11:3f:1b:3d:2f:dc:e4:eb:84:a1:d1:ea:62:
f2:e6:c8:0a:ea:12:d8:c8:01:9c:88:f9:b4:0b:f3:26:5f:84:
0f:81:4f:60:cf:ec:e3:b4:98:bb:88:84:cf:d2:36:ae:3b:f8:
12:15:4b:be:74:f4:b9:69:02:9c:b7:24:e0:d7:50:b2:f5:0d:
30:dd:2d:e5:c8:50:db:04:65:41:62:41:5e:47:01:d4:a9:7e:
d4:fa:06:4d:53:f9:b5:87:85:ce:98:1f:f9:52:22:bf:e9:fc:
f6:ab:88:6d:9d:4a:84:4a:e3:d8:3c:7d:8c:a7:85:6a:b8:89:
98:e7:65:95:5e:a4:79:c1:08:08:4a:6b:4c:e7:1d:2d:71:a7:
5f:70:23:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:51:01 2026 by rpki-client