Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CsWnyrvnjgglg2sci6lgCcj2UHE.roa
File: CsWnyrvnjgglg2sci6lgCcj2UHE.roa (raw, json)
Hash identifier: rFh1LerxzTKDC+zVW8Yfd6soNYTtZOYe5nCOSbMyZA4=
Subject key identifier: 0A:C5:A7:CA:BB:E7:8E:08:25:83:6B:1C:8B:A9:60:09:C8:F6:50:71
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019F69903730E73AE12D45B6F827F0BC5E93
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CsWnyrvnjgglg2sci6lgCcj2UHE.roa
Signing time: Thu 16 Jul 2026 06:14:46 +0000
ROA not before: Thu 16 Jul 2026 06:14:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 80.96.64.0/23 maxlen: 23
85.121.18.0/23 maxlen: 23
85.121.36.0/23 maxlen: 23
194.102.216.0/24 maxlen: 24
217.156.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:90:37:30:e7:3a:e1:2d:45:b6:f8:27:f0:bc:5e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 16 06:14:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ac5a7cabbe78e0825836b1c8ba96009c8f65071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:4e:22:17:ce:35:24:25:e3:49:a3:64:66:
1a:b7:96:74:c1:53:07:76:5e:78:b1:bb:3b:bd:18:
db:d9:11:b1:a2:aa:d5:f8:2f:06:dc:4c:23:14:24:
2b:94:10:29:47:c1:aa:6d:11:19:8b:92:c1:62:dc:
e5:e0:00:ba:d6:b8:36:83:e4:25:15:4a:8a:47:09:
18:44:01:04:6a:36:0d:ed:13:5f:d3:37:c9:ce:f4:
27:63:40:51:9a:a7:cc:2d:6c:c2:22:86:f5:ec:ab:
50:16:45:9e:40:dd:fd:c9:71:24:6e:f2:cf:5c:37:
d8:94:14:0a:c6:b9:6b:05:51:84:71:57:1e:f2:ed:
d4:bb:86:69:f7:bd:e2:65:1a:be:03:b6:85:d2:12:
4c:60:b7:a7:3f:6c:9f:11:fe:9a:ff:b4:6f:b4:04:
b0:4a:f2:7a:e7:1a:80:70:fa:0f:69:fa:3e:f4:50:
d5:7f:90:aa:d8:ff:67:a0:d3:70:15:61:d5:07:46:
b9:ea:e2:3b:96:f3:82:a7:03:2c:46:14:37:58:4e:
02:a9:21:ac:d9:f1:db:0c:96:3f:7c:04:ef:29:01:
e1:b8:7e:fc:d9:7c:5a:00:f9:7a:f0:7f:c9:82:34:
d5:6d:17:35:a4:d0:0d:8f:12:30:99:13:94:84:a8:
7b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C5:A7:CA:BB:E7:8E:08:25:83:6B:1C:8B:A9:60:09:C8:F6:50:71
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CsWnyrvnjgglg2sci6lgCcj2UHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.64.0/23
85.121.18.0/23
85.121.36.0/23
194.102.216.0/24
217.156.91.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c0:c7:85:aa:ac:8b:f9:5f:8d:95:64:a7:68:9c:ff:31:e8:
92:62:e2:d9:ac:ec:b4:e2:24:f1:ce:e0:ba:4e:48:ee:93:d1:
1b:96:c5:43:6f:37:7b:00:0a:92:db:31:20:2a:c9:ae:35:1e:
3c:14:22:4a:dc:49:3d:d2:80:ef:c1:72:ae:61:c8:53:f6:ef:
79:3d:d7:ef:0d:c0:37:87:2e:b9:e8:9b:3b:85:f1:2f:93:85:
8b:b1:21:a3:a6:86:35:43:fa:be:2e:e0:e2:5b:fa:df:ee:49:
45:04:57:56:27:23:f6:fb:49:66:cf:7a:40:f2:dc:20:db:7c:
c2:f2:0d:d2:09:39:1a:5b:af:f2:69:23:1f:56:72:65:7f:d6:
2d:fc:67:12:ef:33:f1:ca:fc:69:ef:5f:7c:c2:df:04:78:95:
4f:4f:1f:0b:ae:c4:4e:f2:79:4b:6b:05:b9:68:0e:64:61:af:
aa:62:81:7d:84:60:05:f6:dc:b2:f5:db:ed:85:42:ca:55:b9:
c1:91:5e:28:ac:be:55:71:ff:35:6c:09:b2:e4:56:e2:a7:53:
8d:b7:37:34:a1:d9:ff:c5:40:92:ff:40:a3:fc:74:0a:83:02:
c4:b8:53:75:af:6e:37:93:51:10:4d:3d:ec:3b:9e:45:41:8a:
f4:16:b2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:43 2026 by rpki-client