Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wO6NUv7cerTKkssgwOcQG20_Cps.roa
File: wO6NUv7cerTKkssgwOcQG20_Cps.roa (raw, json)
Hash identifier: ihZ5Hyj8N9phUUytwSwhBzSyZxFPU8MdHV1rQQ+N3aY=
Subject key identifier: C0:EE:8D:52:FE:DC:7A:B4:CA:92:CB:20:C0:E7:10:1B:6D:3F:0A:9B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A183CCD09DB5F6D11ADAE9EFD1F0543846
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wO6NUv7cerTKkssgwOcQG20_Cps.roa
Signing time: Wed 28 Oct 2026 18:36:40 +0000
ROA not before: Wed 28 Oct 2026 18:36:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:cc:d0:9d:b5:f6:d1:1a:da:e9:ef:d1:f0:54:38:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 28 18:36:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0ee8d52fedc7ab4ca92cb20c0e7101b6d3f0a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:91:e2:ca:2f:d1:b2:eb:86:71:c5:3d:30:c7:
d7:c5:8f:fb:7f:66:49:f4:a0:75:b6:fd:82:41:bc:
46:a2:2c:c4:d2:a6:b1:16:0a:34:7b:26:25:9a:7d:
2e:25:99:85:55:d9:90:9f:2a:00:e0:ea:ad:73:28:
e5:aa:08:ee:3c:5f:19:bb:12:bb:b6:2b:00:0f:aa:
d5:7d:4e:66:79:ee:78:e9:c0:f7:ad:19:c4:5d:67:
53:2a:1c:ad:42:73:ac:8a:b6:36:e8:db:85:7d:07:
fe:24:74:66:89:89:09:2f:72:4a:20:79:b5:4b:fb:
bd:5d:c1:4f:c5:d2:8e:95:2e:da:53:de:a9:73:8d:
fe:d4:8e:1d:4c:ab:e1:4f:a0:e0:f3:48:1e:c8:3f:
41:97:96:22:ca:38:09:ad:e1:cb:b4:51:e6:b0:dc:
19:16:e0:c5:85:38:89:b6:2b:af:2e:f7:b8:26:26:
b0:27:4a:b8:ac:8c:a7:0a:93:d2:7f:7a:f3:ba:47:
9e:69:10:68:2a:17:26:87:c2:9c:98:51:bf:21:b1:
49:20:85:f6:98:17:44:76:9a:2a:1e:8b:3f:96:4c:
81:ee:ea:79:0b:6b:b0:ca:5a:27:f1:99:7e:92:c2:
09:d2:ad:ec:eb:a1:94:c0:fb:30:ea:d4:3f:a9:06:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EE:8D:52:FE:DC:7A:B4:CA:92:CB:20:C0:E7:10:1B:6D:3F:0A:9B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wO6NUv7cerTKkssgwOcQG20_Cps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/23
45.13.190.0/24
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.132.181.0/24
77.83.37.0/24
85.209.120.0/24
193.57.41.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ac:73:20:71:e6:1f:98:0c:d1:c6:ab:cb:41:3f:7d:b1:6c:
43:10:ea:f1:26:5c:7f:84:72:51:9e:0a:81:28:00:1c:74:f9:
ef:b2:88:e4:44:77:75:ca:b3:56:04:8a:70:9b:c0:b3:30:e2:
62:ed:9c:03:5c:3e:ad:df:f9:7a:0a:ff:b2:14:44:64:43:0b:
9d:8e:5c:d3:07:42:3f:7f:37:03:81:ea:a3:22:a6:4a:84:11:
cb:03:db:c3:28:45:0d:03:2e:9e:47:76:17:e5:bb:24:94:b1:
d5:eb:78:3d:1d:00:7d:13:8c:e4:55:a7:ab:79:6e:f8:5d:7a:
9a:41:3e:6a:db:68:0b:b1:43:77:f3:87:29:1e:99:84:e8:9e:
ed:7c:96:2f:25:a4:28:ab:51:12:cc:30:38:97:26:c5:a4:f3:
3e:fe:20:05:e0:c3:89:d9:35:58:b0:de:6d:08:80:47:d2:8d:
63:8e:0f:a4:38:0d:1d:a4:ca:e1:04:df:c1:17:d0:07:aa:c6:
29:19:68:c1:f0:6c:1d:10:88:a1:91:05:a0:1d:38:31:a0:8d:
33:da:1d:74:58:8f:a0:ba:01:0a:84:9a:d8:b6:f1:02:78:ea:
65:03:31:2f:ee:c3:35:ac:8d:76:76:91:af:b8:86:96:0f:39:
80:90:68:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:49:29 2026 by rpki-client