Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/cimLTdgD8ukTyEy4eFNyf55PNR4.roa
File: cimLTdgD8ukTyEy4eFNyf55PNR4.roa (raw, json)
Hash identifier: jbd+LyuvW0274DhC8DibiCTn8R1aB5kxj9ISDh8MMC8=
Subject key identifier: 72:29:8B:4D:D8:03:F2:E9:13:C8:4C:B8:78:53:72:7F:9E:4F:35:1E
Certificate issuer: /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial: 01A02066424B04D8C7E8A397C88C6EA0DA58
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/cimLTdgD8ukTyEy4eFNyf55PNR4.roa
Signing time: Thu 20 Aug 2026 18:19:27 +0000
ROA not before: Thu 20 Aug 2026 18:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29665
IP address blocks: 91.189.72.0/21 maxlen: 21
93.157.65.0/24 maxlen: 24
93.157.66.0/24 maxlen: 24
93.157.67.0/24 maxlen: 24
93.157.68.0/24 maxlen: 24
93.157.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:66:42:4b:04:d8:c7:e8:a3:97:c8:8c:6e:a0:da:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Validity
Not Before: Aug 20 18:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72298b4dd803f2e913c84cb87853727f9e4f351e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:13:00:4f:76:32:89:49:33:f2:1c:26:4c:
59:63:32:b9:05:0c:31:de:5c:31:90:39:95:21:37:
78:fe:02:0c:3b:9a:d6:63:54:43:0d:e3:37:a3:96:
11:20:ca:a0:57:4b:11:f5:24:96:0a:bc:b8:e0:be:
04:35:f5:24:8b:27:fd:bf:f7:ff:77:9d:a2:20:35:
e1:bb:c3:ad:45:bb:3d:5d:40:d7:99:5d:ad:d2:e1:
66:dc:af:4b:f3:ee:64:ca:9f:50:5d:45:fd:ab:a0:
cf:de:e8:57:47:f8:56:38:d2:9c:b4:67:a6:ee:6f:
a9:20:f7:0a:5e:39:c5:44:02:bf:e9:30:13:d8:7c:
cc:f2:6c:1c:e5:df:82:db:15:04:61:07:ca:db:89:
44:83:57:6f:2a:18:c2:06:4a:26:3d:68:8a:b6:32:
06:43:20:d0:3e:3c:b6:6c:2b:28:8c:52:71:30:c2:
f0:33:7e:03:49:60:63:d3:3f:4a:b4:d7:62:0e:3a:
fb:f8:a8:48:9c:d6:e0:a3:5d:87:ce:82:06:90:3c:
ca:0b:74:b2:03:8f:6a:48:f0:9c:b6:fb:16:ae:a3:
01:9f:d9:56:3b:06:95:09:16:e8:28:9c:eb:2d:79:
67:d7:62:62:c1:47:62:71:a1:82:71:a6:5d:bc:d3:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:29:8B:4D:D8:03:F2:E9:13:C8:4C:B8:78:53:72:7F:9E:4F:35:1E
X509v3 Authority Key Identifier:
keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/cimLTdgD8ukTyEy4eFNyf55PNR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.72.0/21
93.157.65.0-93.157.68.255
93.157.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5c:6c:55:f5:8d:0c:84:99:5b:58:43:d6:22:4a:eb:8b:bc:
2c:0d:84:b3:f1:37:22:2a:0e:00:e6:db:64:7a:95:ba:a1:27:
eb:d6:fd:f5:c8:6b:00:d4:c9:bf:91:b0:79:2a:10:c8:36:36:
bb:3f:c7:0e:e7:b6:bf:2a:c2:c5:9c:7b:94:80:fe:1e:81:e7:
33:e0:0f:e6:9d:c3:1d:79:df:65:b9:69:dd:94:eb:63:97:51:
c2:b6:ea:31:32:30:73:24:11:8c:50:8d:f4:27:57:f9:7b:bd:
35:c6:31:f9:03:b3:49:d8:45:2e:40:a5:6b:39:26:ed:30:ae:
ca:63:13:9f:d4:8d:f6:8b:f7:93:57:58:15:98:00:e1:3f:6a:
ec:37:d1:60:b3:a2:8d:45:ee:1e:9c:24:de:8d:bb:54:85:e0:
ea:2d:f9:d8:58:22:6b:ba:cd:96:e3:22:34:84:a2:74:1a:f4:
17:0b:d8:65:04:e0:fb:3a:9c:88:8f:8a:42:63:b4:fc:d5:b3:
ce:cd:08:da:09:14:06:30:27:d6:80:bf:39:60:d0:9c:00:3f:
20:dc:b0:44:47:1c:db:70:e3:5c:6c:cb:cb:22:54:a5:c3:e2:
c3:c2:93:6c:23:98:46:d9:fb:c8:25:54:0d:f8:5a:dd:0d:82:
91:fb:52:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:13:35 2026 by rpki-client