Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/CIPqMceoslS6LHeUzahqX5ZpIbI.roa
File: CIPqMceoslS6LHeUzahqX5ZpIbI.roa (raw, json)
Hash identifier: Mj/kOm8dtViy8eTI8+PFg8dlCnOVmLacRiUDOSj27Kc=
Subject key identifier: 08:83:EA:31:C7:A8:B2:54:BA:2C:77:94:CD:A8:6A:5F:96:69:21:B2
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 019E8CBB04E555A013C793ED9C2B49657DBF
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/CIPqMceoslS6LHeUzahqX5ZpIbI.roa
Signing time: Wed 03 Jun 2026 09:05:27 +0000
ROA not before: Wed 03 Jun 2026 09:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1273
IP address blocks: 46.108.0.0/16 maxlen: 24
46.190.128.0/17 maxlen: 24
46.190.137.0/24 maxlen: 24
46.190.254.0/24 maxlen: 24
47.73.0.0/16 maxlen: 24
47.73.182.0/24 maxlen: 24
47.73.183.0/24 maxlen: 24
47.73.184.0/24 maxlen: 24
47.73.239.0/24 maxlen: 24
47.73.240.0/22 maxlen: 22
62.213.128.0/23 maxlen: 24
62.213.156.0/22 maxlen: 24
85.205.0.0/16 maxlen: 24
108.179.64.0/18 maxlen: 24
139.47.192.0/18 maxlen: 24
195.233.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:bb:04:e5:55:a0:13:c7:93:ed:9c:2b:49:65:7d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Jun 3 09:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0883ea31c7a8b254ba2c7794cda86a5f966921b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:5d:c6:19:37:16:32:dc:b7:19:dd:78:de:
6d:8f:10:84:e7:af:10:a8:7b:40:2e:19:88:d9:af:
9d:70:5a:1b:b3:1c:ae:d8:b8:7c:ab:22:a2:76:e6:
3d:7b:c9:5b:dc:07:59:69:37:e4:73:f4:2a:34:0f:
e1:f1:af:dd:d3:01:34:8d:b8:ce:a7:23:ed:ed:af:
aa:79:d8:14:50:8a:bb:0e:2c:34:2c:b9:f0:bd:9c:
70:e7:2d:01:d1:4f:02:89:07:cb:3c:a5:ae:c8:cf:
a7:12:01:86:e1:0e:da:94:a4:46:3a:57:e9:83:af:
c9:92:49:be:05:47:59:61:5f:2d:64:be:40:76:19:
cd:3e:97:12:34:f7:65:73:8b:28:68:d8:d6:a2:3b:
33:53:09:06:ba:00:9a:04:a2:e6:eb:42:3d:e1:20:
f4:44:e7:71:7e:ee:20:4b:91:c8:e6:b0:24:e3:27:
4e:77:12:77:36:c7:b6:36:70:4d:ca:16:6d:7d:cf:
af:b2:ca:15:5e:b6:d3:62:84:33:09:19:85:35:89:
d3:93:a5:12:13:db:64:ba:ce:e8:f4:4d:d4:bb:49:
c2:0c:bc:45:60:69:17:23:56:14:a0:c8:b3:ca:8e:
27:77:16:9d:4e:a3:2e:6f:a2:64:34:7b:06:56:bf:
e0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:83:EA:31:C7:A8:B2:54:BA:2C:77:94:CD:A8:6A:5F:96:69:21:B2
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/CIPqMceoslS6LHeUzahqX5ZpIbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.108.0.0/16
46.190.128.0/17
47.73.0.0/16
62.213.128.0/23
62.213.156.0/22
85.205.0.0/16
108.179.64.0/18
139.47.192.0/18
195.233.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bb:38:39:e8:7e:fd:51:9c:74:89:36:83:55:67:35:e3:cf:21:
a1:5a:ad:86:15:a3:10:4d:62:85:b1:44:a4:5f:f1:61:f8:49:
75:ae:c0:ea:78:a7:25:ad:22:ea:3a:ca:66:32:28:06:cd:6c:
80:2b:59:31:63:6d:f1:e8:9b:a1:6e:8b:43:d9:30:42:8d:04:
c5:fb:79:b0:b7:65:2d:09:b1:5d:4d:26:5b:30:4f:df:27:94:
57:bf:3b:f1:fa:f4:14:19:36:b5:f9:93:bf:45:11:a0:dc:de:
67:ff:3c:af:72:4d:b0:f2:91:c5:0d:7c:03:dd:95:69:b5:29:
de:cf:84:ec:8c:13:47:2a:30:ed:7e:02:9f:f1:4e:41:1d:4c:
16:21:08:40:c4:eb:c2:e5:c3:91:28:4e:70:f6:ea:42:21:5b:
98:d4:35:5b:d9:0c:ff:84:68:de:10:33:fc:55:8c:85:a5:d2:
37:52:e2:99:c2:e1:80:1e:e3:f8:f1:b5:e6:0a:78:61:30:21:
89:a3:14:1d:de:e3:b9:b7:44:5d:64:cb:d4:42:08:21:b4:7b:
30:8a:d3:ca:f7:7a:94:e6:d3:ef:df:0a:7b:63:9c:cc:aa:11:
ff:c9:5f:89:8b:5e:c8:95:14:d9:64:71:91:28:9a:38:81:c8:
2c:74:1b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:04 2026 by rpki-client