Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/civ66-pgrFe2eCRhkr6-taHf8Iw.roa
File: civ66-pgrFe2eCRhkr6-taHf8Iw.roa (raw, json)
Hash identifier: Oe9cdJCL4/fvsDIRBO2dHUMLPThjQ5LIFxDso21bdcU=
Subject key identifier: 72:2B:FA:EB:EA:60:AC:57:B6:78:24:61:92:BE:BE:B5:A1:DF:F0:8C
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019CB5A0F1B05AB210AAE1542FF3F9DC49BF
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/civ66-pgrFe2eCRhkr6-taHf8Iw.roa
Signing time: Tue 03 Mar 2026 21:35:49 +0000
ROA not before: Tue 03 Mar 2026 21:35:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 188.215.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b5:a0:f1:b0:5a:b2:10:aa:e1:54:2f:f3:f9:dc:49:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Mar 3 21:35:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=722bfaebea60ac57b678246192bebeb5a1dff08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:b6:2b:87:43:e3:1d:68:01:4b:30:2a:31:
c4:cd:df:27:a1:92:03:ee:6a:92:04:fc:bd:e6:bd:
8c:77:71:a5:b0:48:b0:45:4a:4b:d9:84:e4:a7:3e:
c3:1d:68:6f:73:40:d7:c0:9a:65:03:57:cb:57:93:
9c:f6:70:37:16:5c:62:36:6b:87:b8:21:39:19:36:
df:f1:f1:68:9b:50:b8:18:33:5b:fb:c0:2e:55:fa:
d1:9f:b5:cf:eb:47:e9:dc:c9:27:a0:63:b4:c0:c9:
2b:28:ba:8a:9b:7c:59:6b:c5:5c:4c:2f:cc:86:39:
b1:9d:6a:29:6c:ff:c6:da:82:5d:55:7e:c8:cf:bb:
01:f9:8f:ab:34:26:56:48:8b:e7:6f:15:d3:32:04:
62:2b:fb:1d:ff:40:79:e4:41:d1:69:02:1a:af:59:
ad:5c:0c:4d:48:f7:ba:79:8f:a3:19:6c:bb:16:6c:
6d:5a:c4:f4:f2:3f:7b:71:6d:e9:c2:71:b5:4a:a4:
4c:75:bc:34:67:cd:e6:c0:d2:b8:87:fd:7c:fc:70:
d5:f5:74:31:c5:c9:d0:6f:0a:76:83:b6:d5:19:e2:
45:8d:eb:8c:b3:4e:ed:b2:75:b9:43:f4:7d:21:48:
78:c8:ff:bf:5d:16:58:ed:93:d4:3e:01:ad:a3:41:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2B:FA:EB:EA:60:AC:57:B6:78:24:61:92:BE:BE:B5:A1:DF:F0:8C
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/civ66-pgrFe2eCRhkr6-taHf8Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.72.0/24
Signature Algorithm: sha256WithRSAEncryption
54:2c:89:fa:21:e8:57:dd:7d:66:ef:19:4e:d8:71:23:60:c4:
bf:cb:a5:40:fd:e0:09:9e:c4:fa:29:95:fb:30:ee:42:6a:6b:
48:a3:b3:42:98:9e:5d:4b:e1:d1:aa:54:7c:b2:89:e1:ee:0e:
7d:7a:61:67:58:49:15:7e:27:f1:55:6d:a3:c0:8a:cc:52:9b:
f5:9e:29:63:1a:fd:36:80:00:8b:75:e9:c1:ca:b0:f0:fb:5e:
af:c0:5b:6e:a5:6b:fc:cf:56:b9:e2:93:64:d7:8e:e5:40:72:
86:05:77:49:67:aa:b9:98:67:96:5c:30:9d:59:cd:17:de:2e:
2c:7a:07:56:6e:1d:8c:9b:ff:0a:67:af:6f:33:5c:57:4d:67:
ca:4d:88:50:3f:f0:62:47:9b:1b:65:dd:d8:58:de:52:c2:3c:
25:e7:10:8f:4d:67:f3:c7:3d:66:46:bf:d0:51:ef:69:a4:4f:
fa:ea:ef:9c:10:ef:27:e7:ed:f5:02:7e:b6:3f:85:95:f9:9f:
4b:93:3d:2e:7b:01:64:e7:80:95:64:7c:17:df:e1:fe:6b:4b:
e4:62:28:f9:a7:8c:1a:b6:54:dd:51:32:66:92:6b:71:08:41:
4e:e7:eb:07:55:a8:1e:a5:8e:f7:5f:99:8b:5f:9c:6a:7c:81:
4c:27:da:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:02:32 2026 by rpki-client