Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/cCGjg4XzTc3pEaK_mTMtjfqn-7c.roa
File: cCGjg4XzTc3pEaK_mTMtjfqn-7c.roa (raw, json)
Hash identifier: 1tSuqi6hCgn9hDt1Fs9KBXjdD9w2D6iyCWWFyOTE/48=
Subject key identifier: 70:21:A3:83:85:F3:4D:CD:E9:11:A2:BF:99:33:2D:8D:FA:A7:FB:B7
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A04263C554426D1A8D3DA73B911B8D0503
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/cCGjg4XzTc3pEaK_mTMtjfqn-7c.roa
Signing time: Thu 27 Aug 2026 08:43:49 +0000
ROA not before: Thu 27 Aug 2026 08:43:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402840
IP address blocks: 109.66.76.0/24 maxlen: 24
109.66.78.0/24 maxlen: 24
109.66.131.0/24 maxlen: 24
109.66.139.0/24 maxlen: 24
109.66.154.0/24 maxlen: 24
109.66.161.0/24 maxlen: 24
109.66.179.0/24 maxlen: 24
109.66.192.0/24 maxlen: 24
109.66.195.0/24 maxlen: 24
109.66.214.0/24 maxlen: 24
109.66.218.0/24 maxlen: 24
109.66.223.0/24 maxlen: 24
109.66.225.0/24 maxlen: 24
109.66.231.0/24 maxlen: 24
109.66.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:63:c5:54:42:6d:1a:8d:3d:a7:3b:91:1b:8d:05:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 27 08:43:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7021a38385f34dcde911a2bf99332d8dfaa7fbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:35:a5:35:7f:f3:6b:d6:d9:85:2d:6a:50:
b5:42:52:74:ce:18:04:9c:c2:70:0a:84:6a:fb:56:
4c:3b:f3:1f:02:33:10:4c:68:11:01:21:07:36:a3:
a6:ef:ae:34:60:db:46:ae:bf:00:ed:1a:12:a3:3e:
29:ce:5e:5a:8c:f1:d3:28:53:18:d8:4c:6c:e0:bf:
10:b4:b7:a6:0a:f6:cd:55:c3:22:9f:39:48:f6:f4:
7a:9d:7d:2c:02:ec:e5:53:fd:50:bb:c1:d2:c7:05:
14:05:59:94:47:ad:41:83:3c:1e:a2:97:4a:b1:6b:
c6:fe:3a:c7:57:82:36:b0:99:fc:d3:af:bf:bb:ac:
44:87:9c:c3:13:c5:16:d6:69:7d:43:7e:85:0c:54:
2b:83:2e:0c:c0:cf:21:d3:94:01:e8:56:1e:35:b5:
fd:32:da:48:a9:0a:86:8d:7f:1e:b7:b3:4d:6c:a0:
dd:70:ac:97:ad:b7:96:68:7c:80:7c:24:f8:fd:ee:
5d:14:1d:02:fe:24:75:64:37:4a:50:fb:ef:47:b9:
6a:fa:d8:ce:fb:ca:1d:85:a0:35:c5:20:b6:f4:bd:
5e:c2:3c:a9:4d:d0:a1:84:67:f1:02:bf:46:4f:51:
fa:24:c4:18:0a:b7:84:4c:f9:e0:84:6c:ac:a3:fb:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:21:A3:83:85:F3:4D:CD:E9:11:A2:BF:99:33:2D:8D:FA:A7:FB:B7
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/cCGjg4XzTc3pEaK_mTMtjfqn-7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.76.0/24
109.66.78.0/24
109.66.131.0/24
109.66.139.0/24
109.66.154.0/24
109.66.161.0/24
109.66.179.0/24
109.66.192.0/24
109.66.195.0/24
109.66.214.0/24
109.66.218.0/24
109.66.223.0/24
109.66.225.0/24
109.66.231.0/24
109.66.248.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e5:8f:86:a9:ee:52:74:86:2a:3f:9c:2c:ee:02:df:82:82:
8c:17:1a:8c:03:03:7f:fc:a3:07:d9:1b:29:2d:65:44:21:8b:
90:18:31:5a:00:ad:12:98:d0:a1:c0:37:65:df:24:1a:7c:8b:
e0:94:8d:5b:4d:cf:32:a4:ef:78:24:c7:5e:aa:76:16:42:c4:
7a:31:3c:76:f0:d2:8e:43:3c:7c:59:8c:3e:e9:2c:3a:15:6b:
fd:d5:a1:1f:b3:38:ef:f3:56:09:85:bd:bb:43:0e:6a:6f:21:
7d:84:82:24:80:e6:b2:4c:8a:29:0a:60:ab:a4:ff:6a:ab:f6:
af:af:31:e1:5f:b5:9d:28:76:89:67:3d:52:36:ed:66:5c:7d:
21:42:96:e2:7d:a3:30:1c:3c:f6:65:ff:83:e9:86:23:33:d8:
88:a4:40:0e:7b:38:4b:d5:df:94:fd:5a:e5:1c:8d:b3:44:d5:
92:6c:8e:19:1e:0f:f8:c4:3e:a5:87:75:1a:2b:27:5b:7c:0b:
03:27:ea:ba:f2:34:29:f1:92:5f:bb:d8:e7:05:43:02:68:59:
2b:ec:81:14:6c:3a:74:98:fe:69:47:34:a0:d5:f9:6d:d6:de:
92:b1:b6:65:99:cf:c3:85:e4:90:5f:c2:c7:b8:1d:15:fd:9a:
34:c2:56:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:23 2026 by rpki-client