Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/cu5GFgpwfQEyzS26nXv6k9rJNLI.roa
File: cu5GFgpwfQEyzS26nXv6k9rJNLI.roa (raw, json)
Hash identifier: PvnG+bCRsjef7AzlsnAC7/rY5Eg1jXxPdEvS5KrmsKo=
Subject key identifier: 72:EE:46:16:0A:70:7D:01:32:CD:2D:BA:9D:7B:FA:93:DA:C9:34:B2
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019EE8F14BD1D433E5BEAA4AD8D51F3D43CF
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/cu5GFgpwfQEyzS26nXv6k9rJNLI.roa
Signing time: Sun 21 Jun 2026 06:49:48 +0000
ROA not before: Sun 21 Jun 2026 06:49:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208905
IP address blocks: 85.130.240.0/22 maxlen: 24
85.130.244.0/23 maxlen: 24
85.130.248.0/21 maxlen: 24
109.66.4.0/24 maxlen: 24
109.66.5.0/24 maxlen: 24
109.66.6.0/24 maxlen: 24
109.66.7.0/24 maxlen: 24
109.67.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:f1:4b:d1:d4:33:e5:be:aa:4a:d8:d5:1f:3d:43:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jun 21 06:49:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72ee46160a707d0132cd2dba9d7bfa93dac934b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:02:ef:c0:8e:a9:e0:fa:d7:0a:b5:25:3b:
68:b7:c2:55:ae:0a:66:2f:9f:28:52:39:e9:fc:5d:
1e:22:6b:d5:e2:0a:b3:be:c0:6f:35:c9:a6:bd:7f:
0b:9f:4b:ee:03:ef:4b:9f:9f:df:0f:ab:7f:ba:e5:
a5:10:cd:fd:70:fc:9e:80:34:b6:c3:c3:28:87:15:
a4:b9:1d:1f:89:76:ed:df:9f:31:8e:76:f9:3e:19:
d1:17:f5:06:be:16:5b:fe:bd:29:a8:d3:40:c9:45:
da:e0:f3:15:27:f0:fa:33:8f:e5:f7:ec:fe:4f:e7:
b4:ad:6b:3c:6d:78:b0:68:d4:8b:24:0d:d2:fb:5e:
b9:ea:60:f8:30:ae:6c:2c:b1:80:c6:53:81:b4:07:
b1:7f:4a:98:77:08:06:a6:32:41:4b:a3:09:3b:33:
85:b7:88:c8:03:5f:f5:9f:40:c5:e1:98:60:5a:30:
4b:ee:ad:4a:dc:57:03:e9:ef:c9:3c:a7:f7:ce:5f:
a2:81:6a:ad:21:51:47:90:d7:95:83:43:89:57:28:
4c:6d:ea:2f:2c:17:4b:66:2b:ae:96:e5:1a:bb:6d:
9e:e4:e7:e3:19:45:e3:13:09:c3:b6:04:0f:cd:33:
b8:a2:38:aa:8c:16:7b:bb:d4:d2:62:89:f7:a9:37:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EE:46:16:0A:70:7D:01:32:CD:2D:BA:9D:7B:FA:93:DA:C9:34:B2
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/cu5GFgpwfQEyzS26nXv6k9rJNLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.130.240.0-85.130.245.255
85.130.248.0/21
109.66.4.0/22
109.67.184.0/21
Signature Algorithm: sha256WithRSAEncryption
69:88:a3:77:66:e8:4a:20:1b:9a:17:b0:8f:b0:91:89:8a:ef:
14:fd:99:a2:f5:e6:5e:be:6c:97:b5:15:c8:fd:57:6d:e1:6f:
5d:95:67:3a:3f:31:93:28:2b:ae:df:cf:02:2e:73:dd:b0:a0:
c2:11:27:41:5e:8e:c1:80:d1:03:89:fc:80:73:4f:03:94:46:
59:b2:f2:25:cd:6d:3b:2f:b7:25:5d:03:98:7e:6d:4a:82:f3:
f2:94:36:f6:69:12:89:83:dc:07:24:83:44:60:b4:c1:49:bc:
22:73:9c:f1:6c:ba:9b:be:f3:cd:ed:16:57:f1:b8:55:ca:3f:
12:ee:ba:54:db:1c:16:04:35:f1:25:2d:6f:9e:4c:07:1c:c9:
25:94:e5:1a:96:13:bc:f6:69:30:b8:de:73:36:92:e4:60:b8:
45:f9:d1:81:ff:85:15:1f:01:c6:cd:8c:e4:e2:5c:c1:e7:11:
79:81:44:5a:df:f1:f6:b8:c4:d0:35:64:66:4b:05:9b:6f:32:
03:29:a9:96:89:a0:9c:8d:73:d7:d3:08:8e:f6:41:ce:b6:45:
8a:68:ca:c6:1a:b9:74:0f:bf:bf:5d:84:4e:53:c5:4d:9c:00:
2a:f0:e6:11:f4:b2:51:4f:1d:af:61:d5:05:27:bc:06:a1:b5:
f6:a6:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:27 2026 by rpki-client