Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/CuSugABCdB7zi6F_EBvMDe8ahb8.roa
File: CuSugABCdB7zi6F_EBvMDe8ahb8.roa (raw, json)
Hash identifier: EbvnW6z0AclA119OauTeMbkWfl79odgaEj7o9T1G4jY=
Subject key identifier: 0A:E4:AE:80:00:42:74:1E:F3:8B:A1:7F:10:1B:CC:0D:EF:1A:85:BF
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 01A0E1C450521B9DB8ADD424732E7C40543C
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/CuSugABCdB7zi6F_EBvMDe8ahb8.roa
Signing time: Sun 27 Sep 2026 07:28:54 +0000
ROA not before: Sun 27 Sep 2026 07:28:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204106
IP address blocks: 46.20.202.0/23 maxlen: 23
46.20.202.0/24 maxlen: 24
46.20.203.0/24 maxlen: 24
77.247.198.0/24 maxlen: 24
109.74.72.0/24 maxlen: 24
2a13:1b00::/29 maxlen: 29
2a13:1b00::/32 maxlen: 32
2a13:1b00:1000::/48 maxlen: 48
2a13:1b00:4000::/48 maxlen: 48
2a13:1b01:a00::/48 maxlen: 48
2a13:1b01:ff00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:c4:50:52:1b:9d:b8:ad:d4:24:73:2e:7c:40:54:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Sep 27 07:28:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ae4ae800042741ef38ba17f101bcc0def1a85bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:6d:39:c0:10:33:68:3b:dd:94:3c:72:4b:
6e:bc:8f:0d:0e:96:d0:a1:a5:39:47:b9:50:99:bb:
ce:88:f3:8e:b8:7d:4f:e5:a1:0e:50:41:75:51:15:
6d:4a:35:66:4a:28:e3:1a:c4:90:2b:54:ed:3c:d2:
33:90:8a:99:26:ce:7c:30:bd:a7:f0:3b:6f:f5:bc:
df:1f:73:63:d6:a3:a9:eb:61:6f:e8:03:ff:e8:f8:
13:aa:aa:9e:78:95:01:94:bb:cb:ff:fb:a0:d5:43:
19:26:39:18:93:24:e8:ee:7f:d2:bd:59:17:06:30:
bf:6d:94:e2:e9:36:90:04:f4:8e:51:4d:2f:26:27:
ed:66:6d:3e:f5:0e:a7:10:7b:9a:9c:de:b8:ad:32:
58:cd:63:90:3d:d4:c9:04:6c:f5:62:7f:93:ee:03:
9b:ac:9b:f1:c1:bc:50:0c:35:6a:f4:55:c2:48:38:
2b:96:d5:f7:04:c6:c0:43:60:21:dd:46:b2:fc:c0:
bc:47:16:48:7f:b6:ea:64:76:78:91:7a:6f:ba:84:
f1:42:d9:b8:9f:1a:c6:13:ec:b4:6f:bc:71:c7:f5:
02:4b:14:80:2d:75:5e:e8:b1:27:d7:af:e2:eb:d4:
1b:98:f8:2c:21:9b:19:0d:07:e5:4b:20:1b:a0:d7:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E4:AE:80:00:42:74:1E:F3:8B:A1:7F:10:1B:CC:0D:EF:1A:85:BF
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/CuSugABCdB7zi6F_EBvMDe8ahb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.202.0/23
77.247.198.0/24
109.74.72.0/24
IPv6:
2a13:1b00::/29
Signature Algorithm: sha256WithRSAEncryption
45:5c:c9:cc:02:48:d1:cb:cd:f9:32:93:5d:e1:1a:1c:ee:83:
22:36:36:11:04:e5:6a:f1:3a:03:5d:08:25:78:49:bd:21:aa:
a8:b7:2a:fd:81:48:be:9b:36:94:d2:61:54:6d:96:dc:42:96:
88:bb:57:5c:35:10:7e:2b:ac:04:04:36:a1:da:b5:50:92:4e:
27:39:c1:a9:00:fa:f8:95:71:9a:86:65:70:97:be:bf:d7:e1:
c2:e5:8e:9a:b9:0a:2d:ed:20:c7:40:0a:59:c4:9d:98:a5:dc:
7e:e7:35:b9:31:49:51:e2:64:50:9c:71:fb:1d:ea:11:1b:d5:
06:34:24:1e:d1:a2:40:31:3a:66:a1:46:f0:64:3f:31:e0:a2:
32:28:31:09:09:94:8b:2e:90:2a:48:ab:27:84:fb:c9:ce:d4:
76:a9:b0:6a:11:8d:9d:e6:8f:c0:b5:60:ce:82:a7:c5:96:d1:
50:f4:fc:d4:94:88:85:94:af:e9:9d:8b:2d:6a:63:ad:0f:ae:
20:63:5d:97:40:be:5f:cb:4d:b2:22:11:ca:3d:3f:ba:d0:1a:
c7:35:97:82:1c:49:55:68:28:7c:63:7f:0b:18:0b:af:84:cc:
c4:6c:9b:ca:6e:a0:80:fb:e7:4d:10:f6:3d:a8:f6:9c:bb:75:
97:a5:46:18
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAaDhxFBSG524rdQkcy58QFQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjY2YWRmYjE4YjE4OWYzZGM0ZDNiZTZkYzU5NjI1NGJl
NWM5YjEwHhcNMjYwOTI3MDcyODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWU0YWU4MDAwNDI3NDFlZjM4YmExN2YxMDFiY2MwZGVmMWE4NWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2RtOcAQM2g73ZQ8cktuvI8NDpbQ
oaU5R7lQmbvOiPOOuH1P5aEOUEF1URVtSjVmSijjGsSQK1TtPNIzkIqZJs58ML2n
8Dtv9bzfH3Nj1qOp62Fv6AP/6PgTqqqeeJUBlLvL//ug1UMZJjkYkyTo7n/SvVkX
BjC/bZTi6TaQBPSOUU0vJiftZm0+9Q6nEHuanN64rTJYzWOQPdTJBGz1Yn+T7gOb
rJvxwbxQDDVq9FXCSDgrltX3BMbAQ2Ah3Uay/MC8RxZIf7bqZHZ4kXpvuoTxQtm4
nxrGE+y0b7xxx/UCSxSALXVe6LEn16/i69QbmPgsIZsZDQflSyAboNcyewIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFArkroAAQnQe84uhfxAbzA3vGoW/MB8GA1UdIwQY
MBaAFAcmat+xixifPcTTvm3FliVL5cmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjct
M2RhMDUzODhlOWFlLzEvQ3VTdWdBQkNkQjd6aTZGX0VCdk1EZThhaGI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjctM2RhMDUzODhlOWFl
LzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBLhTKAwQA
TffGAwQAbUpIMA0EAgACMAcDBQMqExsAMA0GCSqGSIb3DQEBCwUAA4IBAQBFXMnM
AkjRy835MpNd4Roc7oMiNjYRBOVq8ToDXQgleEm9Iaqotyr9gUi+mzaU0mFUbZbc
QpaIu1dcNRB+K6wEBDah2rVQkk4nOcGpAPr4lXGahmVwl76/1+HC5Y6auQot7SDH
QApZxJ2Ypdx+5zW5MUlR4mRQnHH7HeoRG9UGNCQe0aJAMTpmoUbwZD8x4KIyKDEJ
CZSLLpAqSKsnhPvJztR2qbBqEY2d5o/AtWDOgqfFltFQ9PzUlIiFlK/pnYstamOt
D64gY12XQL5fy02yIhHKPT+60BrHNZeCHElVaCh8Y38LGAuvhMzEbJvKbqCA++dN
EPY9qPacu3WXpUYY
-----END CERTIFICATE-----
Generated at Wed Sep 30 08:54:03 2026 by rpki-client