Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/CyZB8kDZ8orCNuNqD0jP-3JDzQ0.roa
File: CyZB8kDZ8orCNuNqD0jP-3JDzQ0.roa (raw, json)
Hash identifier: AOydhySyRx86U77hRjFuCY7jHngtnWo+Y3ruaih4/CY=
Subject key identifier: 0B:26:41:F2:40:D9:F2:8A:C2:36:E3:6A:0F:48:CF:FB:72:43:CD:0D
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 01A0238F963955D09CA650C96222A74D4219
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/CyZB8kDZ8orCNuNqD0jP-3JDzQ0.roa
Signing time: Fri 21 Aug 2026 09:03:27 +0000
ROA not before: Fri 21 Aug 2026 09:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9119
IP address blocks: 2.58.48.0/22 maxlen: 22
45.8.0.0/22 maxlen: 22
45.15.44.0/22 maxlen: 22
45.15.44.0/23 maxlen: 23
45.15.46.0/24 maxlen: 24
45.156.140.0/23 maxlen: 23
45.156.140.0/24 maxlen: 24
46.163.0.0/19 maxlen: 19
46.163.32.0/20 maxlen: 20
46.163.48.0/21 maxlen: 21
46.163.56.0/23 maxlen: 23
46.163.56.0/24 maxlen: 24
46.163.58.0/23 maxlen: 23
46.163.58.0/24 maxlen: 24
46.163.59.0/24 maxlen: 24
46.163.60.0/22 maxlen: 22
80.65.160.0/20 maxlen: 20
80.65.160.0/24 maxlen: 24
80.65.161.0/24 maxlen: 24
80.65.162.0/24 maxlen: 24
80.65.163.0/24 maxlen: 24
80.65.164.0/24 maxlen: 24
80.65.165.0/24 maxlen: 24
80.65.166.0/24 maxlen: 24
80.65.167.0/24 maxlen: 24
80.65.168.0/24 maxlen: 24
80.65.169.0/24 maxlen: 24
80.65.170.0/24 maxlen: 24
80.65.171.0/24 maxlen: 24
80.65.172.0/22 maxlen: 22
80.65.172.0/24 maxlen: 24
80.65.173.0/24 maxlen: 24
80.65.174.0/24 maxlen: 24
80.65.175.0/24 maxlen: 24
84.41.0.0/18 maxlen: 18
84.41.0.0/19 maxlen: 19
84.41.0.0/21 maxlen: 21
84.41.32.0/19 maxlen: 19
84.41.64.0/19 maxlen: 19
84.41.96.0/21 maxlen: 21
84.41.104.0/22 maxlen: 22
84.41.108.0/23 maxlen: 23
84.41.110.0/24 maxlen: 24
84.41.111.0/24 maxlen: 24
84.41.112.0/23 maxlen: 23
84.41.114.0/24 maxlen: 24
84.41.115.0/24 maxlen: 24
84.41.116.0/22 maxlen: 22
84.41.120.0/23 maxlen: 23
84.41.122.0/23 maxlen: 23
84.41.124.0/22 maxlen: 22
85.208.172.0/24 maxlen: 24
85.208.173.0/24 maxlen: 24
85.208.174.0/24 maxlen: 24
85.208.175.0/24 maxlen: 24
91.132.74.0/23 maxlen: 23
147.78.216.0/22 maxlen: 22
147.78.216.0/24 maxlen: 24
147.78.217.0/24 maxlen: 24
147.78.218.0/24 maxlen: 24
185.54.128.0/23 maxlen: 23
185.54.128.0/24 maxlen: 24
185.54.130.0/24 maxlen: 24
185.54.131.0/24 maxlen: 24
185.175.0.0/22 maxlen: 22
212.13.224.0/19 maxlen: 19
212.103.128.0/19 maxlen: 19
213.253.64.0/19 maxlen: 19
213.253.96.0/20 maxlen: 20
213.253.96.0/21 maxlen: 21
213.253.104.0/22 maxlen: 22
213.253.108.0/22 maxlen: 22
213.253.108.0/24 maxlen: 24
213.253.109.0/24 maxlen: 24
213.253.110.0/24 maxlen: 24
213.253.111.0/24 maxlen: 24
213.253.112.0/22 maxlen: 22
213.253.116.0/22 maxlen: 22
213.253.120.0/22 maxlen: 22
213.253.124.0/22 maxlen: 22
217.199.128.0/20 maxlen: 24
217.199.128.0/24 maxlen: 24
217.199.129.0/24 maxlen: 24
217.199.130.0/24 maxlen: 24
217.199.131.0/24 maxlen: 24
217.199.132.0/24 maxlen: 24
217.199.133.0/24 maxlen: 24
217.199.134.0/24 maxlen: 24
217.199.135.0/24 maxlen: 24
217.199.136.0/24 maxlen: 24
217.199.137.0/24 maxlen: 24
217.199.138.0/24 maxlen: 24
217.199.139.0/24 maxlen: 24
217.199.140.0/24 maxlen: 24
217.199.141.0/24 maxlen: 24
217.199.142.0/24 maxlen: 24
217.199.143.0/24 maxlen: 24
2a02:800::/32 maxlen: 32
2a02:801::/32 maxlen: 32
2a02:801::/33 maxlen: 33
2a02:805::/33 maxlen: 33
2a09:e140::/29 maxlen: 29
2a0b:c300::/29 maxlen: 29
2a0b:c306::/32 maxlen: 32
2a0b:c307::/32 maxlen: 32
2a0e:1e80::/29 maxlen: 29
2a0e:2e00::/29 maxlen: 29
2a0f:2180::/29 maxlen: 29
2a0f:a6c0::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:8f:96:39:55:d0:9c:a6:50:c9:62:22:a7:4d:42:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Aug 21 09:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b2641f240d9f28ac236e36a0f48cffb7243cd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:96:d2:c8:ec:5d:3a:b3:3e:7a:23:10:ca:
78:16:c1:b2:4a:c6:2d:27:97:74:29:05:d5:5a:d2:
9f:57:c7:e9:9e:09:fd:a7:95:a6:c5:85:ba:3b:c7:
34:b6:b9:94:19:b9:a2:89:27:3b:4e:30:54:85:f8:
84:96:be:17:9b:d1:f4:d7:39:fe:de:85:40:a2:3d:
34:30:28:4e:c1:73:b7:d9:4b:75:bc:34:69:13:d1:
69:7d:a8:01:8b:9c:86:05:d2:b0:63:16:5d:74:12:
1d:a1:64:53:5e:b9:35:6c:77:e1:8e:7b:50:55:40:
a8:4b:a2:3e:33:30:ef:12:6b:51:84:f2:3a:3a:67:
81:18:28:1a:82:c8:23:09:a1:39:a8:fa:51:6c:75:
0f:e5:33:bc:01:fc:a4:6d:37:b9:ea:27:31:f3:8f:
48:2d:33:f9:f1:9e:6b:54:72:90:42:5b:08:47:c9:
51:00:7b:3c:7d:55:e5:7c:23:74:f0:a7:ab:5b:56:
14:bc:1f:10:d4:c2:e1:c4:2e:52:23:63:c1:5d:59:
43:1f:77:79:d3:c0:73:da:14:ff:bb:2f:93:47:98:
01:1d:68:dc:11:fe:51:96:f8:b1:f7:c3:71:14:73:
20:82:2b:2d:b1:48:75:0f:b0:83:75:8f:81:ef:48:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:26:41:F2:40:D9:F2:8A:C2:36:E3:6A:0F:48:CF:FB:72:43:CD:0D
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/CyZB8kDZ8orCNuNqD0jP-3JDzQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.48.0/22
45.8.0.0/22
45.15.44.0/22
45.156.140.0/23
46.163.0.0/18
80.65.160.0/20
84.41.0.0/17
85.208.172.0/22
91.132.74.0/23
147.78.216.0/22
185.54.128.0/22
185.175.0.0/22
212.13.224.0/19
212.103.128.0/19
213.253.64.0/18
217.199.128.0/20
IPv6:
2a02:800::/31
2a02:805::/33
2a09:e140::/29
2a0b:c300::/29
2a0e:1e80::/29
2a0e:2e00::/29
2a0f:2180::/29
2a0f:a6c0::/36
Signature Algorithm: sha256WithRSAEncryption
81:f3:e4:38:e1:d1:a4:48:ce:38:5e:ae:55:3d:97:86:5c:b9:
a6:7b:f2:40:13:4c:23:5f:4a:55:64:cd:73:73:03:68:a9:87:
95:09:4c:69:2b:39:0d:01:bd:56:a5:a6:a3:73:4f:3a:9a:4d:
8e:ce:bb:f8:53:82:89:eb:ec:76:0c:be:b0:17:a9:ec:86:34:
fc:22:4d:81:22:16:4e:b8:12:a3:7e:0b:e5:db:48:2f:3f:fd:
47:99:ea:5b:c1:4c:77:87:fe:58:6e:ce:b7:f8:45:5f:e2:ff:
95:b1:a1:a2:39:37:d2:f3:2b:47:0f:fc:50:b4:71:e3:ed:95:
9e:6b:28:d8:17:a9:11:bb:c0:80:8c:05:c1:f8:67:85:9d:a2:
6f:d8:18:4a:d8:b1:cc:9d:dc:6f:00:47:95:d4:6f:ec:1c:36:
23:dd:f4:cf:ca:7a:8c:f6:60:91:d7:c2:fe:5b:ca:3a:d6:0b:
5b:67:3f:dd:22:96:89:eb:85:41:95:fe:5d:8f:22:04:cd:fa:
3b:2b:38:50:93:97:88:ed:48:c7:e8:4a:16:56:90:82:0a:63:
fa:f5:6f:09:af:bd:37:71:ac:7b:a5:0c:37:78:23:95:68:81:
25:ce:6d:06:b8:63:9d:cb:19:38:5f:2b:ac:4a:9e:d2:6e:4e:
a8:b9:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:45:46 2026 by rpki-client