Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/CUYWUXKlSDi-O6o1gqKr212xkbo.roa
File: CUYWUXKlSDi-O6o1gqKr212xkbo.roa (raw, json)
Hash identifier: k1HnAnqag66dRZXeetGjJ31nbQ8oEhTYZdulQnQBvHI=
Subject key identifier: 09:46:16:51:72:A5:48:38:BE:3B:AA:35:82:A2:AB:DB:5D:B1:91:BA
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 01A085E22C5369117CA27AE1C161F5625EAC
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/CUYWUXKlSDi-O6o1gqKr212xkbo.roa
Signing time: Wed 09 Sep 2026 11:16:27 +0000
ROA not before: Wed 09 Sep 2026 11:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400513
IP address blocks: 88.214.192.0/24 maxlen: 24
88.214.196.0/24 maxlen: 24
88.214.197.0/24 maxlen: 24
88.214.200.0/24 maxlen: 24
88.214.202.0/24 maxlen: 24
88.214.203.0/24 maxlen: 24
88.214.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:e2:2c:53:69:11:7c:a2:7a:e1:c1:61:f5:62:5e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Sep 9 11:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0946165172a54838be3baa3582a2abdb5db191ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:51:43:41:d6:cc:96:4f:8c:28:0c:24:35:
19:e0:36:6e:5e:12:11:16:60:dd:72:c7:f0:a3:ca:
8c:bb:7b:17:3a:45:12:e7:39:b9:5b:0b:20:c4:ea:
23:e9:46:da:19:7e:36:b2:eb:c0:34:fc:96:2c:98:
8b:96:54:97:bd:d7:b6:31:27:f9:ce:60:28:8e:7e:
e9:e1:eb:5f:3d:53:19:7d:bf:2f:bf:d8:1c:b3:36:
4d:81:24:9f:7e:5f:4c:25:ad:7e:5f:cb:78:4d:a6:
cc:53:cb:0b:67:2b:81:cd:91:e3:86:c4:17:96:e1:
dc:1d:7d:c4:8b:39:59:ee:ca:a3:72:d2:fa:dd:41:
31:7d:95:60:c2:d9:4e:9a:d3:27:a5:eb:7f:ae:cb:
3a:2c:31:c1:30:38:1d:f0:60:ea:58:8c:56:76:aa:
8c:4f:5a:b6:31:39:25:a2:0a:aa:0b:e9:d5:37:f7:
e1:52:0f:82:08:a2:e4:e2:ff:df:dd:42:f2:13:fb:
cd:ff:ff:2a:e0:b5:0e:cc:9e:1b:a6:0e:b0:af:df:
d1:45:bd:31:88:bd:36:d6:4f:b3:1b:0a:41:4a:5a:
e8:dc:b0:a1:5a:7a:38:9b:88:10:9b:4b:c7:1a:d5:
2f:02:3c:fa:28:56:b6:e2:77:82:e8:05:79:10:b5:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:46:16:51:72:A5:48:38:BE:3B:AA:35:82:A2:AB:DB:5D:B1:91:BA
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/CUYWUXKlSDi-O6o1gqKr212xkbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.192.0/24
88.214.196.0/23
88.214.200.0/24
88.214.202.0-88.214.204.255
Signature Algorithm: sha256WithRSAEncryption
50:e9:31:d9:e1:28:b1:0d:1d:e6:ff:13:18:7c:a7:e1:2c:24:
26:40:95:49:3d:4d:93:f1:f9:6c:a2:4e:70:34:62:8d:d9:fd:
aa:5a:05:57:0c:10:c1:7b:02:d8:40:c3:f5:e8:24:9b:7a:b2:
38:1e:ee:f8:80:cc:8d:0e:7e:79:7f:b8:9f:84:e8:34:eb:47:
79:04:ad:e1:44:85:38:22:60:a7:05:50:09:0f:87:b6:29:23:
33:90:1d:6a:94:b1:df:85:2e:ce:39:72:44:1b:39:c9:57:f6:
7f:91:cf:ca:74:21:0a:6e:ba:86:73:90:7d:5d:9c:8d:6e:6b:
af:93:c7:3d:83:10:eb:c1:ab:7a:eb:44:ec:25:a6:67:cc:e7:
74:c9:5c:eb:e9:92:f9:df:79:89:78:b1:83:f2:db:b7:74:9d:
43:de:16:0f:eb:b3:fc:f5:ec:7a:0c:46:d4:c1:7b:43:94:d9:
6f:e3:90:0a:e4:b9:84:02:ad:ac:10:a5:39:2f:e7:67:1d:9d:
4a:6b:ff:f0:6e:e6:65:c3:47:f6:ed:12:e3:d4:09:e1:1e:c9:
fb:21:75:5a:ad:81:3c:4e:91:30:a8:1f:e6:24:4f:1c:22:4d:
54:03:8a:a8:33:2d:fe:35:60:70:22:e4:8d:2d:31:75:4c:f6:
39:9d:b0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:04:05 2026 by rpki-client