Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/cwOZOPf1MyphxuXvKQp27pPkqQ8.roa
File: cwOZOPf1MyphxuXvKQp27pPkqQ8.roa (raw, json)
Hash identifier: 0v93fhmCCza1wBzfMhmM1+l4sin/jZshqNxzucWDwgI=
Subject key identifier: 73:03:99:38:F7:F5:33:2A:61:C6:E5:EF:29:0A:76:EE:93:E4:A9:0F
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 019FF0A8546822E7071139A6470D526BB386
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/cwOZOPf1MyphxuXvKQp27pPkqQ8.roa
Signing time: Tue 11 Aug 2026 11:49:51 +0000
ROA not before: Tue 11 Aug 2026 11:49:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50265
IP address blocks: 91.233.88.0/24 maxlen: 24
129.101.80.0/20 maxlen: 20
193.106.68.0/22 maxlen: 24
217.12.32.0/22 maxlen: 24
217.12.36.0/24 maxlen: 24
217.12.39.0/24 maxlen: 24
217.12.42.0/23 maxlen: 24
217.12.44.0/22 maxlen: 24
217.172.16.0/21 maxlen: 24
2a00:46e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:a8:54:68:22:e7:07:11:39:a6:47:0d:52:6b:b3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Aug 11 11:49:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73039938f7f5332a61c6e5ef290a76ee93e4a90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a3:6e:1a:c4:c3:e8:25:94:c5:29:8c:e3:86:
ad:9e:36:69:a9:d7:a9:46:31:78:65:13:8f:8f:e5:
60:32:08:31:71:cd:4f:26:89:f9:a1:51:88:1b:68:
81:53:65:40:5c:c9:64:d1:a6:28:54:be:84:9f:8d:
ea:a4:60:b3:fe:37:8b:67:d0:b2:74:b3:1f:e5:49:
b7:0e:a1:aa:9e:53:bc:d2:29:d0:7d:5a:50:f8:97:
f5:99:38:9b:86:7e:9b:e9:11:9a:87:5c:ee:fa:e7:
84:cb:23:62:89:55:88:0e:53:7a:f1:bc:f4:81:40:
2e:75:44:f5:67:f5:0e:84:21:76:d2:72:d7:fd:77:
91:1e:2a:c4:73:13:9e:1b:f3:79:e2:2c:24:22:47:
1d:ab:ce:8d:68:ba:e8:00:23:11:04:d7:03:1c:bb:
2d:6a:a1:5c:07:08:81:99:48:f8:4f:62:1a:3d:dd:
a0:66:45:49:99:36:07:27:d2:46:06:6c:61:1f:74:
13:41:de:47:a1:a0:0a:bb:6b:89:f8:14:eb:49:5d:
f0:af:c8:20:45:f4:27:3c:7b:37:06:94:92:e6:34:
0c:74:ce:90:cb:d2:70:aa:fe:49:93:ad:70:ef:79:
ea:ee:b5:14:b7:f3:cb:9b:c4:a3:b0:72:2d:24:52:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:03:99:38:F7:F5:33:2A:61:C6:E5:EF:29:0A:76:EE:93:E4:A9:0F
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/cwOZOPf1MyphxuXvKQp27pPkqQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.88.0/24
129.101.80.0/20
193.106.68.0/22
217.12.32.0-217.12.36.255
217.12.39.0/24
217.12.42.0-217.12.47.255
217.172.16.0/21
IPv6:
2a00:46e0::/32
Signature Algorithm: sha256WithRSAEncryption
47:fb:b1:a2:81:c3:e3:ea:8b:04:03:87:3c:11:cd:0a:42:db:
ef:05:49:8e:5e:6a:42:55:62:7c:63:4a:d7:82:ae:a4:e5:1a:
a5:7d:11:c3:ac:00:7e:15:9e:b5:54:9a:24:c9:62:0f:95:f8:
05:13:c5:1c:5e:cc:bf:57:e5:2e:dc:a0:46:6d:2a:6a:63:08:
0b:77:5d:ed:31:a6:6f:82:c5:5e:97:e3:20:cd:f8:b7:d7:54:
81:73:97:2c:74:ad:6c:e1:ab:d3:83:cf:d4:f3:c4:a8:ac:95:
3e:8e:33:c1:0d:ef:82:78:06:f8:66:ab:93:27:cb:91:97:55:
70:4e:7d:f1:45:2a:9a:c0:5b:7c:42:1a:23:a3:27:b6:e2:ea:
8d:d2:d3:85:bd:33:59:13:2d:04:df:57:20:65:a8:8b:f9:7e:
99:0c:c4:1d:7f:e0:18:41:2a:45:d1:0c:8f:28:b4:88:70:e8:
f6:fd:89:b0:cc:56:88:eb:db:a4:c3:e6:a0:d1:4d:99:14:e9:
cd:d3:45:13:d2:4d:c4:34:6b:40:37:05:b5:47:fd:20:6d:c5:
e8:2a:ab:0f:e6:f7:10:2a:8e:3d:7a:61:f3:3b:70:2e:2f:c3:
ec:79:a4:5f:64:fb:10:98:a4:34:38:9d:ac:32:75:f5:34:c2:
12:07:13:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:51 2026 by rpki-client