Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Cs3SVjJJlC0cXRmjy7E0xkCrXpA.roa
File: Cs3SVjJJlC0cXRmjy7E0xkCrXpA.roa (raw, json)
Hash identifier: FY+vBarsIaJB5ftPCZVbsKi/8RotX5Ic5N5leCczObY=
Subject key identifier: 0A:CD:D2:56:32:49:94:2D:1C:5D:19:A3:CB:B1:34:C6:40:AB:5E:90
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F23689388DA790D41DC278E6E69B7F5CB
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Cs3SVjJJlC0cXRmjy7E0xkCrXpA.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204286
IP address blocks: 109.205.60.0/24 maxlen: 24
188.93.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:93:88:da:79:0d:41:dc:27:8e:6e:69:b7:f5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0acdd2563249942d1c5d19a3cbb134c640ab5e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:c0:e8:2a:d3:d3:f9:67:d1:2a:77:1a:52:
cb:ac:6b:68:88:5d:f0:7f:42:f4:9c:30:2e:89:93:
8f:ee:14:22:e6:40:b6:88:13:74:bd:10:be:cd:e8:
7d:ab:78:f0:b7:8c:05:e5:71:a7:87:aa:48:60:bf:
7a:9c:c4:44:49:32:10:b1:39:82:b6:de:36:36:02:
61:f5:0e:67:a7:37:26:3c:90:82:5a:16:d8:48:11:
75:55:2a:06:09:a1:54:b8:fc:08:69:27:34:01:c1:
01:41:f5:56:a7:0c:a2:70:a8:95:6b:f8:a1:bd:91:
64:f5:ae:1a:7f:6c:ba:b7:c2:be:24:10:d2:b6:0e:
94:8f:a2:e5:ae:86:27:55:1d:41:0a:da:74:8b:62:
ce:bf:0c:f6:8a:b0:78:f6:a6:9b:31:b7:42:9e:e4:
4a:32:f4:de:f1:c2:2e:16:1a:8b:81:43:12:66:76:
08:76:d7:0c:94:d6:93:54:11:6b:da:2c:dc:ba:29:
c4:51:04:94:8f:56:0e:8a:e0:24:dd:da:f0:35:af:
e7:e8:d9:62:0a:6e:6e:c2:04:bb:2f:96:46:8f:43:
39:14:1d:51:46:bf:35:41:ad:42:c7:ff:70:8a:17:
a7:50:b6:72:5d:03:21:80:0a:3e:9a:7d:7d:95:88:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CD:D2:56:32:49:94:2D:1C:5D:19:A3:CB:B1:34:C6:40:AB:5E:90
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Cs3SVjJJlC0cXRmjy7E0xkCrXpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.60.0/24
188.93.117.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f9:54:4c:11:d3:50:51:8a:77:38:91:a4:bb:e0:e4:aa:b2:
65:39:1e:a3:47:de:ae:f6:7e:f4:d1:e0:17:86:2d:0a:0c:74:
6b:4f:b4:28:e4:e4:84:c0:fc:60:f0:a3:4c:df:8b:54:d3:44:
66:76:61:ca:e6:da:22:13:b8:0b:4e:7e:73:98:cf:70:58:db:
47:55:61:2f:ac:37:76:d9:5b:d0:8a:35:8c:f5:3b:ae:31:79:
64:b5:61:34:cd:1b:9e:36:c0:e5:24:65:cb:ec:4c:a1:a8:bb:
b0:e6:bd:fa:37:cc:7e:9e:28:0a:88:40:a3:7d:07:f2:41:bf:
0c:c5:84:88:43:05:b3:cf:a4:64:8c:44:c9:f8:25:7a:22:68:
4d:b9:bc:3f:bf:b8:36:2e:5f:ad:29:08:ad:e1:f2:4c:a9:9a:
54:f8:e3:ef:89:a6:92:cf:25:1b:e5:1c:40:ec:f3:2b:db:c1:
ad:28:b7:20:89:eb:91:e8:4c:0a:bf:08:bd:cd:09:83:e8:a1:
cb:a6:05:17:a5:05:86:ec:a9:b7:6f:46:42:10:58:a8:07:34:
3d:e4:38:5b:2d:31:86:f4:60:56:9e:d4:49:2b:4a:6b:ad:b7:
ae:52:91:8a:a1:11:48:eb:33:40:6a:50:92:30:ca:16:6f:a8:
8f:3d:55:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:49:31 2026 by rpki-client