Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/cnsxttgiA36XaxV7JTaPeGuyqcc.roa
File: cnsxttgiA36XaxV7JTaPeGuyqcc.roa (raw, json)
Hash identifier: sGH8WpARX1yy3ntIk+i6n6hKVKz1lO8h7OZfbTYPFoA=
Subject key identifier: 72:7B:31:B6:D8:22:03:7E:97:6B:15:7B:25:36:8F:78:6B:B2:A9:C7
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 01A06BE27D673CC632F2B6BCFE18FCB3AFFF
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/cnsxttgiA36XaxV7JTaPeGuyqcc.roa
Signing time: Fri 04 Sep 2026 10:06:40 +0000
ROA not before: Fri 04 Sep 2026 10:06:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50053
IP address blocks: 81.85.72.0/24 maxlen: 24
81.85.74.0/24 maxlen: 24
81.85.75.0/24 maxlen: 24
185.5.75.0/24 maxlen: 24
185.9.24.0/24 maxlen: 24
185.9.25.0/24 maxlen: 24
185.9.26.0/24 maxlen: 24
185.28.172.0/24 maxlen: 24
185.28.173.0/24 maxlen: 24
185.28.174.0/24 maxlen: 24
185.74.44.0/24 maxlen: 24
185.74.45.0/24 maxlen: 24
185.74.46.0/24 maxlen: 24
185.74.47.0/24 maxlen: 24
185.224.208.0/24 maxlen: 24
194.1.132.0/24 maxlen: 24
194.1.133.0/24 maxlen: 24
194.1.134.0/24 maxlen: 24
194.1.135.0/24 maxlen: 24
213.155.9.0/24 maxlen: 24
213.155.10.0/24 maxlen: 24
213.155.11.0/24 maxlen: 24
213.155.12.0/24 maxlen: 24
213.155.14.0/24 maxlen: 24
213.155.15.0/24 maxlen: 24
213.155.28.0/24 maxlen: 24
217.177.32.0/24 maxlen: 24
217.177.33.0/24 maxlen: 24
217.177.34.0/24 maxlen: 24
217.177.44.0/24 maxlen: 24
217.177.45.0/24 maxlen: 24
217.177.46.0/24 maxlen: 24
217.177.47.0/24 maxlen: 24
217.179.48.0/24 maxlen: 24
217.179.49.0/24 maxlen: 24
2a11:2cc0:2::/47 maxlen: 47
2a11:2cc0:4::/47 maxlen: 47
2a11:2cc0:6::/47 maxlen: 47
2a11:2cc0:8::/47 maxlen: 47
2a11:2cc0:10::/47 maxlen: 47
2a11:2cc0:20::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:e2:7d:67:3c:c6:32:f2:b6:bc:fe:18:fc:b3:af:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Sep 4 10:06:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=727b31b6d822037e976b157b25368f786bb2a9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:32:70:c2:27:00:d4:cd:5f:d3:11:a9:fb:
8f:a0:84:c9:1a:aa:ac:5d:5e:85:96:3b:06:d8:f0:
34:31:c6:eb:29:cc:5e:51:f9:98:5b:0f:48:81:5f:
c8:18:34:58:d4:fe:dc:d0:74:67:9d:ac:49:7f:01:
12:47:b8:d5:db:02:db:43:85:96:e9:f5:11:38:c4:
a0:df:76:32:64:9b:6e:de:f6:74:44:cc:66:40:d9:
6e:77:1e:f5:2d:1d:83:43:6e:cb:13:6e:f0:0f:8e:
80:3e:24:df:b1:4d:b2:08:1d:f8:c3:5a:8b:c2:53:
2c:85:e1:5b:82:57:3e:69:ad:46:9b:59:a4:86:e7:
b5:d7:53:cd:10:b0:07:3a:df:26:f5:a2:b3:f3:b0:
6e:4a:79:2a:75:dd:48:60:c8:22:b9:27:c5:e2:cf:
5a:c0:11:25:92:0b:e0:01:0a:9e:4d:43:41:43:60:
54:4d:33:09:df:3d:81:94:3d:2c:30:61:70:28:2f:
20:9a:fb:23:f2:bc:c3:bd:f7:fb:c8:77:0a:58:e8:
e9:42:a9:14:d8:55:71:48:3a:1e:33:70:55:45:3e:
f5:84:c5:5a:55:d1:43:49:bc:74:eb:85:ed:af:71:
2b:e2:3b:ad:36:8e:32:e5:69:c5:b9:42:20:dd:79:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7B:31:B6:D8:22:03:7E:97:6B:15:7B:25:36:8F:78:6B:B2:A9:C7
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/cnsxttgiA36XaxV7JTaPeGuyqcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.72.0/24
81.85.74.0/23
185.5.75.0/24
185.9.24.0-185.9.26.255
185.28.172.0-185.28.174.255
185.74.44.0/22
185.224.208.0/24
194.1.132.0/22
213.155.9.0-213.155.12.255
213.155.14.0/23
213.155.28.0/24
217.177.32.0-217.177.34.255
217.177.44.0/22
217.179.48.0/23
IPv6:
2a11:2cc0:2::-2a11:2cc0:9:ffff:ffff:ffff:ffff:ffff
2a11:2cc0:10::/47
2a11:2cc0:20::/47
Signature Algorithm: sha256WithRSAEncryption
95:4d:bb:1e:c6:f0:d2:67:bb:20:c1:9a:8e:9b:88:27:19:60:
e5:8b:f6:7a:2e:00:a8:68:4a:1b:c9:5c:12:51:7f:a8:af:e3:
b0:24:12:d3:4b:86:b3:25:03:69:9e:b0:1f:ae:6c:91:76:48:
67:d5:b1:81:3e:d3:56:5b:87:31:c9:6a:d8:37:09:69:ff:cd:
60:0a:ef:3b:73:38:56:ec:7e:0c:94:75:2a:35:87:b2:03:f1:
20:9f:0d:49:47:2c:41:d6:4e:60:e4:13:ba:13:c0:19:23:ce:
d4:f5:5f:35:a0:c0:0d:34:ff:aa:63:20:92:a9:08:0a:ad:e4:
40:03:bb:6f:dc:62:eb:a5:96:30:9e:ee:a2:93:15:80:1a:18:
5f:da:99:4f:1f:37:5b:e0:84:5c:0d:56:a1:79:91:13:04:a3:
10:bf:0b:57:73:27:3e:b1:e9:36:6b:e6:3f:5e:fb:9b:5d:66:
98:f9:c9:9d:5c:93:cd:28:3b:dd:cb:ad:5b:6d:73:cb:ee:b3:
a7:b4:32:cb:e9:3f:c1:86:e6:5f:b5:33:e8:61:6e:5b:47:80:
40:7d:e7:7b:7d:a8:29:15:45:13:ef:27:83:dd:5c:5f:c7:c5:
02:81:4d:16:28:96:3c:01:6e:45:5e:1d:2f:dc:88:47:00:1a:
56:cf:8d:c5
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAaBr4n1nPMYy8ra8/hj8s6//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm
NDI2MTEwHhcNMjYwOTA0MTAwNjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjdiMzFiNmQ4MjIwMzdlOTc2YjE1N2IyNTM2OGY3ODZiYjJhOWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IgycMInANTNX9MRqfuPoITJGqqs
XV6FljsG2PA0McbrKcxeUfmYWw9IgV/IGDRY1P7c0HRnnaxJfwESR7jV2wLbQ4WW
6fUROMSg33YyZJtu3vZ0RMxmQNludx71LR2DQ27LE27wD46APiTfsU2yCB34w1qL
wlMsheFbglc+aa1Gm1mkhue111PNELAHOt8m9aKz87BuSnkqdd1IYMgiuSfF4s9a
wBElkgvgAQqeTUNBQ2BUTTMJ3z2BlD0sMGFwKC8gmvsj8rzDvff7yHcKWOjpQqkU
2FVxSDoeM3BVRT71hMVaVdFDSbx064Xtr3Er4jutNo4y5WnFuUIg3Xl7HQIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFHJ7MbbYIgN+l2sVeyU2j3hrsqnHMB8GA1UdIwQY
MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct
MjQyNDY2ODJiZjAwLzEvY25zeHR0Z2lBMzZYYXhWN0pUYVBlR3V5cWNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw
LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG9BggrBgEFBQcBBwEB/wSBrTCBqjB6BAIAATB0AwQAUVVI
AwQBUVVKAwQAuQVLMAwDBAO5CRgDBAC5CRowDAMEArkcrAMEALkcrgMEArlKLAME
ALng0AMEAsIBhDAMAwQA1ZsJAwQA1ZsMAwQB1ZsOAwQA1ZscMAwDBAXZsSADBADZ
sSIDBALZsSwDBAHZszAwLAQCAAIwJjASAwcBKhEswAACAwcBKhEswAAIAwcBKhEs
wAAQAwcBKhEswAAgMA0GCSqGSIb3DQEBCwUAA4IBAQCVTbsexvDSZ7sgwZqOm4gn
GWDli/Z6LgCoaEobyVwSUX+or+OwJBLTS4azJQNpnrAfrmyRdkhn1bGBPtNWW4cx
yWrYNwlp/81gCu87czhW7H4MlHUqNYeyA/Egnw1JRyxB1k5g5BO6E8AZI87U9V81
oMANNP+qYyCSqQgKreRAA7tv3GLrpZYwnu6ikxWAGhhf2plPHzdb4IRcDVaheZET
BKMQvwtXcyc+sek2a+Y/XvubXWaY+cmdXJPNKDvdy61bbXPL7rOntDLL6T/BhuZf
tTPoYW5bR4BAfed7fagpFUUT7yeD3Vxfx8UCgU0WKJY8AW5FXh0v3IhHABpWz43F
-----END CERTIFICATE-----
Generated at Thu Sep 10 02:47:55 2026 by rpki-client