Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/cvuDyxufVhVWhWlMnXF1zqCN93I.roa
File: cvuDyxufVhVWhWlMnXF1zqCN93I.roa (raw, json)
Hash identifier: PTEo4dLV+vVvjBwn5Sv09ZXA+Sl6WOiu/4xwfD+WUrg=
Subject key identifier: 72:FB:83:CB:1B:9F:56:15:56:85:69:4C:9D:71:75:CE:A0:8D:F7:72
Certificate issuer: /CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Certificate serial: 01A110528682C350E00655B023584F33B644
Authority key identifier: 73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/cvuDyxufVhVWhWlMnXF1zqCN93I.roa
Signing time: Tue 06 Oct 2026 08:26:46 +0000
ROA not before: Tue 06 Oct 2026 08:26:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199713
IP address blocks: 5.255.48.0/21 maxlen: 21
94.198.172.0/22 maxlen: 22
138.124.224.0/22 maxlen: 22
138.124.236.0/22 maxlen: 22
185.17.96.0/22 maxlen: 22
185.22.4.0/22 maxlen: 22
185.49.36.0/22 maxlen: 22
185.100.88.0/22 maxlen: 22
213.178.132.0/22 maxlen: 22
217.30.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 21:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:52:86:82:c3:50:e0:06:55:b0:23:58:4f:33:b6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Validity
Not Before: Oct 6 08:26:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72fb83cb1b9f56155685694c9d7175cea08df772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:d7:54:71:a1:51:75:f5:6c:d5:a3:55:d5:
a8:79:5a:dd:2c:3e:3e:88:a0:46:1d:be:ba:70:f0:
45:26:56:d7:c5:73:5f:eb:87:98:d4:ca:79:22:59:
f8:a8:2a:da:f4:ec:7c:b7:cd:4a:11:54:b3:74:db:
40:eb:b3:34:de:9a:ae:6b:63:9a:f7:ad:80:68:89:
b2:78:dc:c3:b2:22:9f:3e:af:0e:70:54:c2:7f:f1:
94:c4:6d:40:c6:87:34:32:8d:a9:3d:22:04:42:df:
71:12:39:7b:06:15:15:1e:f1:d6:3c:d0:0e:73:0e:
2c:de:a9:9d:d6:61:b6:b9:02:d1:98:75:84:f2:47:
35:50:3e:59:01:8b:cc:68:f6:ad:1c:2b:9f:57:bc:
fa:65:20:92:52:1a:ce:7f:a8:af:a1:96:de:aa:37:
ba:06:00:04:ef:80:a1:75:f5:9a:62:df:00:4c:55:
46:dc:32:2f:f4:c5:51:6f:d0:ee:3b:27:cd:2f:68:
a3:74:42:71:30:c2:a7:1c:1d:de:49:df:9b:6c:8d:
8a:62:af:8b:57:af:d3:30:a9:a2:c5:ab:4e:4b:28:
00:40:28:03:f8:3b:a4:78:f9:9e:c1:a7:7a:c1:65:
7a:d9:c8:4d:62:b1:6f:c2:23:9d:a4:d7:7a:e0:06:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FB:83:CB:1B:9F:56:15:56:85:69:4C:9D:71:75:CE:A0:8D:F7:72
X509v3 Authority Key Identifier:
keyid:73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/cvuDyxufVhVWhWlMnXF1zqCN93I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.48.0/21
94.198.172.0/22
138.124.224.0/22
138.124.236.0/22
185.17.96.0/22
185.22.4.0/22
185.49.36.0/22
185.100.88.0/22
213.178.132.0/22
217.30.24.0/21
Signature Algorithm: sha256WithRSAEncryption
03:49:18:de:57:69:8f:12:d5:8e:97:29:7e:13:0a:09:a3:4a:
c7:bf:0e:0e:67:6a:5b:ae:e9:61:b4:3c:fe:28:ae:2f:f8:b9:
26:f3:ae:48:09:fd:c3:91:86:19:e8:99:92:10:1e:d3:f5:2e:
06:65:c4:c9:7e:48:1a:82:18:88:3d:9f:5e:cd:34:99:ce:57:
35:77:0b:0d:5d:26:b1:60:a1:40:9c:08:e8:95:1d:4a:d7:4b:
a1:b7:35:36:4c:fe:ca:15:b4:31:21:94:f4:1b:b9:06:95:fe:
46:70:b5:67:12:d4:c9:5b:e0:0e:fe:b6:e9:3f:82:cf:6a:e2:
2f:5a:1a:e4:94:f7:7d:e9:82:16:2c:ae:c5:1b:c2:e0:99:3c:
46:48:b0:b7:fb:60:b7:5d:2c:9f:7e:7e:98:87:b7:88:1e:72:
86:6c:37:2e:7a:03:cb:65:47:76:e1:fb:12:64:42:7b:74:d0:
40:8c:3c:83:63:b3:5f:4a:36:47:ff:4a:0c:3e:76:63:e0:e9:
17:d5:48:8f:b3:c0:fc:2e:a5:82:a2:4b:95:d5:0f:e4:50:f3:
02:df:31:34:15:d6:57:7d:f8:de:b1:c5:a1:49:cc:84:be:1a:
df:be:6a:97:ff:5d:44:07:00:a9:ad:79:d7:06:e0:d2:61:ce:
93:b0:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 08:09:42 2026 by rpki-client