Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/csGRumIzLvV9if9_bIFsL3RnE3E.roa
File: csGRumIzLvV9if9_bIFsL3RnE3E.roa (raw, json)
Hash identifier: tiltBozvqFHHU3iwoERlFB04KrbLb6/sL/e85auuwKs=
Subject key identifier: 72:C1:91:BA:62:33:2E:F5:7D:89:FF:7F:6C:81:6C:2F:74:67:13:71
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F2368983DC1933651E2B0570233167D0D
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/csGRumIzLvV9if9_bIFsL3RnE3E.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134963
IP address blocks: 31.153.230.0/23 maxlen: 23
46.199.88.0/24 maxlen: 24
81.4.190.0/23 maxlen: 24
128.0.107.0/24 maxlen: 24
195.14.130.0/24 maxlen: 24
195.14.154.0/24 maxlen: 24
195.14.157.0/24 maxlen: 24
212.31.96.0/24 maxlen: 24
212.31.123.0/24 maxlen: 24
212.31.124.0/24 maxlen: 24
212.31.125.0/24 maxlen: 24
212.31.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:98:3d:c1:93:36:51:e2:b0:57:02:33:16:7d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72c191ba62332ef57d89ff7f6c816c2f74671371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:70:c7:14:c5:bb:10:1f:8c:c2:11:c6:1f:
00:53:a9:1c:8d:bd:bb:1f:a0:9d:d9:2a:d7:1d:77:
1e:dc:e5:09:d7:a6:ed:da:f4:84:b5:74:2d:5e:a7:
b0:2b:e8:fa:ce:11:fd:fb:25:d0:aa:69:83:79:ff:
0a:ea:c1:11:a1:db:7a:a5:10:64:45:1b:a4:46:d4:
e1:26:c8:0f:86:1a:c3:fc:88:ac:2f:65:c1:b3:02:
3b:17:67:44:43:a6:8e:43:45:9f:4d:34:61:64:6e:
fe:9c:0c:ec:ea:fd:21:84:6a:57:26:2a:5f:1a:8f:
53:fe:62:b7:dc:2f:c8:5b:24:e4:8a:d6:65:cc:fa:
40:27:c4:6d:62:29:46:44:c8:72:83:c4:10:96:01:
fd:df:47:95:2e:06:48:4d:9f:ec:6f:69:27:7e:6f:
c8:c0:1d:fe:d5:7b:6f:b7:73:e4:88:f9:5a:a4:d2:
24:8c:10:7b:09:be:0f:04:fd:73:af:57:36:98:52:
2c:e3:3c:a8:d5:cd:7f:b6:54:89:8e:42:ab:bc:b6:
d4:7c:2c:f2:24:13:7c:61:5f:36:59:0d:cc:1a:69:
62:bd:6f:88:57:fc:77:c8:b7:8e:75:42:1d:57:b1:
99:ee:39:ea:25:a5:97:12:18:64:e1:c3:3a:52:05:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C1:91:BA:62:33:2E:F5:7D:89:FF:7F:6C:81:6C:2F:74:67:13:71
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/csGRumIzLvV9if9_bIFsL3RnE3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.153.230.0/23
46.199.88.0/24
81.4.190.0/23
128.0.107.0/24
195.14.130.0/24
195.14.154.0/24
195.14.157.0/24
212.31.96.0/24
212.31.123.0-212.31.125.255
212.31.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0a:c7:8a:73:04:96:99:3a:27:04:59:70:81:5c:99:d5:0e:
c2:2a:5c:a9:f8:7b:9d:38:da:2b:9d:d1:4f:09:20:92:e4:3c:
cb:e8:17:9a:13:5b:fd:15:6a:54:27:ef:49:a0:65:ad:f2:a3:
df:67:ce:9b:f5:f7:1e:38:8d:a8:d1:d7:91:0e:47:7a:d7:02:
38:1c:53:a6:e4:70:68:d9:36:41:6a:dd:26:91:7f:d7:6d:bf:
88:69:61:2f:82:c0:7f:45:ef:99:a8:b0:5b:26:a1:5c:a8:ee:
4c:6e:10:68:de:93:89:e6:87:de:01:a9:8d:54:8f:f5:44:c9:
13:78:93:5b:f1:50:a6:37:1f:32:99:df:81:ed:cf:22:78:c3:
59:d4:b8:87:44:d2:f5:35:f6:57:df:80:cd:be:ac:67:9b:e0:
42:76:ad:df:aa:99:1d:0d:51:21:7f:8b:14:3c:ae:28:49:b8:
65:38:40:e6:b6:e6:07:2e:28:ad:82:6e:3a:05:71:50:d9:64:
ee:f2:07:02:43:76:f9:21:d1:52:36:b2:ed:aa:54:61:f2:22:
53:85:b9:0a:ff:87:71:26:fa:d9:4d:e1:56:e2:74:a1:aa:a2:
7f:d9:69:34:ea:e5:bd:4e:96:b8:2d:df:97:be:0c:01:86:f4:
1b:c5:f4:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:53 2026 by rpki-client