Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Cg5FaKG67uP3SPgq_VSkJRLg6D0.roa
File: Cg5FaKG67uP3SPgq_VSkJRLg6D0.roa (raw, json)
Hash identifier: j3qDHySSQdId0uGBx2KNwYnD9BeODhiYFkQVPncbDdc=
Subject key identifier: 0A:0E:45:68:A1:BA:EE:E3:F7:48:F8:2A:FD:54:A4:25:12:E0:E8:3D
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019FAE4FD46523D2C7891694B4457A0905DA
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Cg5FaKG67uP3SPgq_VSkJRLg6D0.roa
Signing time: Wed 29 Jul 2026 14:38:15 +0000
ROA not before: Wed 29 Jul 2026 14:38:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206148
IP address blocks: 83.68.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:4f:d4:65:23:d2:c7:89:16:94:b4:45:7a:09:05:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jul 29 14:38:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a0e4568a1baeee3f748f82afd54a42512e0e83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:a3:c2:88:cb:e7:7e:0e:47:f4:08:3c:87:
58:92:39:24:c6:31:8a:33:2a:4d:05:c8:31:1a:73:
32:95:09:3b:aa:90:54:1d:6b:70:1d:78:17:3e:10:
2d:76:e3:b3:48:a2:c4:26:39:f6:83:19:31:7d:bf:
45:ce:09:0f:a5:3d:49:26:ad:01:03:15:e6:89:ac:
a5:81:18:a4:e1:9f:e9:59:13:aa:a1:8a:b2:7b:d7:
30:8c:91:bf:ef:8d:58:e3:30:e2:d2:c6:c2:3e:d0:
5d:7a:07:db:48:c1:ac:24:af:99:0e:c3:70:e2:e2:
bf:0a:78:17:30:d3:48:4b:5c:1a:6e:f1:3e:c2:fa:
04:27:57:b7:48:6a:a2:00:1f:05:f8:b4:3b:c8:27:
cb:9f:56:d9:f4:14:78:9d:59:aa:78:4f:97:1c:76:
5b:0d:4e:7a:3b:d6:26:4a:80:58:1a:98:c5:3a:a7:
f6:ec:7c:ab:f5:9d:1c:5d:96:f9:40:0d:e2:00:f3:
4d:f2:38:13:c0:3f:f8:ca:c8:66:6b:c9:5f:6c:3c:
f4:34:b0:4b:96:58:4d:56:f1:16:59:e8:78:b4:60:
e4:fb:cf:68:61:60:ba:77:2f:0b:27:25:50:33:fc:
b5:28:bb:ff:65:44:53:a4:1c:8d:08:3a:f5:a6:25:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0E:45:68:A1:BA:EE:E3:F7:48:F8:2A:FD:54:A4:25:12:E0:E8:3D
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Cg5FaKG67uP3SPgq_VSkJRLg6D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.68.142.0/24
Signature Algorithm: sha256WithRSAEncryption
df:4c:cb:8d:96:de:f7:c1:be:56:8d:14:34:d1:9a:d6:d1:e6:
22:3c:28:f2:05:42:b0:71:f8:e2:d9:e3:c8:c1:00:f3:c2:f3:
97:1c:f5:2d:cd:f8:a6:19:2f:50:2c:40:3d:04:b1:84:f4:52:
db:86:f1:77:af:e1:84:29:e1:9d:5b:e8:fa:59:1f:31:02:b2:
2f:0b:7d:68:73:06:5a:7f:21:1e:87:82:8f:24:dd:72:dd:79:
64:9e:ca:68:63:65:0f:3d:6a:99:36:48:35:92:a6:dc:81:a3:
49:dd:4c:c6:e0:1c:9b:c0:1d:67:37:63:f3:3f:9a:c3:4b:9c:
20:c3:43:28:6e:3f:f3:03:4b:39:3c:88:03:30:92:16:b7:02:
42:2a:8c:cf:0b:66:19:45:d5:2c:27:0a:58:a6:b9:5f:d1:cd:
85:ee:36:3b:db:1e:c5:b7:e7:9f:25:7a:8d:bb:ff:05:6c:62:
f9:63:fa:2a:79:4b:86:4e:37:06:53:e8:4c:47:18:94:c1:ce:
85:2f:3a:90:95:37:ce:dd:17:c6:ac:48:2e:9f:85:cd:a9:8c:
c2:0c:ca:ed:0c:f0:02:bb:e9:54:0b:9c:4c:44:cd:4b:7a:18:
32:0f:7f:63:38:24:3a:c5:b9:a4:55:b9:7c:bf:02:0d:fd:24:
97:de:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:46 2026 by rpki-client