Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/cgXla_H1wPZyxHLUsOIMxasa0XQ.roa
File: cgXla_H1wPZyxHLUsOIMxasa0XQ.roa (raw, json)
Hash identifier: 8L08U1OONPB8hffGZKPs5rl/6OC0pTA/INz8Jl42oeI=
Subject key identifier: 72:05:E5:6B:F1:F5:C0:F6:72:C4:72:D4:B0:E2:0C:C5:AB:1A:D1:74
Certificate issuer: /CN=5b7747fb1596ec1d081867e5e3d2a2b873848635
Certificate serial: 019FC791E830217E23CFBA26021256342B2E
Authority key identifier: 5B:77:47:FB:15:96:EC:1D:08:18:67:E5:E3:D2:A2:B8:73:84:86:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/cgXla_H1wPZyxHLUsOIMxasa0XQ.roa
Signing time: Mon 03 Aug 2026 12:20:55 +0000
ROA not before: Mon 03 Aug 2026 12:20:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 553
IP address blocks: 129.69.0.0/16 maxlen: 16
129.143.0.0/16 maxlen: 16
141.58.0.0/16 maxlen: 16
141.70.0.0/16 maxlen: 16
141.70.128.0/17 maxlen: 17
192.67.189.0/24 maxlen: 24
192.67.208.0/24 maxlen: 24
192.108.35.0/24 maxlen: 24
192.108.36.0/22 maxlen: 22
192.108.40.0/22 maxlen: 22
192.108.44.0/24 maxlen: 24
193.196.0.0/15 maxlen: 15
193.196.0.0/21 maxlen: 21
193.196.9.0/24 maxlen: 24
193.196.13.0/24 maxlen: 24
193.196.16.0/20 maxlen: 20
193.196.64.0/18 maxlen: 18
193.196.129.0/24 maxlen: 24
193.196.130.0/23 maxlen: 23
193.196.132.0/22 maxlen: 22
193.196.136.0/21 maxlen: 21
193.196.144.0/21 maxlen: 21
193.196.152.0/24 maxlen: 24
193.196.154.0/23 maxlen: 23
193.196.156.0/22 maxlen: 22
193.196.160.0/21 maxlen: 22
193.196.160.0/22 maxlen: 22
193.196.165.0/24 maxlen: 24
193.196.166.0/23 maxlen: 23
193.196.168.0/21 maxlen: 21
193.196.176.0/20 maxlen: 20
193.196.192.0/18 maxlen: 18
193.197.0.0/24 maxlen: 24
193.197.4.0/23 maxlen: 23
193.197.8.0/22 maxlen: 22
193.197.20.0/23 maxlen: 23
193.197.28.0/22 maxlen: 22
193.197.32.0/19 maxlen: 19
193.197.64.0/22 maxlen: 22
193.197.68.0/23 maxlen: 23
193.197.70.0/24 maxlen: 24
193.197.80.0/22 maxlen: 22
193.197.85.0/24 maxlen: 24
193.197.86.0/23 maxlen: 23
193.197.94.0/24 maxlen: 24
193.197.112.0/22 maxlen: 22
193.197.120.0/21 maxlen: 21
193.197.130.0/24 maxlen: 24
193.197.132.0/22 maxlen: 22
193.197.136.0/21 maxlen: 21
193.197.149.0/24 maxlen: 24
193.197.152.0/22 maxlen: 22
193.197.157.0/24 maxlen: 24
193.197.160.0/22 maxlen: 22
193.197.168.0/21 maxlen: 21
193.197.180.0/22 maxlen: 22
193.197.200.0/21 maxlen: 21
193.197.212.0/24 maxlen: 24
193.197.224.0/19 maxlen: 19
2001:7c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:91:e8:30:21:7e:23:cf:ba:26:02:12:56:34:2b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7747fb1596ec1d081867e5e3d2a2b873848635
Validity
Not Before: Aug 3 12:20:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7205e56bf1f5c0f672c472d4b0e20cc5ab1ad174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e0:00:79:f6:44:55:cd:e9:61:ac:d7:c3:92:
3d:9d:70:b9:8d:a4:ed:ba:94:01:88:ec:20:63:a5:
d9:62:11:4d:02:95:e0:5b:4e:69:be:e3:11:a2:96:
fa:bc:a5:70:b1:7c:54:3a:8e:4b:33:e9:11:6a:4d:
25:dd:76:a6:41:bf:dd:d5:c9:23:8b:86:76:09:ca:
35:50:31:53:56:f6:66:86:12:35:01:09:d0:7b:4b:
fe:59:51:a9:45:f8:fb:b0:97:ca:27:37:d5:56:bd:
b4:45:65:29:67:86:9a:10:67:64:ef:6b:a0:dc:31:
40:d9:61:60:c4:ee:c8:f5:05:7d:3d:b1:a3:69:00:
fd:46:72:c4:04:2b:f8:43:03:84:59:5d:6a:ef:c9:
e2:67:cd:b3:f6:ea:3f:a5:60:ab:8e:d1:91:d7:77:
7a:68:85:cd:f8:ac:a1:41:6b:41:bc:10:6b:c8:06:
c2:b1:be:da:0d:96:3d:ad:0b:0b:00:15:01:06:d4:
2b:8a:76:d0:dd:9d:2d:7b:7b:bb:c5:0a:cc:e3:cc:
4c:6c:fc:52:cf:4a:6d:e7:04:c7:79:4e:aa:06:ac:
42:2c:5b:32:f0:04:2e:e8:da:2d:c8:8c:32:45:76:
c9:a7:ec:ac:18:79:ce:46:08:20:8f:b6:5d:8d:f4:
be:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:05:E5:6B:F1:F5:C0:F6:72:C4:72:D4:B0:E2:0C:C5:AB:1A:D1:74
X509v3 Authority Key Identifier:
keyid:5B:77:47:FB:15:96:EC:1D:08:18:67:E5:E3:D2:A2:B8:73:84:86:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/cgXla_H1wPZyxHLUsOIMxasa0XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.69.0.0/16
129.143.0.0/16
141.58.0.0/16
141.70.0.0/16
192.67.189.0/24
192.67.208.0/24
192.108.35.0-192.108.44.255
193.196.0.0/15
IPv6:
2001:7c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:78:57:c3:2b:49:6f:01:06:5d:59:05:23:91:23:06:2b:f4:
50:c3:00:4e:e6:47:ae:b1:29:e2:c3:6e:5c:a8:14:d9:58:5b:
2d:83:bf:0c:e5:05:fc:09:9b:eb:28:69:f5:dd:9c:58:cc:87:
d3:4e:35:96:0e:b3:f4:d9:fc:e7:25:b0:69:d8:a1:1f:e1:75:
e5:de:f6:37:09:7d:08:04:1e:86:8c:b3:5c:e7:dc:9d:b1:a2:
a0:97:ff:19:6b:d4:99:da:e4:a8:44:82:80:32:28:cf:05:33:
6d:7b:9f:89:72:1d:96:90:f6:c9:8c:d4:dc:1c:36:e8:7d:8a:
80:6f:fe:0c:43:22:6e:66:ee:42:0f:0a:04:e9:e5:02:c5:76:
ca:da:2c:22:dc:a9:14:8a:16:21:53:47:fa:3c:3c:84:3f:41:
48:37:6a:6d:7a:d5:81:2d:b9:54:04:90:2b:66:7d:f6:48:d6:
b2:eb:29:b5:45:23:92:3f:66:14:87:5a:83:24:8c:6b:55:18:
ca:b7:71:74:e6:f2:73:79:9f:a8:9e:9d:70:73:d5:e7:cc:f1:
40:a6:04:3f:03:69:bd:e3:01:61:24:d2:6d:b1:0b:6e:83:b3:
25:50:95:74:bf:1a:8c:3e:2e:4b:d3:c4:a9:d5:8a:43:38:2e:
d1:36:f5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:23 2026 by rpki-client