Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/cYI7hShRzFcEuWRGSDSmNo5vLqg.roa
File: cYI7hShRzFcEuWRGSDSmNo5vLqg.roa (raw, json)
Hash identifier: UmsupbsK5Mh+LPidO6EpoMFIGucQ1xImIa9euVny9OE=
Subject key identifier: 71:82:3B:85:28:51:CC:57:04:B9:64:46:48:34:A6:36:8E:6F:2E:A8
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A091578655EB309D678C2E3A7DBCB83EC1
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/cYI7hShRzFcEuWRGSDSmNo5vLqg.roa
Signing time: Fri 11 Sep 2026 16:40:27 +0000
ROA not before: Fri 11 Sep 2026 16:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2.56.0.0/22 maxlen: 22
88.214.54.0/24 maxlen: 24
188.95.67.0/24 maxlen: 24
194.41.114.0/24 maxlen: 24
217.147.14.0/23 maxlen: 23
2a0e:f180::/29 maxlen: 29
2a10:eac0::/29 maxlen: 29
2a11:400::/29 maxlen: 29
2a11:1440::/29 maxlen: 29
2a11:2500::/29 maxlen: 29
2a11:4200::/29 maxlen: 29
2a11:5280::/29 maxlen: 29
2a11:8240::/29 maxlen: 29
2a11:e800::/29 maxlen: 29
2a11:e940::/29 maxlen: 29
2a12:d500::/29 maxlen: 29
2a12:de00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:57:86:55:eb:30:9d:67:8c:2e:3a:7d:bc:b8:3e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 11 16:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71823b852851cc5704b964464834a6368e6f2ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:33:4d:f7:44:ca:17:65:48:af:ab:a8:c2:
b8:f4:8c:1a:2a:48:a2:dc:43:ce:87:04:26:57:20:
31:01:e7:f9:54:f4:69:5d:24:8f:d9:59:c6:ff:9c:
6e:95:03:b5:2d:89:a0:2c:3b:0d:a2:17:b3:75:7e:
ba:98:f8:32:03:c9:70:93:d5:48:80:a9:bd:ee:06:
5a:6c:02:8c:9a:b7:b6:44:da:6b:cb:d5:a6:d8:67:
d7:a5:75:9d:bc:43:f7:d6:ae:99:c1:53:f2:6b:b6:
7f:a4:b6:12:f0:07:6a:2d:47:8e:a4:94:7e:3a:52:
03:fe:88:37:c6:27:00:42:e0:d1:36:6e:0b:8a:47:
c1:a0:dc:9a:24:50:97:2c:b4:23:bb:4c:16:3b:8f:
55:58:9d:f4:4a:c3:31:a6:7b:30:a1:56:c8:4c:98:
bf:8d:ad:5a:52:1b:9a:65:ae:22:3e:aa:82:87:72:
eb:0f:b2:5c:2d:24:ea:9a:8f:89:77:e5:0e:22:ae:
d2:38:d9:0c:55:13:8e:66:f5:be:b0:4f:81:ae:74:
57:e1:64:a0:89:86:76:8f:ca:c3:f0:36:86:0d:fd:
0a:05:6f:03:a0:1f:34:c8:5b:48:0f:26:fc:71:34:
cd:ff:f3:cc:b1:e8:23:f2:f4:da:b3:a7:20:68:c0:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:82:3B:85:28:51:CC:57:04:B9:64:46:48:34:A6:36:8E:6F:2E:A8
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/cYI7hShRzFcEuWRGSDSmNo5vLqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/22
88.214.54.0/24
188.95.67.0/24
194.41.114.0/24
217.147.14.0/23
IPv6:
2a0e:f180::/29
2a10:eac0::/29
2a11:400::/29
2a11:1440::/29
2a11:2500::/29
2a11:4200::/29
2a11:5280::/29
2a11:8240::/29
2a11:e800::/29
2a11:e940::/29
2a12:d500::/29
2a12:de00::/29
Signature Algorithm: sha256WithRSAEncryption
4a:85:db:01:72:e3:41:ed:d0:19:f4:ab:5d:07:e9:88:bf:72:
00:f4:09:6e:01:48:a9:67:58:c9:3f:41:48:48:bd:17:1a:fc:
69:9e:b1:cf:44:15:ba:66:a2:9e:8d:0b:44:7b:21:37:42:9f:
18:f6:00:ec:1a:3e:df:21:01:59:44:47:4f:e7:0f:f3:17:bc:
4e:87:73:39:57:39:70:fa:85:53:87:31:62:41:7d:7f:fd:8b:
f9:20:45:13:01:14:59:27:eb:4a:1a:d0:38:74:c8:90:b9:b2:
99:2a:68:03:02:44:5d:96:11:76:f6:03:a2:8e:6b:49:4a:14:
30:41:ca:3f:ca:a6:23:99:3d:0a:ae:ba:97:2c:ba:a5:b3:91:
9c:2d:3f:4e:6d:ba:44:6a:48:71:52:66:81:1e:f4:61:2e:6b:
d2:1b:b1:b5:ad:93:77:fc:8c:af:af:cc:59:9a:af:f0:8b:21:
d7:02:f2:03:01:0e:43:d5:12:88:d6:48:2f:06:76:c8:32:9d:
45:3c:ad:aa:e9:65:17:ac:24:1b:41:89:cf:eb:66:17:fb:9e:
02:ba:95:90:df:1e:a1:93:11:82:19:9e:77:b2:18:0e:59:25:
02:bf:de:da:b9:5f:59:ae:9c:e3:5e:bb:01:ed:17:85:17:9e:
72:0d:d2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:46 2026 by rpki-client