Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/cgpmcoUK85pTENssifHpCXJlfPE.roa
File: cgpmcoUK85pTENssifHpCXJlfPE.roa (raw, json)
Hash identifier: JM0iNu1ajeTkqDE4Nqu0ZyqAU2JL5GqcLbiW8nq6Ilc=
Subject key identifier: 72:0A:66:72:85:0A:F3:9A:53:10:DB:2C:89:F1:E9:09:72:65:7C:F1
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 019E21C1FD9D1C5813CA2EDE709AC2E75258
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/cgpmcoUK85pTENssifHpCXJlfPE.roa
Signing time: Wed 13 May 2026 14:33:41 +0000
ROA not before: Wed 13 May 2026 14:33:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211071
IP address blocks: 2a0a:d6c0:202::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:c1:fd:9d:1c:58:13:ca:2e:de:70:9a:c2:e7:52:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: May 13 14:33:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=720a6672850af39a5310db2c89f1e90972657cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a3:c1:75:f5:24:91:74:dc:8a:2f:3f:9b:70:
40:92:51:ba:ba:d4:70:43:0d:c1:23:46:04:c7:78:
45:74:c8:bf:fa:26:46:c1:62:cf:f6:1a:58:ef:ba:
db:e6:2c:17:7b:e7:6e:8e:ea:3b:8d:9c:b3:f8:e3:
95:fa:9f:61:55:b1:45:ad:c7:be:83:43:86:c3:02:
11:73:06:ac:04:ef:f2:6b:4f:9d:31:92:90:6b:8a:
f1:2d:c6:64:d5:a8:3c:a7:30:f4:df:04:d2:4a:7c:
cb:52:11:a7:f8:79:e4:3e:af:69:2b:af:ce:25:f4:
8d:4c:2e:b4:12:b6:ca:94:f8:cb:4b:93:2e:c8:7c:
a3:0d:4a:5a:cd:77:72:dd:ab:45:e2:31:7b:04:45:
f6:93:e2:4c:f8:45:bb:de:91:65:de:cb:cc:3a:78:
70:d8:b0:c2:ce:40:02:5a:1c:f3:96:26:0e:32:99:
60:1d:0b:d2:95:c6:18:e7:a0:12:42:90:d0:86:41:
34:3b:89:99:60:f0:cd:26:97:87:98:ee:cb:04:14:
50:f4:4c:1b:ee:2e:c6:04:30:5d:a3:3c:bd:cc:1b:
70:aa:b8:b6:20:05:e6:54:5d:0f:37:c1:04:7e:06:
12:de:71:50:c5:89:2b:40:9b:26:d4:d2:c3:bb:04:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0A:66:72:85:0A:F3:9A:53:10:DB:2C:89:F1:E9:09:72:65:7C:F1
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/cgpmcoUK85pTENssifHpCXJlfPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d6c0:202::/48
Signature Algorithm: sha256WithRSAEncryption
57:2e:73:c5:f0:93:99:a1:d7:0d:7f:b5:d7:ea:8a:6e:da:1b:
33:44:45:39:bc:e9:e9:27:a1:e4:a2:12:27:4b:65:60:09:92:
a9:83:a2:a3:52:52:c4:c1:b0:65:3a:a0:b5:83:95:ed:3c:ef:
0c:ae:56:30:b1:75:10:46:fc:10:cb:13:ce:b7:bc:c5:5f:2c:
27:ca:59:cf:8b:77:39:54:14:a1:78:f2:45:78:a7:5c:77:81:
64:6c:25:68:e8:fc:68:56:4b:60:fd:29:f7:c1:70:74:e3:ce:
6c:c8:0c:77:da:51:41:5d:37:73:22:25:08:5d:9d:10:c0:17:
ca:02:0f:80:b9:f6:67:a4:ce:67:27:68:2b:60:3a:01:fc:8e:
50:c9:16:1c:3f:f2:31:3e:bb:00:da:4b:62:2b:6b:63:67:01:
42:94:03:c8:d8:22:b9:a0:3e:73:7e:9b:b0:4e:e4:2e:eb:da:
75:37:68:7a:86:56:8d:f7:d9:de:b7:70:33:03:b3:d1:18:b8:
d9:87:7b:3b:f9:7a:89:75:4a:70:1c:28:66:44:82:5b:1c:00:
45:60:4b:fb:87:5a:51:26:92:75:ac:cf:ce:10:f5:f3:13:22:
47:a5:3b:87:94:97:ee:b0:01:56:bf:48:75:46:32:4d:34:0f:
bf:63:d5:6b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ4hwf2dHFgTyi7ecJrC51JYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm
OGNiZDgwHhcNMjYwNTEzMTQzMzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjBhNjY3Mjg1MGFmMzlhNTMxMGRiMmM4OWYxZTkwOTcyNjU3Y2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qPBdfUkkXTcii8/m3BAklG6utRw
Qw3BI0YEx3hFdMi/+iZGwWLP9hpY77rb5iwXe+dujuo7jZyz+OOV+p9hVbFFrce+
g0OGwwIRcwasBO/ya0+dMZKQa4rxLcZk1ag8pzD03wTSSnzLUhGn+HnkPq9pK6/O
JfSNTC60ErbKlPjLS5MuyHyjDUpazXdy3atF4jF7BEX2k+JM+EW73pFl3svMOnhw
2LDCzkACWhzzliYOMplgHQvSlcYY56ASQpDQhkE0O4mZYPDNJpeHmO7LBBRQ9Ewb
7i7GBDBdozy9zBtwqri2IAXmVF0PN8EEfgYS3nFQxYkrQJsm1NLDuwRRuwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHIKZnKFCvOaUxDbLInx6QlyZXzxMB8GA1UdIwQY
MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt
NjA5YTQ4YjJiMTRkLzEvY2dwbWNvVUs4NXBURU5zc2lmSHBDWEpsZlBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk
LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgrWwAIC
MA0GCSqGSIb3DQEBCwUAA4IBAQBXLnPF8JOZodcNf7XX6opu2hszREU5vOnpJ6Hk
ohInS2VgCZKpg6KjUlLEwbBlOqC1g5XtPO8MrlYwsXUQRvwQyxPOt7zFXywnylnP
i3c5VBShePJFeKdcd4FkbCVo6PxoVktg/Sn3wXB0485syAx32lFBXTdzIiUIXZ0Q
wBfKAg+AufZnpM5nJ2grYDoB/I5QyRYcP/IxPrsA2ktiK2tjZwFClAPI2CK5oD5z
fpuwTuQu69p1N2h6hlaN99net3AzA7PRGLjZh3s7+XqJdUpwHChmRIJbHABFYEv7
h1pRJpJ1rM/OEPXzEyJHpTuHlJfusAFWv0h1RjJNNA+/Y9Vr
-----END CERTIFICATE-----
Generated at Sat Jun 6 01:41:18 2026 by rpki-client