Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/CuwON2MJZtvZI4g-9no7hDi-jTM.roa
File: CuwON2MJZtvZI4g-9no7hDi-jTM.roa (raw, json)
Hash identifier: t4dkHT6G4U30/rLqAkRNH5wHWvEqi8n3uM1IPVPedwg=
Subject key identifier: 0A:EC:0E:37:63:09:66:DB:D9:23:88:3E:F6:7A:3B:84:38:BE:8D:33
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019F07211621058F8F88FA202B56B1964A0C
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/CuwON2MJZtvZI4g-9no7hDi-jTM.roa
Signing time: Sat 27 Jun 2026 03:30:36 +0000
ROA not before: Sat 27 Jun 2026 03:30:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 5.182.185.0/24 maxlen: 24
45.67.140.0/24 maxlen: 24
45.248.55.0/24 maxlen: 24
92.249.29.0/24 maxlen: 24
94.154.177.0/24 maxlen: 24
94.154.180.0/23 maxlen: 23
103.105.165.0/24 maxlen: 24
162.218.88.0/24 maxlen: 24
185.52.136.0/24 maxlen: 24
185.230.122.0/24 maxlen: 24
185.253.122.0/24 maxlen: 24
192.145.71.0/24 maxlen: 24
193.160.80.0/22 maxlen: 22
217.197.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:07:21:16:21:05:8f:8f:88:fa:20:2b:56:b1:96:4a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jun 27 03:30:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0aec0e37630966dbd923883ef67a3b8438be8d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e4:45:29:5a:d1:86:01:fc:89:c8:01:be:cc:
47:72:ad:d6:6d:c8:86:ad:67:92:c6:43:48:40:78:
e3:3c:fd:cf:e7:91:d9:fc:28:94:b7:0b:86:da:3e:
68:de:1b:a1:b9:0a:b9:9a:ab:44:e8:33:1b:1b:84:
7a:d5:16:ab:e2:08:d8:b5:e6:00:43:1a:01:5e:f9:
00:71:2c:c2:d6:02:47:f3:61:50:57:87:1c:f4:2d:
61:ab:71:d2:c3:19:d4:5c:fc:40:a8:35:46:61:a1:
1e:7d:fb:09:2d:60:ed:44:9b:a5:f0:c3:83:ac:d4:
c3:f8:6b:d3:6c:86:bb:2b:16:b4:08:7c:de:18:61:
a4:f6:be:4f:5e:32:ac:7e:4c:eb:11:fe:68:0e:10:
1b:08:f4:57:62:10:3b:eb:d7:cc:ce:68:b6:8b:cd:
6f:74:e1:9c:50:eb:a2:be:1a:22:ed:ce:ab:82:d8:
55:2b:b5:f2:d7:86:56:39:0a:64:ea:e6:a6:f6:98:
b3:e4:59:10:68:53:88:ea:97:c2:42:a7:41:75:07:
4a:a2:d9:73:e2:3b:da:16:f3:64:bd:11:a8:73:a6:
5e:55:a6:f3:16:ed:de:58:e3:62:db:ac:d8:d7:c2:
57:78:d5:25:db:d6:db:ac:5a:ce:e7:76:22:b9:35:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EC:0E:37:63:09:66:DB:D9:23:88:3E:F6:7A:3B:84:38:BE:8D:33
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/CuwON2MJZtvZI4g-9no7hDi-jTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.185.0/24
45.67.140.0/24
45.248.55.0/24
92.249.29.0/24
94.154.177.0/24
94.154.180.0/23
103.105.165.0/24
162.218.88.0/24
185.52.136.0/24
185.230.122.0/24
185.253.122.0/24
192.145.71.0/24
193.160.80.0/22
217.197.170.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2b:14:ac:41:d4:d2:6c:0d:f6:92:3f:27:eb:ec:11:15:bb:
19:95:a4:31:c0:cc:1d:b9:97:e0:c6:44:48:03:b0:b0:eb:14:
06:61:3b:98:e2:4d:4b:81:5c:8d:81:16:8c:6b:04:31:99:84:
87:31:84:3a:67:97:7d:3d:a8:d5:20:b6:2c:6a:56:68:9f:37:
1a:53:ce:14:fb:5a:e6:32:f4:f6:3f:14:34:e0:82:eb:f3:1e:
9b:78:c4:2a:af:00:d0:9a:b1:79:b8:0b:f6:ef:86:9b:e6:ce:
8d:8c:95:04:3f:40:d3:00:c9:ac:1d:6a:95:e8:dc:37:fc:df:
ed:1e:1b:49:51:89:05:2b:3f:48:f4:b5:1c:c0:40:1f:2b:49:
3d:ef:db:38:6b:5b:77:ec:de:68:ec:b9:54:14:e3:0e:f3:22:
97:08:47:91:48:07:90:78:2a:b1:20:38:4b:1d:9a:5d:c8:4c:
ad:53:45:cc:7a:8c:7c:88:7a:9e:87:4b:c1:f9:a1:c0:1b:76:
a4:12:9d:57:14:ab:da:1a:a4:ac:4d:f9:6b:85:91:f3:cc:e2:
8a:a9:56:9c:a6:1b:08:bd:a5:72:34:31:be:f6:71:69:7c:d9:
fd:d2:be:bd:a7:05:d6:69:12:02:fd:d1:96:b1:46:07:fe:d3:
01:dc:10:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:54 2026 by rpki-client