Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/caXYSpZhyvVennNbvGTvs1qz31c.roa
File: caXYSpZhyvVennNbvGTvs1qz31c.roa (raw, json)
Hash identifier: MmtIVawh95uakMdm94RVMT0TqHNlMhIrLohsutU5NiA=
Subject key identifier: 71:A5:D8:4A:96:61:CA:F5:5E:9E:73:5B:BC:64:EF:B3:5A:B3:DF:57
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019E446122915F3F994C54FEAE511F12CC1B
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/caXYSpZhyvVennNbvGTvs1qz31c.roa
Signing time: Wed 20 May 2026 07:54:36 +0000
ROA not before: Wed 20 May 2026 07:54:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 77.76.4.0/22 maxlen: 22
78.128.3.0/24 maxlen: 24
78.128.12.0/22 maxlen: 22
78.128.16.0/20 maxlen: 20
78.128.41.0/24 maxlen: 24
78.128.52.0/22 maxlen: 22
78.128.56.0/22 maxlen: 22
78.128.84.0/22 maxlen: 22
78.128.88.0/22 maxlen: 22
78.128.97.0/24 maxlen: 24
78.128.100.0/22 maxlen: 22
78.128.104.0/22 maxlen: 22
78.128.116.0/23 maxlen: 23
78.142.3.0/24 maxlen: 24
78.142.31.0/24 maxlen: 24
83.222.190.0/23 maxlen: 23
84.201.224.0/20 maxlen: 20
91.148.162.0/23 maxlen: 23
91.148.164.0/23 maxlen: 23
91.148.169.0/24 maxlen: 24
91.148.170.0/23 maxlen: 23
91.148.172.0/22 maxlen: 22
91.148.176.0/21 maxlen: 21
130.185.227.0/24 maxlen: 24
130.185.234.0/24 maxlen: 24
185.81.120.0/24 maxlen: 24
193.24.240.0/22 maxlen: 22
193.200.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:61:22:91:5f:3f:99:4c:54:fe:ae:51:1f:12:cc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: May 20 07:54:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71a5d84a9661caf55e9e735bbc64efb35ab3df57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:e4:4f:df:b1:04:42:25:19:ab:88:29:ac:
a2:63:00:73:b1:04:af:b2:6d:70:e8:91:47:0c:de:
c9:13:8f:93:98:4f:dd:5e:13:32:13:9e:06:58:87:
da:cb:2e:c3:e9:82:6f:0f:ab:2a:2f:31:06:4b:44:
81:1f:9e:53:09:1e:6d:87:85:5c:4e:52:65:59:ba:
07:8e:cf:b1:45:c5:e7:d1:bd:f2:c8:d2:44:fc:44:
68:1f:90:d2:ee:ed:f5:86:c1:bd:c6:2a:33:e6:36:
7f:cd:9d:9b:e7:ff:ce:98:64:e6:43:42:12:bf:32:
cf:0f:89:98:8e:15:7b:46:02:65:37:88:1c:47:9b:
cd:0e:7c:80:25:e8:58:50:7b:9a:c7:4a:4f:9d:fa:
e4:0c:20:9d:18:5b:42:ae:ed:c9:eb:8f:53:a9:8c:
69:42:25:36:80:85:bb:82:e2:7a:9d:4c:ad:a3:29:
ee:88:a5:fd:6a:ea:07:6b:8a:4c:c2:69:f4:91:b3:
af:b3:e5:75:84:c6:88:dc:74:bc:80:ff:62:78:bf:
f2:1b:b0:1f:65:ec:84:ed:18:6c:ff:c4:5b:41:4a:
e9:81:49:36:cc:c1:46:18:2d:73:67:0e:6d:14:48:
5a:b5:86:bb:e7:a1:78:59:2d:2d:36:ee:6a:a3:73:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A5:D8:4A:96:61:CA:F5:5E:9E:73:5B:BC:64:EF:B3:5A:B3:DF:57
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/caXYSpZhyvVennNbvGTvs1qz31c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.4.0/22
78.128.3.0/24
78.128.12.0-78.128.31.255
78.128.41.0/24
78.128.52.0-78.128.59.255
78.128.84.0-78.128.91.255
78.128.97.0/24
78.128.100.0-78.128.107.255
78.128.116.0/23
78.142.3.0/24
78.142.31.0/24
83.222.190.0/23
84.201.224.0/20
91.148.162.0-91.148.165.255
91.148.169.0-91.148.183.255
130.185.227.0/24
130.185.234.0/24
185.81.120.0/24
193.24.240.0/22
193.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:6b:46:69:93:70:f0:2f:45:4b:4e:32:f5:8d:d4:46:dc:8b:
ff:7a:b9:11:4f:6d:61:10:0d:c9:cd:05:03:21:2b:46:bd:0a:
ff:f1:29:2f:50:12:f5:cb:44:45:7f:06:68:4d:d1:43:d7:82:
a6:ad:a2:b0:0d:e5:9b:82:d5:4e:1c:2b:09:1c:8d:5a:b1:8a:
f3:d8:99:47:62:6e:12:31:13:7e:41:b7:66:d3:f8:46:3a:59:
42:79:b0:c3:2a:91:6a:9c:22:d0:dd:e7:de:91:77:b2:a8:7c:
76:b0:d7:5f:c4:2e:c3:81:07:93:25:8f:a3:d0:09:22:3c:27:
1b:2a:04:8b:47:8d:d0:c1:26:8c:dc:e2:17:5f:f3:03:22:af:
99:07:78:8c:d6:89:23:54:d9:f7:e7:f0:31:dd:34:e1:87:e0:
d5:a9:05:7e:cf:3d:6a:5b:fd:25:63:62:01:e9:7a:9d:51:ae:
dc:2a:5e:30:d0:b6:7b:8e:4c:6d:78:a9:59:77:ac:e3:eb:14:
63:37:f0:d8:55:14:de:c0:94:c5:8f:ec:bd:b8:7e:bf:9d:cb:
f7:14:5a:81:06:39:cf:b6:68:83:00:f2:f6:28:06:ec:52:6b:
9e:94:4b:a4:56:29:b8:83:15:5e:58:f8:d7:bf:d9:71:3d:17:
ab:b2:b1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:03:22 2026 by rpki-client