Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/cigYLfuKfxY1dzhdPK0-Tor0nAw.roa
File: cigYLfuKfxY1dzhdPK0-Tor0nAw.roa (raw, json)
Hash identifier: Lf7RrTzPFxk/TGatTkwPWxsNBgC0IJVj7eeUQ31/4D8=
Subject key identifier: 72:28:18:2D:FB:8A:7F:16:35:77:38:5D:3C:AD:3E:4E:8A:F4:9C:0C
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 019F294D0FF81F388683CC328368921204F9
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/cigYLfuKfxY1dzhdPK0-Tor0nAw.roa
Signing time: Fri 03 Jul 2026 18:45:43 +0000
ROA not before: Fri 03 Jul 2026 18:45:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 80.93.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:4d:0f:f8:1f:38:86:83:cc:32:83:68:92:12:04:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jul 3 18:45:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7228182dfb8a7f163577385d3cad3e4e8af49c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:4f:4b:54:cc:31:96:fe:36:cf:f3:e1:67:
a5:45:24:0d:f5:be:a8:d5:4d:77:9b:0f:4e:32:ea:
29:97:b7:8d:38:5b:d5:3f:3d:10:00:3f:ac:9c:3e:
1e:a7:90:d3:1d:78:12:4e:75:5b:62:89:f2:25:b6:
e4:91:54:10:1d:b0:42:d4:3f:91:53:de:ad:8a:72:
64:a7:a4:85:fb:8e:0e:d6:28:b7:1b:d5:23:f3:09:
c2:65:16:e8:a7:c3:66:98:c8:e8:cb:da:0c:b9:a5:
d2:8b:af:cf:eb:21:a6:45:1e:63:f3:bc:35:0f:5c:
ae:c4:55:c7:bf:6b:c9:ad:48:9d:f9:f0:0d:ef:26:
96:b8:09:7e:ce:f9:9a:26:ad:ef:cb:47:4f:0e:0c:
0d:dd:a7:47:99:8d:e8:83:8c:a6:65:c3:97:24:d2:
95:37:e4:73:3e:a4:f4:6a:b9:1d:4f:3c:fd:0a:69:
3f:04:e3:b7:95:32:07:92:b4:d1:17:3a:bc:51:9f:
b5:62:af:ca:a3:14:ce:b2:61:05:e8:a0:35:e8:16:
7c:4f:3e:e9:cb:f5:e5:a6:f1:a6:39:2b:a5:f8:b3:
c5:4a:ab:a7:af:17:66:80:be:e2:18:26:b1:6b:fd:
51:e1:7f:fd:e9:93:3c:7b:8b:d4:33:e3:b8:0b:63:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:28:18:2D:FB:8A:7F:16:35:77:38:5D:3C:AD:3E:4E:8A:F4:9C:0C
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/cigYLfuKfxY1dzhdPK0-Tor0nAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.220.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c4:43:ed:9e:49:4e:07:47:60:79:86:64:48:e5:31:da:24:
f4:8d:63:17:2c:09:38:72:bf:43:53:0b:2b:e2:ae:89:7f:87:
13:22:cd:bf:96:b9:10:b6:7e:c7:54:6a:2d:97:c2:2d:41:91:
7b:73:bc:26:74:cd:fa:da:4c:5d:3c:82:25:80:eb:b3:28:82:
c9:c1:e1:1f:db:88:a6:90:70:a7:5a:8b:a0:62:0f:81:4d:60:
3e:c6:fe:80:49:ac:6a:bc:3b:a6:f8:38:a4:7b:09:61:5b:90:
60:57:b5:1a:b5:8e:80:1f:24:09:c9:8b:33:03:c8:fa:9e:47:
93:10:b5:43:a9:08:bb:79:e0:d6:49:0b:64:a5:58:7f:33:90:
df:fb:78:00:da:de:3b:85:12:49:f2:52:e1:13:ce:2e:3a:01:
b2:6e:6d:14:d1:96:31:b3:3a:ca:ba:ab:37:65:65:3b:7c:1c:
31:37:09:40:4c:75:bf:a4:61:34:10:09:b0:b6:d7:4c:99:89:
d7:5e:08:a8:f4:65:47:cf:f3:77:90:b9:83:2c:b5:0b:03:33:
13:6f:0d:08:b9:7e:d0:7b:4d:2c:8b:db:35:2f:f5:d1:f6:3b:
c1:01:22:7a:0b:e9:55:98:03:17:dd:ac:3b:6e:a3:73:6f:a9:
37:cc:13:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:51 2026 by rpki-client