Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/CCWA5B2a_oMp64Bg-AlLu0oEfts.roa
File: CCWA5B2a_oMp64Bg-AlLu0oEfts.roa (raw, json)
Hash identifier: U/4rwicf/+irCQ70LxTWhlbr9E2uox59kr6nbx+fB+A=
Subject key identifier: 08:25:80:E4:1D:9A:FE:83:29:EB:80:60:F8:09:4B:BB:4A:04:7E:DB
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A062FE7E5F10A8F9DED841B6B7C99F6064
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/CCWA5B2a_oMp64Bg-AlLu0oEfts.roa
Signing time: Wed 02 Sep 2026 16:40:40 +0000
ROA not before: Wed 02 Sep 2026 16:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 84.55.1.0/24 maxlen: 24
84.55.3.0/24 maxlen: 24
84.55.9.0/24 maxlen: 24
84.55.18.0/24 maxlen: 24
84.55.19.0/24 maxlen: 24
84.55.23.0/24 maxlen: 24
88.223.16.0/24 maxlen: 24
88.223.17.0/24 maxlen: 24
88.223.18.0/24 maxlen: 24
88.223.19.0/24 maxlen: 24
88.223.20.0/24 maxlen: 24
88.223.21.0/24 maxlen: 24
88.223.22.0/24 maxlen: 24
88.223.23.0/24 maxlen: 24
88.223.169.0/24 maxlen: 24
88.223.170.0/24 maxlen: 24
88.223.171.0/24 maxlen: 24
88.223.174.0/24 maxlen: 24
88.223.175.0/24 maxlen: 24
95.173.41.0/24 maxlen: 24
95.173.54.0/24 maxlen: 24
95.173.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:fe:7e:5f:10:a8:f9:de:d8:41:b6:b7:c9:9f:60:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Sep 2 16:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=082580e41d9afe8329eb8060f8094bbb4a047edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:00:c1:b9:1b:33:29:00:da:ec:a2:32:27:
d9:06:fb:4d:52:47:c8:6f:57:fd:ad:17:b3:6c:9e:
7e:1a:73:0b:61:40:7b:2c:60:eb:19:b5:90:ec:b9:
d5:fa:ce:22:ea:db:04:35:51:92:c6:fc:0e:ec:f6:
8a:2b:78:9e:88:72:b3:42:40:c7:fe:78:5b:18:95:
5c:08:55:5f:b8:e4:60:99:cf:8c:07:39:6d:a3:7d:
c3:40:ba:4c:37:3d:c3:1e:76:9a:b7:b9:81:a9:a8:
87:0d:d7:4d:9a:1c:66:91:7f:56:b4:0e:55:6d:79:
a6:e4:96:25:cc:0f:a5:27:61:a2:4f:6d:2d:3e:79:
14:8c:13:7c:14:fe:74:b0:43:82:8d:a3:ac:4e:fe:
f6:79:06:09:67:bf:b1:09:52:88:52:8c:e7:2b:6a:
9b:3d:37:91:3a:59:8b:a5:56:3b:f2:1a:f7:68:c2:
57:62:32:11:df:6f:f6:49:2f:1f:6a:85:84:79:86:
0a:c5:90:dc:c7:06:db:7b:80:93:45:59:86:55:a5:
af:b8:ec:bd:57:b5:e5:8a:eb:22:53:f8:23:89:52:
f7:bb:c5:ff:d6:f8:8b:fe:9b:db:24:86:c5:a4:ab:
a8:09:c1:05:08:ef:52:ce:f8:5d:2f:d3:cf:41:3e:
a2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:25:80:E4:1D:9A:FE:83:29:EB:80:60:F8:09:4B:BB:4A:04:7E:DB
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/CCWA5B2a_oMp64Bg-AlLu0oEfts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.1.0/24
84.55.3.0/24
84.55.9.0/24
84.55.18.0/23
84.55.23.0/24
88.223.16.0/21
88.223.169.0-88.223.171.255
88.223.174.0/23
95.173.41.0/24
95.173.54.0/24
95.173.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d7:6e:06:62:46:4a:ff:d5:a7:b3:43:6f:d8:39:98:0e:78:
f0:f0:12:84:87:c1:86:3d:ab:5b:95:c6:b2:32:b3:3a:2c:a9:
fb:48:af:5d:f0:4d:51:9c:6e:49:90:5d:f0:35:8d:96:06:1a:
67:1f:d5:86:8c:6a:74:95:aa:54:56:fb:e8:41:aa:a4:f9:1b:
4d:40:00:2e:4b:3f:e4:b3:11:4f:6d:4c:44:66:ee:16:49:10:
6b:15:c5:9a:81:da:62:9b:87:f2:77:85:7c:b2:22:e2:13:47:
75:d4:6c:be:01:0d:3b:a3:0e:cf:a7:62:74:d6:78:c0:0e:b1:
90:6a:cd:4b:a5:f2:c0:e1:cb:cb:86:49:3d:98:36:eb:61:08:
d4:c3:fa:82:18:48:4e:6d:e2:16:9c:8c:1d:70:ef:90:cf:4c:
be:8c:e7:f3:63:54:cf:b0:8d:15:44:32:3e:2e:68:e0:5b:7d:
df:44:20:ff:98:5a:03:a6:ed:3e:b4:76:c0:c9:4c:d0:53:58:
65:b7:13:70:46:50:97:58:32:dc:d9:eb:53:55:13:8e:06:3f:
ed:a6:05:e0:65:43:d8:5b:1c:1c:5b:c5:b7:87:88:f6:b7:e9:
20:b8:b9:32:0c:86:f5:4b:1e:21:67:04:63:f9:41:8e:8b:14:
e6:a3:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:52 2026 by rpki-client