Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/I6-zG5c3op3-zsuIHUyCAnB1caw.roa
File: I6-zG5c3op3-zsuIHUyCAnB1caw.roa (raw, json)
Hash identifier: hY7fbFgWJUi7TzqZsypXmSPllZ3iZfgnwrCKOh/QRtc=
Subject key identifier: 23:AF:B3:1B:97:37:A2:9D:FE:CE:CB:88:1D:4C:82:02:70:75:71:AC
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019F4209C46DBA849635E099534333181BE7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/I6-zG5c3op3-zsuIHUyCAnB1caw.roa
Signing time: Wed 08 Jul 2026 14:02:44 +0000
ROA not before: Wed 08 Jul 2026 14:02:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47169
IP address blocks: 45.14.8.0/23 maxlen: 23
45.88.92.0/24 maxlen: 24
88.209.218.0/24 maxlen: 24
88.209.250.0/23 maxlen: 23
92.52.192.0/24 maxlen: 24
92.52.196.0/24 maxlen: 24
92.52.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:09:c4:6d:ba:84:96:35:e0:99:53:43:33:18:1b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 8 14:02:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23afb31b9737a29dfececb881d4c8202707571ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:2a:db:86:0c:df:72:3f:68:c4:eb:f2:98:
2e:82:f6:89:86:8d:0a:32:b6:81:f3:a7:1a:9f:be:
50:72:31:ee:43:5d:7a:c7:da:dd:13:8a:11:55:e1:
df:d7:91:c3:ef:79:4a:8f:74:22:3d:67:0f:76:5a:
f2:7e:a0:9e:3e:bc:d9:0b:a4:e4:df:3c:fc:e1:e3:
82:fc:cc:44:c7:4b:80:30:0d:6c:b4:55:ba:a5:6a:
72:e3:40:1f:2f:c4:f3:7d:1f:f1:4b:90:4f:1b:a7:
69:9d:3b:0d:e1:78:fd:35:ed:ca:05:f7:29:22:8b:
9f:55:f1:3a:43:f5:82:77:c6:1a:49:d0:52:5c:2e:
a8:cf:31:c6:6e:f8:34:d2:07:0a:ff:fe:29:76:34:
ab:bd:1f:2c:a2:cc:f6:ec:73:f1:8d:87:44:ba:60:
c8:83:5e:b8:c1:ed:62:4b:b1:ab:33:fa:f6:fc:d7:
22:a4:e0:f4:4e:a2:64:47:63:6c:74:8f:3e:ac:cf:
55:d8:c0:11:85:03:62:a5:9a:49:de:be:ee:62:14:
0a:f1:1b:a4:52:dd:e1:34:c5:e7:58:d6:cc:62:74:
d2:00:70:aa:a7:20:5d:d8:5e:19:ab:9b:02:7f:47:
da:1b:0c:47:40:49:dc:27:49:8b:28:6d:67:ff:be:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AF:B3:1B:97:37:A2:9D:FE:CE:CB:88:1D:4C:82:02:70:75:71:AC
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/I6-zG5c3op3-zsuIHUyCAnB1caw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.8.0/23
45.88.92.0/24
88.209.218.0/24
88.209.250.0/23
92.52.192.0/24
92.52.196.0/24
92.52.203.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:65:44:77:f1:fd:77:df:05:9b:f6:08:c5:d3:dc:c3:4a:fa:
77:0a:fe:51:93:67:0d:08:ae:33:f2:a2:35:18:4c:a8:f7:09:
8b:e2:98:0c:99:1e:da:ac:cf:e5:de:db:4b:88:64:f3:2a:6b:
c9:4e:50:fb:89:8e:4e:4f:7f:43:d7:05:72:01:15:49:9d:06:
1b:93:1f:37:6f:92:09:f6:a8:71:a2:31:d2:14:21:dd:0e:41:
70:6e:32:27:42:56:38:f7:53:75:6f:5c:1d:60:ba:cf:ea:6e:
1c:26:e3:b0:34:ba:dd:6c:63:0f:fd:a8:64:8b:a2:84:fe:e3:
e1:87:02:86:51:c0:46:8b:2e:93:0e:4b:b1:bf:54:51:68:64:
67:7f:0e:ce:a6:5d:11:b0:51:04:5d:07:20:b3:d0:31:21:7d:
f6:44:8b:82:31:90:66:97:fb:2c:10:7f:99:35:3d:ba:2a:74:
19:ec:1d:37:47:65:c5:4c:79:45:ca:47:9c:c4:9b:34:0a:6a:
e5:e0:da:91:0b:c1:10:03:dd:91:58:9f:49:71:0e:3c:b8:4a:
b7:a7:4f:1b:a5:ce:5b:18:0a:d9:60:6a:01:7b:96:49:1f:2c:
77:59:24:a5:59:1f:4e:14:25:2e:60:54:64:77:56:ea:0e:1b:
c0:cb:19:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:44 2026 by rpki-client