Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/cSG37r-uZe6r40X57jIGPERP6QU.roa
File: cSG37r-uZe6r40X57jIGPERP6QU.roa (raw, json)
Hash identifier: FntgneeTOWNfaQgq1E4ZMYzocfuakPr7jHRetNqHTmk=
Subject key identifier: 71:21:B7:EE:BF:AE:65:EE:AB:E3:45:F9:EE:32:06:3C:44:4F:E9:05
Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial: 019E338555B30696B3E497BC4C61D470C89C
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/cSG37r-uZe6r40X57jIGPERP6QU.roa
Signing time: Sun 17 May 2026 01:20:36 +0000
ROA not before: Sun 17 May 2026 01:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20722
IP address blocks: 85.204.44.0/24 maxlen: 24
85.204.46.0/23 maxlen: 23
85.204.47.0/24 maxlen: 24
85.204.56.0/21 maxlen: 21
85.204.56.0/24 maxlen: 24
85.204.57.0/24 maxlen: 24
85.204.58.0/24 maxlen: 24
85.204.59.0/24 maxlen: 24
85.204.60.0/24 maxlen: 24
85.204.61.0/24 maxlen: 24
85.204.62.0/24 maxlen: 24
85.204.63.0/24 maxlen: 24
185.88.128.0/22 maxlen: 22
185.88.128.0/23 maxlen: 23
185.88.129.0/24 maxlen: 24
185.88.130.0/23 maxlen: 23
185.88.131.0/24 maxlen: 24
194.102.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:85:55:b3:06:96:b3:e4:97:bc:4c:61:d4:70:c8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Validity
Not Before: May 17 01:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7121b7eebfae65eeabe345f9ee32063c444fe905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:c8:1f:07:a7:e6:29:2a:f8:a2:2e:57:37:
70:d8:5f:8a:83:e4:78:f2:0d:d6:1a:c4:8d:95:29:
25:31:9a:4b:d5:de:77:97:5c:18:0b:9d:21:2c:50:
72:e0:3d:20:81:d7:37:1c:c8:35:f0:dd:8d:ec:80:
63:f0:c1:1e:23:bf:89:a4:e8:d9:69:23:30:4c:48:
85:c6:5f:64:47:00:91:48:e8:6f:19:64:7a:d9:b8:
8f:0f:a3:ee:f3:25:0b:95:fe:15:50:f1:4b:b9:db:
0b:32:50:eb:52:37:91:14:94:6d:19:19:32:a9:f1:
f8:1c:e3:93:f9:35:a6:07:4d:0e:87:d8:7c:73:c8:
0b:79:f4:42:38:f0:53:69:a3:ef:32:40:40:6f:8b:
6e:fd:b3:08:a7:60:3f:66:cf:7f:44:52:09:5b:03:
2e:83:78:5b:1e:0f:d1:91:1a:c4:33:90:56:e7:9a:
d6:b1:52:18:7c:f8:87:22:ec:98:ed:4a:9e:b0:d5:
12:81:1e:31:bf:83:bc:2f:5d:e1:d0:92:9a:c7:81:
3c:9e:61:4e:02:5d:fa:42:87:07:ef:c3:0e:f3:1c:
2f:a4:7c:78:e9:46:2b:30:56:ba:ef:0f:8a:c0:a8:
d3:74:11:39:98:71:03:dc:05:89:e9:45:9b:7e:c8:
60:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:21:B7:EE:BF:AE:65:EE:AB:E3:45:F9:EE:32:06:3C:44:4F:E9:05
X509v3 Authority Key Identifier:
keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/cSG37r-uZe6r40X57jIGPERP6QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.44.0/24
85.204.46.0/23
85.204.56.0/21
185.88.128.0/22
194.102.188.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a7:26:77:93:be:67:74:e4:95:41:0c:d9:cf:ab:22:63:36:
85:f8:41:91:02:8c:94:91:ab:11:fc:4a:cb:2f:12:2a:5f:01:
f6:bf:11:2a:cb:f0:2b:5f:e0:cc:02:ed:eb:8a:f8:13:07:96:
18:21:df:6e:11:ed:ce:89:e7:d5:ea:86:01:74:c4:95:5d:f4:
40:88:7e:a3:f8:82:63:77:f7:f3:29:20:7d:86:f7:db:7a:48:
8f:d6:d6:c9:c7:14:06:e0:6f:0e:1c:a3:0f:5c:34:43:c4:ba:
76:71:58:bd:d4:63:fb:a6:26:5c:ad:16:a2:5a:91:23:1f:e9:
4c:d2:a0:25:69:ac:85:5f:80:2e:ae:7e:5e:9b:05:50:31:b1:
52:a1:82:1a:50:20:ca:0e:21:6f:e4:bb:bf:e3:dc:08:6c:6b:
9f:0d:6b:0f:99:e1:ef:f7:d5:6d:82:59:4d:62:5f:26:40:a8:
56:30:21:38:d8:6c:5d:08:df:75:ad:9d:89:10:8b:bc:a8:4b:
e7:99:03:47:3e:dd:35:36:7e:0d:e0:ae:b1:45:7b:2b:43:eb:
0c:6b:36:a0:61:da:27:29:ea:69:86:65:0d:6f:79:f7:fd:b9:
d8:fa:08:52:3b:6d:42:44:a2:d1:f2:ed:00:c4:6e:47:31:82:
87:9f:eb:f0
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ4zhVWzBpaz5Je8TGHUcMicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZWYwNjllN2UzZWQ1YmY3MGY2ODJjZTQwYzU4MTBmZjNl
NWUzNzgwHhcNMjYwNTE3MDEyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTIxYjdlZWJmYWU2NWVlYWJlMzQ1ZjllZTMyMDYzYzQ0NGZlOTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFHIHwen5ikq+KIuVzdw2F+Kg+R4
8g3WGsSNlSklMZpL1d53l1wYC50hLFBy4D0ggdc3HMg18N2N7IBj8MEeI7+JpOjZ
aSMwTEiFxl9kRwCRSOhvGWR62biPD6Pu8yULlf4VUPFLudsLMlDrUjeRFJRtGRky
qfH4HOOT+TWmB00Oh9h8c8gLefRCOPBTaaPvMkBAb4tu/bMIp2A/Zs9/RFIJWwMu
g3hbHg/RkRrEM5BW55rWsVIYfPiHIuyY7UqesNUSgR4xv4O8L13h0JKax4E8nmFO
Al36QocH78MO8xwvpHx46UYrMFa67w+KwKjTdBE5mHED3AWJ6UWbfshgpwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHEht+6/rmXuq+NF+e4yBjxET+kFMB8GA1UdIwQY
MBaAFHrvBp5+PtW/cPaCzkDFgQ/z5eN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmIt
OTAwMDM0ZjAwZDllLzEvY1NHMzdyLXVaZTZyNDBYNTdqSUdQRVJQNlFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmItOTAwMDM0ZjAwZDll
LzEvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVcwsAwQB
VcwuAwQDVcw4AwQCuViAAwQAwma8MA0GCSqGSIb3DQEBCwUAA4IBAQAmpyZ3k75n
dOSVQQzZz6siYzaF+EGRAoyUkasR/ErLLxIqXwH2vxEqy/ArX+DMAu3rivgTB5YY
Id9uEe3OiefV6oYBdMSVXfRAiH6j+IJjd/fzKSB9hvfbekiP1tbJxxQG4G8OHKMP
XDRDxLp2cVi91GP7piZcrRaiWpEjH+lM0qAlaayFX4Aurn5emwVQMbFSoYIaUCDK
DiFv5Lu/49wIbGufDWsPmeHv99VtgllNYl8mQKhWMCE42GxdCN91rZ2JEIu8qEvn
mQNHPt01Nn4N4K6xRXsrQ+sMazagYdonKepphmUNb3n3/bnY+ghSO21CRKLR8u0A
xG5HMYKHn+vw
-----END CERTIFICATE-----
Generated at Wed Jun 17 16:45:07 2026 by rpki-client