Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/cWvOdIg2noCYJK67b7smFIMMw4g.roa
File: cWvOdIg2noCYJK67b7smFIMMw4g.roa (raw, json)
Hash identifier: jiBllTk0LDqmGqzBfF6DX67GW5ceJzuLTPIl+rqWXac=
Subject key identifier: 71:6B:CE:74:88:36:9E:80:98:24:AE:BB:6F:BB:26:14:83:0C:C3:88
Certificate issuer: /CN=34832317d2544434b659e5692071d8e4c4938b06
Certificate serial: 019FA8804E7BC3AC25C74321015CBFCB2DD4
Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/cWvOdIg2noCYJK67b7smFIMMw4g.roa
Signing time: Tue 28 Jul 2026 11:33:28 +0000
ROA not before: Tue 28 Jul 2026 11:33:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197893
IP address blocks: 176.28.72.0/24 maxlen: 24
176.28.74.0/24 maxlen: 24
176.28.75.0/24 maxlen: 24
176.28.76.0/24 maxlen: 24
176.28.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:80:4e:7b:c3:ac:25:c7:43:21:01:5c:bf:cb:2d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06
Validity
Not Before: Jul 28 11:33:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=716bce7488369e809824aebb6fbb2614830cc388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:8a:d7:1d:83:b0:60:35:48:9d:be:7f:0b:
a9:ba:4d:71:44:3a:58:b6:dc:0e:84:5c:16:56:dc:
03:77:8e:d4:5c:b8:c1:ec:f3:ef:b6:91:1a:48:47:
e7:01:58:38:ef:e9:8e:a7:10:9e:be:60:79:30:da:
b2:1c:47:8f:a2:b9:aa:58:9f:f7:c9:21:f8:31:d1:
b7:88:5b:33:ba:e2:b9:59:dd:93:14:86:f4:45:96:
11:e0:53:03:67:b2:09:f5:44:25:97:3e:cf:9f:0d:
af:02:94:39:24:cb:e8:5d:07:e0:f1:88:ba:ab:02:
b5:54:9a:66:e0:d3:69:49:bb:63:ed:1d:a1:92:ae:
c4:5e:d3:92:65:95:49:67:78:1d:1c:fc:15:c3:9c:
71:84:94:ac:6a:33:7d:69:24:9f:db:06:f3:4d:26:
58:dc:0a:fc:cc:57:26:52:70:d8:96:35:c4:ae:72:
ea:ef:a6:a6:0f:86:d3:74:48:9e:02:3f:cc:83:40:
75:03:19:85:6a:bc:78:27:70:a2:6f:dd:7c:9b:39:
85:c0:bc:da:cc:03:e9:fa:ab:9b:3a:f5:57:44:55:
bd:c6:60:c7:b2:c9:e0:96:d9:4f:7c:62:f4:f1:8b:
a9:80:5e:74:d6:62:22:44:b2:02:4b:27:61:f2:09:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6B:CE:74:88:36:9E:80:98:24:AE:BB:6F:BB:26:14:83:0C:C3:88
X509v3 Authority Key Identifier:
keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/cWvOdIg2noCYJK67b7smFIMMw4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.28.72.0/24
176.28.74.0-176.28.76.255
176.28.79.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:b4:9a:56:44:e5:58:26:7a:2e:13:4e:07:5b:78:d5:04:1d:
e3:55:39:3e:8f:b9:50:e6:f9:95:43:f5:fd:8e:0c:cb:37:95:
a3:15:bf:21:ea:89:19:f6:7b:85:d3:55:8f:e6:38:4a:55:0d:
aa:79:0d:f0:34:06:26:16:b6:0c:d8:6f:eb:b2:67:2e:2c:66:
7e:73:9a:a0:78:ab:61:f4:ea:2a:a0:ff:b2:bd:24:dc:ae:bf:
a8:9e:9a:a2:61:fd:a2:68:0b:4b:b2:02:77:44:9b:ca:d2:dc:
e5:5b:e3:da:81:73:8f:ca:5d:fb:94:64:b4:56:95:dd:a5:a4:
59:43:72:a4:5a:c8:de:7c:a2:58:f5:08:5f:1b:cf:c1:09:e4:
5f:56:2a:3b:23:97:aa:4b:c4:7d:0a:62:52:d8:10:4b:27:d5:
a8:1a:60:fb:cd:46:52:2d:24:d9:a8:a5:f0:36:41:39:78:a0:
5a:fb:82:ab:8f:8b:6e:bf:ce:c5:ac:14:d0:42:70:3a:e0:c1:
f3:15:a0:48:2b:12:e6:52:66:02:bd:a3:49:8d:d6:42:6c:86:
d6:38:cb:86:2a:62:f6:72:a9:37:91:9b:9b:89:d8:ca:14:4d:
4d:f3:be:69:8d:c8:da:09:d0:70:11:23:c2:e5:1d:43:06:db:
ea:48:ad:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:04 2026 by rpki-client