Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/CBb_QUmnyPXNyR2rB5w8NXHg72U.roa
File: CBb_QUmnyPXNyR2rB5w8NXHg72U.roa (raw, json)
Hash identifier: bD1I4HJtFjaX/Nr5+DpgVpAOzK/Hlp8fWNP0ho2Ow6s=
Subject key identifier: 08:16:FF:41:49:A7:C8:F5:CD:C9:1D:AB:07:9C:3C:35:71:E0:EF:65
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 01A0A436DAC4CE4F941ADAC086A35B68261B
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/CBb_QUmnyPXNyR2rB5w8NXHg72U.roa
Signing time: Tue 15 Sep 2026 08:37:33 +0000
ROA not before: Tue 15 Sep 2026 08:37:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5607
IP address blocks: 2.120.0.0/13 maxlen: 13
5.64.0.0/13 maxlen: 13
46.64.0.0/15 maxlen: 15
51.182.0.0/15 maxlen: 15
51.182.0.0/18 maxlen: 18
51.182.64.0/18 maxlen: 18
51.182.128.0/18 maxlen: 18
51.182.192.0/18 maxlen: 18
51.183.0.0/18 maxlen: 18
51.183.64.0/18 maxlen: 18
51.183.128.0/18 maxlen: 18
51.183.192.0/18 maxlen: 18
51.186.0.0/15 maxlen: 15
51.186.0.0/18 maxlen: 18
51.186.64.0/18 maxlen: 18
51.186.128.0/18 maxlen: 18
51.186.192.0/18 maxlen: 18
51.187.0.0/18 maxlen: 18
51.187.64.0/18 maxlen: 18
51.187.128.0/18 maxlen: 18
51.187.192.0/18 maxlen: 18
51.190.0.0/15 maxlen: 15
51.198.0.0/18 maxlen: 18
51.198.72.0/21 maxlen: 21
51.198.80.0/20 maxlen: 20
51.198.96.0/19 maxlen: 19
51.198.128.0/17 maxlen: 17
51.199.0.0/17 maxlen: 17
51.199.128.0/18 maxlen: 18
51.199.192.0/19 maxlen: 19
51.199.224.0/20 maxlen: 20
51.199.240.0/21 maxlen: 21
51.199.248.0/22 maxlen: 22
78.86.0.0/16 maxlen: 16
90.192.0.0/11 maxlen: 11
93.96.0.0/17 maxlen: 17
93.96.128.0/18 maxlen: 18
93.96.224.0/19 maxlen: 19
93.96.224.0/23 maxlen: 23
93.96.228.0/23 maxlen: 23
94.0.0.0/12 maxlen: 12
149.241.0.0/16 maxlen: 16
151.224.0.0/13 maxlen: 13
176.248.0.0/13 maxlen: 13
176.255.213.0/24 maxlen: 24
176.255.240.0/24 maxlen: 24
176.255.241.0/24 maxlen: 24
176.255.242.0/24 maxlen: 24
2a02:c78::/29 maxlen: 29
2a02:c7a::/32 maxlen: 32
2a02:c7a:1200::/48 maxlen: 48
2a02:c7a:1202::/48 maxlen: 48
2a02:c7b::/32 maxlen: 32
2a02:c7c::/30 maxlen: 30
2a02:c7c::/33 maxlen: 33
2a02:c7c:8000::/33 maxlen: 33
2a02:c7d::/33 maxlen: 33
2a02:c7d:8000::/33 maxlen: 33
2a02:c7e::/33 maxlen: 33
2a02:c7e:8000::/33 maxlen: 33
2a02:c7f::/33 maxlen: 33
2a02:c7f:8000::/33 maxlen: 33
2a06:5900::/32 maxlen: 32
2a06:5900::/34 maxlen: 34
2a06:5900:4000::/34 maxlen: 34
2a06:5900:8000::/34 maxlen: 34
2a06:5900:c000::/34 maxlen: 34
2a06:5901::/33 maxlen: 33
2a06:5902::/31 maxlen: 31
2a06:5904::/31 maxlen: 31
2a06:5906::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:36:da:c4:ce:4f:94:1a:da:c0:86:a3:5b:68:26:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Sep 15 08:37:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0816ff4149a7c8f5cdc91dab079c3c3571e0ef65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:23:56:92:11:c1:ea:9d:ee:51:fe:5b:bd:
6c:77:c0:26:88:a8:b4:ea:91:40:00:cd:b5:07:14:
4f:99:5a:a5:5a:65:ca:d3:e8:ff:a1:1d:94:80:62:
ba:11:2a:86:ce:50:f7:a2:94:c8:c6:9f:09:10:84:
1f:47:7b:49:5f:f2:45:c4:93:11:99:5b:28:c4:02:
70:83:19:b7:b8:43:cd:21:fb:77:f7:6a:0e:01:e7:
65:47:c4:cb:cd:d3:8a:d8:ac:c5:ac:44:00:f9:53:
82:50:74:92:c2:0d:6a:2b:01:c0:2f:82:15:2c:3b:
d9:0d:02:9f:3d:83:b0:42:be:95:5b:9c:c7:19:4e:
14:e7:b6:d3:3a:86:72:e6:45:4b:31:58:e6:6d:76:
f8:e2:2a:5e:c2:9c:11:18:f1:45:31:87:d1:4b:3d:
84:e9:bd:de:f2:cb:b1:bb:29:d4:3b:d2:ea:a3:44:
13:f8:7d:2c:40:be:2f:52:7f:98:47:c7:ba:26:3a:
ba:7f:02:76:e3:cd:7a:8c:2f:64:d2:51:f7:2f:ef:
8b:ba:9a:97:9e:e3:41:67:d1:49:56:0f:fe:9c:98:
22:50:8a:f6:6b:c8:86:0f:32:67:bc:96:c2:2a:e2:
11:a3:95:ed:b7:f0:9c:13:c6:32:bc:c3:d6:8d:79:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:16:FF:41:49:A7:C8:F5:CD:C9:1D:AB:07:9C:3C:35:71:E0:EF:65
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/CBb_QUmnyPXNyR2rB5w8NXHg72U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.120.0.0/13
5.64.0.0/13
46.64.0.0/15
51.182.0.0/15
51.186.0.0/15
51.190.0.0/15
51.198.0.0/18
51.198.72.0-51.199.251.255
78.86.0.0/16
90.192.0.0/11
93.96.0.0-93.96.191.255
93.96.224.0/19
94.0.0.0/12
149.241.0.0/16
151.224.0.0/13
176.248.0.0/13
IPv6:
2a02:c78::/29
2a06:5900::-2a06:5901:7fff:ffff:ffff:ffff:ffff:ffff
2a06:5902::-2a06:5907:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2d:ae:19:18:b0:1e:d2:19:48:8a:ce:5d:78:0a:82:06:4c:3a:
ac:96:f7:fb:31:a9:96:2f:c3:6f:8e:2e:43:05:be:23:5a:4a:
dd:1b:b8:a3:3c:76:ab:84:7d:7f:a6:1c:49:e0:a0:d9:0a:bd:
e7:42:7c:42:d7:6c:a0:4f:84:90:dc:c6:23:27:b6:b5:ee:eb:
68:86:20:80:5b:3d:56:72:72:92:e8:52:ad:c4:d7:dc:4e:ff:
be:e6:3f:07:3c:44:e3:a2:61:03:64:86:60:d1:0c:45:ce:02:
59:4c:78:6d:99:96:e2:a2:06:34:a0:c9:90:6a:b0:f7:6f:90:
07:9e:40:79:ef:b7:3b:e1:c7:59:c7:87:90:5d:c3:5a:cf:95:
05:da:3b:9a:43:65:9a:32:45:8b:b0:2a:62:df:81:c2:c0:3d:
29:f7:cd:c7:33:b3:48:55:54:69:c5:b9:9d:9d:01:8c:07:57:
42:fb:37:32:65:0a:de:be:fa:4e:cf:31:56:bf:1b:7b:06:12:
bd:29:f1:47:20:f5:a6:1f:e5:ec:92:9b:5a:36:d8:43:8e:f2:
52:7e:15:02:ec:fe:c6:f0:ac:1b:eb:ae:bd:e0:0a:c0:ec:fa:
1a:bd:e1:38:a1:25:97:96:09:f2:0a:ce:92:19:76:e5:9b:ac:
a9:80:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:48:28 2026 by rpki-client