Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/CsPvX5VkNnHfjEVzf--3N7HiCt0.roa
File: CsPvX5VkNnHfjEVzf--3N7HiCt0.roa (raw, json)
Hash identifier: swdTyMp3lCerLGvqWW9rxner06UFPkpgqjF5MiGiKxA=
Subject key identifier: 0A:C3:EF:5F:95:64:36:71:DF:8C:45:73:7F:EF:B7:37:B1:E2:0A:DD
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019EB8053D505A9DBD8E9F41D5C5D4942E69
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/CsPvX5VkNnHfjEVzf--3N7HiCt0.roa
Signing time: Thu 11 Jun 2026 18:50:11 +0000
ROA not before: Thu 11 Jun 2026 18:50:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 160.20.111.0/24 maxlen: 24
185.85.236.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:05:3d:50:5a:9d:bd:8e:9f:41:d5:c5:d4:94:2e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jun 11 18:50:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ac3ef5f95643671df8c45737fefb737b1e20add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:58:eb:29:11:97:ab:86:ac:72:a2:c2:85:
9a:a0:37:c9:5d:d5:f8:a5:06:4f:fa:73:32:90:f8:
c6:1a:fb:cb:9e:4a:47:d9:b3:95:23:45:ac:6d:07:
79:c7:41:70:49:43:ff:2c:0e:6c:dc:fe:ab:e4:56:
54:9b:5b:cd:c1:cf:db:df:b0:5e:65:51:bb:c2:22:
49:ee:ed:83:27:35:af:5a:c8:49:47:1b:ce:af:19:
34:c6:f5:53:12:80:6b:70:75:ca:76:99:c7:41:69:
9c:19:ae:c5:8c:eb:5c:73:2e:1c:a2:39:73:3a:a7:
8a:92:26:99:d3:bc:6f:87:be:cd:bd:63:db:3d:fd:
94:bb:df:9f:d7:ef:92:03:8c:5c:0a:db:03:21:49:
13:a6:6e:3c:44:91:07:32:ac:96:66:f4:0a:63:82:
44:31:30:c1:10:b7:30:1f:a6:08:4c:2c:dc:2e:72:
2f:59:ad:41:06:f0:1c:c8:65:a7:35:6e:3b:ba:a3:
ca:66:2a:6d:7c:9a:8a:8a:a7:cf:2a:f0:71:ba:99:
27:d3:a7:85:68:06:27:29:43:14:7c:5f:bc:ee:d3:
0f:a2:fc:0f:b4:9c:68:9b:f4:df:1d:90:12:c9:fe:
b8:93:6e:dd:9b:fd:cc:ae:13:c3:6d:77:e6:56:8e:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C3:EF:5F:95:64:36:71:DF:8C:45:73:7F:EF:B7:37:B1:E2:0A:DD
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/CsPvX5VkNnHfjEVzf--3N7HiCt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.111.0/24
185.85.236.0/24
185.254.29.0/24
193.35.152.0/24
193.35.155.0/24
Signature Algorithm: sha256WithRSAEncryption
30:32:e0:92:55:16:8f:b4:a9:59:52:22:4a:7b:97:21:fc:28:
88:24:51:24:90:82:fe:4b:ab:09:4d:62:8e:50:0a:6f:71:7b:
8e:5b:f6:54:9b:f7:33:89:69:a3:dc:e6:a5:86:79:dc:93:e1:
3d:4f:48:fc:eb:60:e8:81:0d:72:e4:2a:0e:7e:ee:88:00:ab:
68:fd:05:0e:f6:da:bb:0e:71:73:41:6e:de:0e:87:51:9a:4a:
ee:8a:6e:16:cc:77:15:9d:dc:9c:c8:7a:47:aa:07:fc:ac:4c:
fb:76:53:7b:54:89:8a:c5:a5:61:32:a3:9c:ea:70:89:c2:65:
ac:3e:1d:ae:b6:bb:db:21:4e:03:bb:75:08:5b:7f:f8:4b:d9:
78:20:f0:6d:cb:0a:d2:9d:a8:51:ab:e1:8f:e9:4f:34:9f:91:
a0:f3:1a:a8:e2:64:26:d9:ba:a3:17:ba:48:25:30:3e:f2:fe:
d0:dc:5b:f3:01:c2:5c:57:da:44:20:52:4d:3c:bf:c9:4b:ba:
06:03:eb:ce:36:92:da:66:68:18:05:02:4b:56:a2:3f:a3:1e:
91:24:98:47:d8:40:b1:c3:79:de:b5:5f:24:8f:6d:80:b8:39:
c9:c8:54:5d:67:a5:b0:25:38:a7:26:db:2e:e2:b3:bf:d6:13:
54:93:7c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:05:48 2026 by rpki-client