Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cFGZrlRq0Lm_7HJ94ahU1jOe3Co.roa
File: cFGZrlRq0Lm_7HJ94ahU1jOe3Co.roa (raw, json)
Hash identifier: VuE3v6IJqLFqyaKf9WpxjboC0JWCQ+OF+jWvBJUWP7U=
Subject key identifier: 70:51:99:AE:54:6A:D0:B9:BF:EC:72:7D:E1:A8:54:D6:33:9E:DC:2A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019EA8FE35616B80E06A34A2FB57290F09AD
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cFGZrlRq0Lm_7HJ94ahU1jOe3Co.roa
Signing time: Mon 08 Jun 2026 20:48:12 +0000
ROA not before: Mon 08 Jun 2026 20:48:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200590
IP address blocks: 5.180.20.0/24 maxlen: 24
5.180.21.0/24 maxlen: 24
5.180.27.0/24 maxlen: 24
5.180.40.0/24 maxlen: 24
5.180.42.0/24 maxlen: 24
5.180.43.0/24 maxlen: 24
5.180.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:fe:35:61:6b:80:e0:6a:34:a2:fb:57:29:0f:09:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 8 20:48:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=705199ae546ad0b9bfec727de1a854d6339edc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:74:28:aa:56:4b:0e:11:0d:b0:69:59:be:
29:21:1b:42:5b:3a:4d:52:2c:d3:88:ed:c0:c3:36:
8c:a4:e5:cc:f1:4e:ab:f3:68:96:91:d4:8e:47:3f:
9d:b2:8c:4e:a0:4f:ba:ee:fd:d7:a9:31:00:0f:ea:
67:b7:72:d0:71:6e:2a:a9:b2:be:b6:ba:38:31:e6:
5e:5a:e0:b5:a5:4e:ac:58:4a:3a:92:27:88:dd:41:
69:c6:de:d2:04:3c:3d:cb:e8:7d:65:3c:b7:fe:c7:
3f:1f:62:fe:36:32:d3:da:eb:dd:19:73:4c:1c:f7:
b0:24:0d:88:a9:a7:a2:e4:d5:fb:90:3b:21:00:29:
5b:7f:56:d8:43:35:20:76:d1:87:45:62:70:e0:c5:
a4:00:5f:d8:40:08:f9:11:2a:d3:2e:ac:ef:20:b6:
9c:74:1a:54:27:ea:f7:3a:04:31:a9:66:09:c7:61:
71:03:42:34:cd:89:98:bd:ff:11:1f:b9:82:a7:db:
10:ac:08:61:95:3a:b1:a8:a8:44:16:cb:27:a3:ea:
16:c0:7f:10:d1:b3:90:43:7e:83:22:bf:d6:a6:a9:
d1:3a:0f:27:cc:f9:dd:d5:07:b0:45:e5:d2:7c:0d:
51:d0:0e:cc:14:6f:db:c2:00:6e:3e:8e:a3:45:ee:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:51:99:AE:54:6A:D0:B9:BF:EC:72:7D:E1:A8:54:D6:33:9E:DC:2A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cFGZrlRq0Lm_7HJ94ahU1jOe3Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.20.0/23
5.180.27.0/24
5.180.40.0/24
5.180.42.0/23
5.180.46.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:4b:2e:92:3a:56:d9:d6:df:86:6f:8d:85:5e:7e:98:92:61:
8b:02:ca:b0:7e:02:87:51:28:ae:bb:04:65:44:dd:a3:59:16:
df:31:54:ae:ea:31:63:01:64:a6:ab:ed:dc:99:cb:65:c6:40:
95:8f:e0:af:9e:56:56:10:1c:5c:19:ce:f5:f9:7f:fd:a8:02:
c6:c3:d9:c0:5a:40:59:ef:03:3b:1d:8e:89:d8:d1:36:fd:63:
55:6c:31:20:c3:5f:2c:bd:e9:f6:e3:f3:b0:3a:8c:b1:04:70:
d2:7e:d7:4c:6a:2d:4d:8b:ef:0b:38:9e:1e:c9:80:03:3a:70:
a3:21:3f:20:e0:a3:3b:81:07:c0:c2:80:2f:a2:f1:96:39:78:
e6:9c:30:c2:28:fb:72:3a:89:e2:e4:0f:3d:1c:f7:1f:8a:79:
3c:83:8e:3e:e0:c8:84:29:18:d8:6d:be:5a:a1:40:24:66:94:
d1:c7:5d:73:bd:58:18:5d:be:f6:a4:31:b0:6b:7b:c9:26:b9:
a2:89:0f:03:a2:c3:a2:8d:b6:29:06:5b:c9:97:18:43:19:2d:
8e:cc:73:82:75:3c:a4:58:e9:bb:94:36:bb:4e:53:22:54:a4:
c7:3b:20:25:e5:7f:45:51:3e:98:f1:bf:54:c5:0e:b6:58:a6:
60:a8:93:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:21 2026 by rpki-client