Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/cK5MLIirkupuUC--lCax3HKVTiA.roa
File: cK5MLIirkupuUC--lCax3HKVTiA.roa (raw, json)
Hash identifier: RMFQARPnEaD9nD+3pnJxX9R8erur18BY5dnWYniqEqk=
Subject key identifier: 70:AE:4C:2C:88:AB:92:EA:6E:50:2F:BE:94:26:B1:DC:72:95:4E:20
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F23693D4D163224AC136318201C7E1D89
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/cK5MLIirkupuUC--lCax3HKVTiA.roa
Signing time: Thu 02 Jul 2026 15:18:47 +0000
ROA not before: Thu 02 Jul 2026 15:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59580
IP address blocks: 147.78.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3d:4d:16:32:24:ac:13:63:18:20:1c:7e:1d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70ae4c2c88ab92ea6e502fbe9426b1dc72954e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c6:7d:03:49:d3:37:39:96:b3:c4:c5:71:e2:
4a:5c:60:ee:0d:c3:c5:c2:29:a1:5e:a5:a7:30:11:
8d:c5:5c:18:b5:74:36:12:b9:a7:85:c1:1a:0c:50:
9f:49:75:1c:6b:08:35:8f:2f:40:b5:7a:d2:b7:c7:
f1:e1:e2:cd:a8:7f:6d:90:80:21:18:7f:dc:37:0d:
79:ed:97:f4:a6:e6:ae:7a:4e:73:4f:36:6b:f5:11:
4c:02:2d:81:b8:61:77:3a:ac:cb:2d:62:2a:9f:eb:
42:99:16:7f:5e:a3:d4:e0:62:c1:12:36:bd:b0:14:
3d:90:72:93:6d:89:64:dc:e8:4c:5a:8d:22:79:a4:
15:96:ae:66:d6:c7:af:fa:82:e6:12:32:bb:9e:a8:
41:0b:82:32:c4:ca:1e:d7:7f:48:22:a9:0a:ba:64:
70:06:30:db:0b:d5:dc:76:19:f4:63:cb:6b:e8:4a:
bc:53:58:92:06:a7:25:0d:2b:1e:3d:ad:d6:1c:97:
a7:56:bc:b7:d7:d7:b3:aa:03:16:cd:95:c4:d3:0a:
61:4f:ef:5b:79:18:f3:2e:b9:60:be:7a:8a:33:18:
8c:67:fd:b2:58:b0:62:41:24:06:5e:0f:72:79:38:
be:2e:49:1e:22:f0:4a:e6:4b:01:93:21:5a:06:fa:
96:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AE:4C:2C:88:AB:92:EA:6E:50:2F:BE:94:26:B1:DC:72:95:4E:20
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/cK5MLIirkupuUC--lCax3HKVTiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.46.0/24
Signature Algorithm: sha256WithRSAEncryption
19:39:94:6f:7a:fb:96:68:cb:90:ab:4b:a6:bc:eb:26:98:ab:
5d:94:91:45:fa:67:34:44:7b:64:0b:38:4a:88:ba:8c:c3:4f:
ef:4b:2c:1b:9e:20:6f:de:13:11:50:fd:ba:31:69:db:2d:91:
cf:cf:3d:e1:d7:4b:5e:83:3e:68:2d:92:4f:d3:3c:32:c8:ce:
af:97:5e:1d:0b:19:d4:04:c0:9f:d1:b7:ba:f6:11:bd:ac:f6:
b5:47:a8:dd:e9:9a:63:24:45:7c:4e:ac:5b:8a:17:91:1f:e3:
ec:9c:e6:c5:10:7e:ea:ed:d5:d6:9e:52:5f:fa:5d:09:66:01:
81:6b:ca:8e:4c:c9:89:dd:57:31:75:42:f7:b1:63:88:eb:37:
4e:05:1b:42:4e:82:7a:5d:e9:06:3a:25:b5:9e:d8:70:1f:e3:
df:5e:45:01:b8:ae:f8:06:9d:6c:08:2a:b8:e0:d5:3b:e9:63:
3a:4b:94:95:97:81:b8:08:57:7b:06:e7:23:2f:f8:c8:fe:7e:
35:30:ec:19:0f:a4:d5:f0:bf:31:43:bd:64:10:40:54:f4:4f:
1d:ad:da:29:bd:04:65:c9:f9:12:ac:ee:33:90:d7:79:2a:82:
bb:2d:84:9b:1d:9a:90:9c:5e:81:7f:ce:b3:af:50:d6:d0:e5:
12:e2:32:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:49:38 2026 by rpki-client