Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/CUqBA3JOr-q_B7jhb4LuDWJBP-Y.roa
File: CUqBA3JOr-q_B7jhb4LuDWJBP-Y.roa (raw, json)
Hash identifier: gL6r+OfrUkmFBaQ7Fz+JI8GRS58TttvJ90zBO4jV1Wk=
Subject key identifier: 09:4A:81:03:72:4E:AF:EA:BF:07:B8:E1:6F:82:EE:0D:62:41:3F:E6
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 019E3DD20DCBD19A12658304F94431181B2C
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/CUqBA3JOr-q_B7jhb4LuDWJBP-Y.roa
Signing time: Tue 19 May 2026 01:20:36 +0000
ROA not before: Tue 19 May 2026 01:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.255.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3d:d2:0d:cb:d1:9a:12:65:83:04:f9:44:31:18:1b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: May 19 01:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=094a8103724eafeabf07b8e16f82ee0d62413fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:fb:0f:9a:df:40:18:dc:0e:c4:6c:c5:ab:
20:d6:7f:20:74:3e:dd:9d:0b:34:e1:37:9d:50:aa:
ab:fa:38:69:16:96:e6:b5:3a:49:36:c8:dc:4e:72:
80:18:15:34:b4:31:f8:fe:15:16:9a:7c:ff:06:37:
de:8e:7e:e1:29:5a:fe:02:c9:cf:d4:e8:e3:bb:54:
56:6b:c0:16:00:4b:a9:9c:84:43:68:65:aa:01:00:
30:05:bf:28:d1:a7:44:58:57:c0:ef:e2:b3:a1:d2:
42:c5:c9:56:d4:cb:cc:78:fc:87:60:58:ad:ce:f7:
7b:8b:6d:53:27:3e:ef:88:06:7b:ef:a8:61:97:f4:
c4:f7:58:ba:ee:4b:c0:81:bb:f1:19:bc:9a:b2:3b:
61:61:ff:7d:e0:c0:c2:c0:6c:4c:6c:21:46:0c:24:
61:52:2a:e4:fd:21:eb:df:23:a8:38:88:7a:62:0b:
9f:dc:d1:19:24:1b:76:59:7f:9f:b5:28:f2:a2:95:
56:49:b1:a2:a5:5d:0f:09:2d:24:f2:fd:a6:37:c8:
20:da:b7:f7:fa:8a:f8:73:9a:99:1e:12:07:31:90:
a0:13:81:f1:d0:67:a5:ba:61:25:61:42:de:ce:c9:
72:83:4f:fa:95:be:ba:5c:5a:8c:31:e4:2c:88:11:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4A:81:03:72:4E:AF:EA:BF:07:B8:E1:6F:82:EE:0D:62:41:3F:E6
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/CUqBA3JOr-q_B7jhb4LuDWJBP-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.28.0/24
Signature Algorithm: sha256WithRSAEncryption
57:91:b1:cd:12:84:e1:a9:43:e4:c8:04:f7:5d:0c:52:e9:90:
b9:fe:ec:56:bb:40:fc:6c:9d:11:6d:a8:e0:54:b2:23:96:36:
f2:bf:e4:e3:66:2e:45:38:39:9a:34:07:80:78:b1:29:aa:31:
3d:39:be:f9:2e:64:04:41:b9:1c:9b:db:a4:af:53:80:93:78:
b3:69:4a:a7:dd:15:d7:4d:77:9f:f6:9d:74:ba:ce:be:cc:f4:
50:a1:8b:6d:01:a6:03:68:af:5c:f7:8b:06:40:69:f0:0b:d4:
03:41:bd:8c:b9:05:4f:a5:f0:c0:1f:92:7d:01:65:63:2e:d0:
85:04:04:0f:39:53:46:94:8f:ab:32:26:54:1b:1b:dc:38:81:
f0:84:1e:41:43:67:d4:4a:8a:03:5e:b9:ed:8d:a7:64:5e:62:
31:0b:76:b9:96:72:4a:fe:cd:a6:b9:93:e2:ba:e8:6b:07:f8:
92:e9:b6:7c:06:39:4e:61:19:50:02:30:ac:41:65:2c:ea:58:
19:06:4a:31:45:f0:37:09:1e:4e:b3:68:dc:87:33:03:00:7d:
d3:c4:62:be:ef:97:13:32:25:53:26:18:32:4f:a2:f5:63:60:
e3:b2:49:17:d3:4c:aa:c5:3d:66:60:05:23:79:c8:59:82:91:
b9:42:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 04:58:55 2026 by rpki-client