Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/1CWLAk4NIMUnFYJki_bxyTx1nws.roa
File: 1CWLAk4NIMUnFYJki_bxyTx1nws.roa (raw, json)
Hash identifier: j9+hDv6Zflhv8guE2phuedVAKjBmaEfxQKBlQz2Y+10=
Subject key identifier: D4:25:8B:02:4E:0D:20:C5:27:15:82:64:8B:F6:F1:C9:3C:75:9F:0B
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 019F0AC60094A368858C8BB9C3A4D608CF27
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/1CWLAk4NIMUnFYJki_bxyTx1nws.roa
Signing time: Sat 27 Jun 2026 20:29:36 +0000
ROA not before: Sat 27 Jun 2026 20:29:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202477
IP address blocks: 109.205.199.0/24 maxlen: 32
185.70.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:c6:00:94:a3:68:85:8c:8b:b9:c3:a4:d6:08:cf:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Jun 27 20:29:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4258b024e0d20c5271582648bf6f1c93c759f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:9f:8f:05:ee:1c:cf:de:5a:7a:b4:35:a8:
1b:1e:23:72:97:00:17:fe:7d:ba:aa:ce:ea:e2:f6:
7e:96:3d:d1:3d:81:26:17:23:61:87:0d:18:ec:1f:
34:c0:05:71:43:43:8f:1d:c7:02:34:cf:db:16:55:
5c:a1:1a:af:9c:b7:88:c6:c6:31:d5:4e:be:88:ce:
1b:87:19:8b:9b:de:82:10:6d:21:c0:ac:b3:ff:a7:
df:2e:5e:76:a5:dc:f9:3b:f7:61:3f:44:58:2b:e7:
19:66:aa:0b:7d:6e:b7:dc:50:a5:94:77:bf:99:17:
9b:a4:92:87:38:51:64:55:0c:f1:d5:28:12:26:d9:
64:34:c5:d7:c0:d1:fe:d9:52:53:2f:f0:ed:84:60:
6b:fe:02:9f:32:47:56:85:64:28:14:66:51:ea:8b:
be:26:38:c2:f1:9d:bd:4e:38:16:28:32:b0:06:70:
2a:f6:71:65:69:88:d4:7a:69:3e:62:b7:6a:63:a4:
d2:98:f9:4a:be:8d:b3:7c:0d:8a:d6:6b:10:c9:ba:
42:0a:7b:41:5e:3f:ac:4c:67:51:7a:d8:ec:d9:48:
79:b3:a9:f0:76:b0:2d:1a:20:66:2c:d8:e5:71:13:
31:62:f6:83:28:f3:e3:b3:48:e0:33:5d:1d:a3:ec:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:8B:02:4E:0D:20:C5:27:15:82:64:8B:F6:F1:C9:3C:75:9F:0B
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/1CWLAk4NIMUnFYJki_bxyTx1nws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.199.0/24
185.70.67.0/24
Signature Algorithm: sha256WithRSAEncryption
00:cb:4f:cc:54:6b:7f:07:25:fb:f8:57:11:f5:76:79:29:05:
6a:1c:67:0d:2b:63:d5:a5:14:66:64:de:34:1d:1f:53:84:b3:
21:3b:97:b9:cd:a4:a5:2d:fc:50:8f:a4:15:ea:ad:d1:40:2e:
29:10:5a:94:b2:de:55:43:8a:7c:9f:c5:94:14:6e:ff:ad:83:
e0:6f:46:f7:e5:df:b4:6e:c3:f8:43:a5:3c:ba:6d:4b:97:02:
9c:55:58:cb:8f:7d:d9:8d:7a:1f:e8:1f:76:99:0d:04:0a:e0:
35:3d:7b:74:b6:65:b8:98:3d:b8:bd:5a:8d:2a:91:78:95:97:
2f:c1:22:87:ac:a1:b6:c1:66:b5:4d:f5:27:ff:e9:61:3d:5d:
73:dc:73:44:d8:13:0d:9d:7e:36:90:2d:37:e6:fa:60:bf:21:
f7:f7:b6:4e:30:c4:57:af:ed:0b:04:c3:e6:19:46:33:92:b1:
02:0f:47:a2:c5:38:67:82:1f:34:ec:9d:cc:5a:14:29:86:57:
95:b0:e4:a5:51:00:5c:dc:3e:ee:27:06:76:3e:fe:8a:6f:72:
cd:f3:ef:33:6d:32:7a:9a:a4:b0:ed:c6:6e:c8:9e:e1:78:b6:
53:a4:65:cc:bc:99:84:cc:4c:18:ec:bf:4f:23:71:e1:5e:61:
e4:6e:48:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:01:29 2026 by rpki-client