Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/CjnWkLoNex6eBWLyx2vHJmJr80w.roa
File: CjnWkLoNex6eBWLyx2vHJmJr80w.roa (raw, json)
Hash identifier: 9uuAoQOLPgEeTsWmWn6L3Egzir6UP+suotOGSUL4eYc=
Subject key identifier: 0A:39:D6:90:BA:0D:7B:1E:9E:05:62:F2:C7:6B:C7:26:62:6B:F3:4C
Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial: 019D2FB227B52646B7A00581CE39B7F0F1EA
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/CjnWkLoNex6eBWLyx2vHJmJr80w.roa
Signing time: Fri 27 Mar 2026 14:28:17 +0000
ROA not before: Fri 27 Mar 2026 14:28:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207821
IP address blocks: 94.142.230.0/23 maxlen: 24
2a0a:2782::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:b2:27:b5:26:46:b7:a0:05:81:ce:39:b7:f0:f1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Validity
Not Before: Mar 27 14:28:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a39d690ba0d7b1e9e0562f2c76bc726626bf34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:ea:8f:21:00:eb:9a:c2:a6:2c:00:67:48:
74:4d:5d:da:d7:ae:66:f0:d0:9a:a3:49:f1:52:75:
c4:c5:a4:0c:84:d2:08:ff:74:17:df:10:7d:df:fc:
7b:4d:56:7d:59:ab:c9:4c:60:1b:a3:75:0d:0a:98:
1f:11:a8:6e:28:de:8d:35:fb:8c:6d:ab:a9:9e:a6:
c6:ec:c2:04:6f:ec:a8:8a:d9:cf:aa:16:f3:89:82:
58:ff:c5:17:24:96:cd:a2:31:c4:fd:a8:48:b9:af:
23:43:82:80:4b:a0:27:bf:2f:09:96:57:3b:0a:2b:
b3:0e:02:6e:c1:6f:e9:a7:22:c4:5a:14:84:26:75:
f9:f2:ad:b8:45:03:c2:98:5d:e6:63:48:c4:d5:cb:
28:fc:0a:71:77:5f:c1:03:44:68:bf:50:8e:66:fd:
ab:67:be:e5:a1:11:43:df:0d:f0:33:9f:dc:bd:f8:
ff:32:dc:56:f5:bb:f0:9d:49:db:fa:da:ae:f8:3f:
fe:e4:9d:4a:79:2d:f3:0a:27:0a:57:35:29:59:a2:
0e:21:6f:9f:c9:6f:85:35:7e:0e:4b:0d:1a:ea:f4:
52:fa:13:a6:34:88:9f:30:57:81:48:23:63:fa:00:
c7:3a:dc:71:be:ec:7e:c4:26:66:f3:cc:50:87:9f:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:39:D6:90:BA:0D:7B:1E:9E:05:62:F2:C7:6B:C7:26:62:6B:F3:4C
X509v3 Authority Key Identifier:
keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/CjnWkLoNex6eBWLyx2vHJmJr80w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.230.0/23
IPv6:
2a0a:2782::/32
Signature Algorithm: sha256WithRSAEncryption
52:6e:7f:ba:46:02:eb:69:73:08:6f:6e:46:ab:6e:83:0c:51:
73:81:9c:85:3d:69:e9:45:33:22:59:4b:35:51:66:61:11:52:
cc:01:3a:d8:01:8e:b9:2b:f0:b0:b2:3d:36:96:e5:ee:e3:cb:
0b:00:06:4e:a0:bb:71:cb:37:3b:59:fe:38:f8:17:33:24:90:
ba:bd:31:c8:30:d4:d2:d8:6f:35:a3:2a:af:4f:88:ad:f5:5a:
a2:8a:f9:a0:57:20:c2:29:fe:10:b3:4d:91:5d:e1:f7:27:90:
18:bb:cf:ae:1b:3c:58:3d:ea:d9:4f:c5:dd:01:31:a1:5e:cb:
4c:84:06:b3:94:df:7f:54:41:e5:cd:7a:0c:97:c3:8b:81:7d:
65:4d:84:c0:7d:b7:6f:a9:6b:fb:e9:81:1a:59:bd:dd:63:f1:
26:08:f1:45:f4:f9:dd:01:77:59:21:ac:72:11:42:c9:15:f2:
cd:1a:e1:b6:88:a0:86:02:aa:63:4c:e3:e9:91:b3:79:92:4e:
ea:fb:8a:35:81:e5:65:96:14:5f:00:fd:b9:39:5a:ed:c7:cc:
85:df:e3:07:60:f3:eb:38:90:ed:6e:bb:e7:01:13:f3:a8:26:
d8:e1:bf:36:10:25:9e:e1:75:3a:62:76:a6:8b:0b:87:ea:27:
50:9e:7c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:06:50 2026 by rpki-client