Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/CFjoGu1xIkRD4AXMx7qb8Qjapqw.roa
File: CFjoGu1xIkRD4AXMx7qb8Qjapqw.roa (raw, json)
Hash identifier: JzMpItX6WpyBwW2pJ22HiX4G0oRhcgR43KfhB90tGRs=
Subject key identifier: 08:58:E8:1A:ED:71:22:44:43:E0:05:CC:C7:BA:9B:F1:08:DA:A6:AC
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A05EA5359812CEDF074F191849C6D6F47C
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/CFjoGu1xIkRD4AXMx7qb8Qjapqw.roa
Signing time: Tue 01 Sep 2026 20:24:40 +0000
ROA not before: Tue 01 Sep 2026 20:24:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 93.185.166.0/24 maxlen: 24
193.57.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:a5:35:98:12:ce:df:07:4f:19:18:49:c6:d6:f4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Sep 1 20:24:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0858e81aed71224443e005ccc7ba9bf108daa6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:cf:7f:22:94:05:71:16:73:f5:e5:fa:c4:
9a:aa:18:c3:c7:44:1f:e3:99:62:23:b4:48:f3:b6:
17:5e:d3:e0:78:d5:d9:63:6d:31:47:58:a4:3b:55:
2d:f2:c1:fc:0d:cc:ac:39:b7:f9:dd:be:2e:ff:c3:
bf:4e:df:e4:39:43:8a:ba:19:dd:9a:f3:59:17:7f:
6b:0c:2d:04:a0:d1:32:eb:9e:3a:29:c7:0a:d3:e4:
6d:e7:2d:4f:dc:7f:d9:39:9c:0f:6e:b6:36:02:d5:
92:d3:79:5f:bb:4c:8a:cd:4d:b5:77:4e:c4:e6:6b:
68:ba:ec:39:af:4d:16:1e:05:68:ab:4c:9f:17:9b:
e4:09:a3:c4:37:cf:19:66:1f:a5:05:2a:e2:80:3f:
03:20:07:1c:59:17:3a:e1:cf:bb:ff:1e:cc:00:e6:
56:53:41:73:ad:3e:da:0d:66:03:5b:9f:4e:57:90:
f4:dd:af:71:3a:b9:c3:7e:8d:a8:8c:ac:0d:c2:0c:
f0:54:60:0a:10:ae:da:20:a8:0a:7b:8b:d1:28:44:
2a:6d:7b:d5:fc:30:e4:2d:1c:75:b4:c0:ea:dd:f0:
ed:81:7b:2e:55:7c:8f:10:dc:9a:3f:5a:f0:5f:4f:
55:8f:81:0c:51:fa:c9:8d:6f:16:95:78:ab:a9:6d:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:58:E8:1A:ED:71:22:44:43:E0:05:CC:C7:BA:9B:F1:08:DA:A6:AC
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/CFjoGu1xIkRD4AXMx7qb8Qjapqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.166.0/24
193.57.139.0/24
Signature Algorithm: sha256WithRSAEncryption
32:43:cc:76:54:06:12:75:ac:6e:04:c0:4d:4d:07:da:4f:79:
8e:74:23:24:aa:d1:54:9d:34:40:b9:6c:4f:60:0d:f2:fa:41:
cd:4c:10:a8:1d:42:36:89:8c:50:52:a0:63:c8:5b:8c:ce:9a:
57:77:ef:d3:a4:d9:ba:20:f3:dd:a0:36:56:f5:43:4f:27:39:
23:1c:57:9f:29:9d:19:17:0f:3b:b1:97:37:ba:df:9f:22:e1:
45:d6:d5:70:d2:49:5d:9e:14:9e:ec:96:61:e2:05:85:b6:67:
bb:21:2e:21:bd:c9:8e:4e:da:41:40:ec:91:f3:ce:0d:93:39:
14:01:4d:3c:0e:88:4f:b7:1a:8b:6b:f6:c3:12:c2:fc:55:d1:
f6:1e:02:6f:fa:fa:4a:0a:2c:24:4a:b0:cf:ff:f2:4b:9b:24:
45:c0:ef:be:80:53:aa:2f:ea:f6:82:c2:a7:59:b9:7b:2a:f9:
3c:56:60:60:92:47:21:c9:48:ba:41:fb:60:a3:aa:5a:ff:5d:
a6:0d:e2:cc:b8:71:6e:f6:59:95:99:7d:ab:65:e8:c8:a9:26:
41:e4:c1:01:d6:93:c6:94:4c:3a:3d:b0:62:99:1b:12:93:83:
bd:6e:52:36:71:bc:b6:10:ba:53:fe:40:cd:1e:ad:f4:f4:df:
fe:f7:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:18 2026 by rpki-client