Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CvVh7VSaxY4HryE7yd5LLGFouFA.roa
File: CvVh7VSaxY4HryE7yd5LLGFouFA.roa (raw, json)
Hash identifier: Ue6FPmw9nrXC6+8aITA6avdF0SaKHb6ev5wWa34eLGQ=
Subject key identifier: 0A:F5:61:ED:54:9A:C5:8E:07:AF:21:3B:C9:DE:4B:2C:61:68:B8:50
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A08C0D6EBA9E42BAB1E5C71828D9E906CD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CvVh7VSaxY4HryE7yd5LLGFouFA.roa
Signing time: Thu 10 Sep 2026 16:01:25 +0000
ROA not before: Thu 10 Sep 2026 16:01:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 185.238.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:6e:ba:9e:42:ba:b1:e5:c7:18:28:d9:e9:06:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 10 16:01:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0af561ed549ac58e07af213bc9de4b2c6168b850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:cf:47:8d:89:27:a8:bf:bc:5c:4e:0a:92:
88:03:61:09:5d:83:01:78:12:48:7c:2b:41:89:67:
df:1c:f7:bf:9e:f1:83:d2:a4:f5:a8:8d:1d:8e:f5:
ff:be:34:70:ad:74:ab:bf:ed:ee:e5:40:42:4c:e1:
75:53:a6:a4:40:bf:1d:31:6b:5a:65:98:b8:6a:6a:
17:2c:94:2c:38:f8:55:0b:df:95:61:41:58:12:ba:
65:2f:75:90:57:49:7c:30:a1:54:39:13:00:de:0d:
2c:fa:f9:aa:de:26:99:1d:56:ba:9f:77:5f:0d:2b:
ea:19:c8:b5:47:fe:9e:ed:40:ac:98:d8:1e:3b:dc:
33:53:d3:b7:7d:ac:94:d9:18:02:6a:a7:ba:0e:0b:
25:e1:dc:b2:62:a2:a8:9a:5a:5a:f8:b8:30:90:21:
a1:bd:ba:b9:e2:34:5e:eb:e5:ca:b3:e2:51:97:bd:
9a:e5:c7:53:3a:14:95:03:05:c8:3c:2e:e2:e1:da:
d5:58:f2:fd:3c:74:f8:6d:d8:fb:59:66:01:d5:df:
ad:41:35:8b:7b:72:4f:19:41:3a:64:d8:33:26:d5:
02:58:5b:fa:ba:47:0c:2d:65:81:b6:41:57:22:a3:
b4:16:12:01:c7:bd:46:c1:57:bd:e8:55:d7:b0:4b:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F5:61:ED:54:9A:C5:8E:07:AF:21:3B:C9:DE:4B:2C:61:68:B8:50
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CvVh7VSaxY4HryE7yd5LLGFouFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.191.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:a0:9c:eb:0f:36:cf:d0:c5:51:71:f1:e1:98:2e:5e:8e:27:
b6:21:3e:d7:94:6f:67:cb:a6:ac:a6:4f:9a:cc:39:02:0a:fc:
d1:d2:5f:89:4e:10:f3:34:c9:e5:9a:f4:f1:ab:26:97:b7:b9:
32:9d:96:5f:ec:0e:5b:b8:7a:8d:dc:fd:c7:f0:0f:3f:6f:41:
ae:87:de:bb:8b:af:71:f2:9e:86:c8:74:83:2f:d9:b5:5e:1f:
34:ff:e4:c1:a9:51:4d:de:45:c8:22:cf:cd:d4:d1:9f:2f:bb:
4e:8c:76:0e:07:5e:fe:ff:08:0e:0a:12:45:b5:0e:96:62:1d:
b4:06:6d:c5:eb:23:57:12:4e:8b:de:89:af:dd:9f:fb:b2:20:
1f:a3:dc:69:22:1c:e2:bb:95:eb:15:9b:f7:49:1b:92:ba:c4:
0f:f6:7f:06:5d:0b:74:89:06:ce:1a:0d:69:85:1d:6f:e7:cc:
29:7d:54:26:05:1c:97:57:d5:b5:c0:75:d7:7a:3e:7c:5b:79:
75:1f:5a:f3:df:81:fe:62:dc:e1:5f:0d:38:ba:d6:80:ed:9d:
14:6b:d2:29:a4:2a:35:01:44:12:5b:15:28:a4:d7:f4:5f:78:
25:76:5c:21:9a:c3:3f:3e:53:92:7b:78:45:d0:cb:dd:6c:33:
55:35:48:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:55:23 2026 by rpki-client