Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/CPZYmz36PQpyihuAGSbsR9CzzRI.roa
File: CPZYmz36PQpyihuAGSbsR9CzzRI.roa (raw, json)
Hash identifier: xdvv20wFMnE4vJfI3CDcdQ/mfCZuTze5H+JFti17pOE=
Subject key identifier: 08:F6:58:9B:3D:FA:3D:0A:72:8A:1B:80:19:26:EC:47:D0:B3:CD:12
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 019E331CF81749C3D246F896A7668E2CC163
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/CPZYmz36PQpyihuAGSbsR9CzzRI.roa
Signing time: Sat 16 May 2026 23:26:36 +0000
ROA not before: Sat 16 May 2026 23:26:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209659
IP address blocks: 94.142.251.0/24 maxlen: 24
2a12:5bc0::/32 maxlen: 48
2a12:5bc1::/48 maxlen: 48
2a12:5bc2::/48 maxlen: 48
2a12:5bc3::/48 maxlen: 48
2a12:5bc5::/32 maxlen: 32
2a12:5bc6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:1c:f8:17:49:c3:d2:46:f8:96:a7:66:8e:2c:c1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: May 16 23:26:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08f6589b3dfa3d0a728a1b801926ec47d0b3cd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:fc:43:52:0b:c1:f6:f4:51:67:ba:9e:80:
af:c4:b9:29:17:e9:fb:a2:b7:5d:1f:d6:f4:5d:ee:
4f:e3:c9:dc:e4:ea:39:ba:71:03:ae:62:ce:6b:ac:
c1:be:2f:48:73:1c:4c:dd:71:1b:d7:b4:06:0e:4e:
85:5b:26:39:b7:e7:f8:1d:8a:27:c3:30:06:34:da:
e8:88:34:7b:c3:a5:4c:c6:de:8f:df:f7:74:c7:e0:
5e:a1:35:a1:9c:76:0b:e4:98:ee:39:53:55:7d:cc:
d1:9f:38:f4:b3:24:74:5a:8c:50:97:22:39:49:c7:
e8:36:95:c0:f5:0a:04:6b:3e:48:92:be:91:88:0c:
38:2a:ea:6f:db:56:ba:94:ae:81:ae:65:69:18:9c:
77:05:d9:11:60:d8:1f:5a:3a:8e:6c:0d:21:ce:32:
c1:6f:19:75:fb:d5:9a:47:e2:e8:db:cb:c8:6b:05:
41:b2:bc:f3:2f:70:42:2a:c8:29:5a:ef:ba:ba:72:
e6:0c:cf:50:18:9b:33:f7:02:e6:89:1a:09:cd:96:
63:3c:c3:d4:51:b8:0e:a5:00:9c:ca:41:6e:c7:d8:
e7:7e:1c:5a:c1:33:21:a1:cf:57:3e:6c:52:ba:11:
61:f2:9c:a5:c2:70:3e:3a:1c:92:c7:6b:18:0b:93:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F6:58:9B:3D:FA:3D:0A:72:8A:1B:80:19:26:EC:47:D0:B3:CD:12
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/CPZYmz36PQpyihuAGSbsR9CzzRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.251.0/24
IPv6:
2a12:5bc0::-2a12:5bc1:0:ffff:ffff:ffff:ffff:ffff
2a12:5bc2::/48
2a12:5bc3::/48
2a12:5bc5::-2a12:5bc6:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
03:56:d6:b0:4a:d4:05:20:a9:d3:b9:5d:5a:3f:1c:87:36:38:
b2:e4:11:19:82:ee:60:80:e1:64:93:86:17:c1:99:fd:fb:00:
5c:94:ce:15:80:31:34:c8:7c:f5:00:76:d8:ce:97:a2:34:ab:
1d:38:a4:df:44:e5:0c:1e:34:65:0f:e5:27:13:ae:ec:72:f2:
ef:d3:af:db:9c:0f:ec:c5:1b:32:ff:ec:ce:46:f0:ff:f5:7e:
e6:15:a9:ab:bf:f0:4f:ad:47:6d:e7:84:52:82:48:6a:24:23:
91:06:35:fc:80:4b:a9:42:e9:10:e5:af:65:8b:e8:08:e3:8a:
31:c1:a6:19:24:30:1c:96:f5:f3:18:b8:79:8d:24:d2:64:03:
81:7e:3c:90:68:b9:40:e4:a4:50:b8:6e:46:e1:43:08:3c:ba:
71:61:2d:19:a9:c5:95:9e:a1:4f:b9:7c:49:e8:41:86:67:fa:
94:c3:05:70:69:cd:8f:7d:d5:af:bd:43:83:e7:61:3c:4e:7f:
12:20:ef:14:df:da:e4:21:73:e0:6a:f4:cf:ab:4c:ec:5d:6f:
ff:1b:1b:9f:5e:a3:0f:3e:4a:90:09:7c:d3:b0:2b:54:b7:0c:
a2:97:e0:60:e3:8e:d6:cd:b2:15:b6:bb:56:b1:20:fb:45:eb:
98:42:53:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:05 2026 by rpki-client