Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/CBwxi-z29liij9px9hBFoOE8prQ.roa
File: CBwxi-z29liij9px9hBFoOE8prQ.roa (raw, json)
Hash identifier: vy+ClL1AInwRnVKsETKcUFeJqYJRpFMzwjKVs1M12fw=
Subject key identifier: 08:1C:31:8B:EC:F6:F6:58:A2:8F:DA:71:F6:10:45:A0:E1:3C:A6:B4
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01A165500C5D223752BEB752232BC451C484
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/CBwxi-z29liij9px9hBFoOE8prQ.roa
Signing time: Thu 22 Oct 2026 20:31:47 +0000
ROA not before: Thu 22 Oct 2026 20:31:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48449
IP address blocks: 185.160.193.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
2a14:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:50:0c:5d:22:37:52:be:b7:52:23:2b:c4:51:c4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Oct 22 20:31:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=081c318becf6f658a28fda71f61045a0e13ca6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:b3:dd:a6:84:92:2d:b1:9e:30:10:7c:4d:
14:00:b2:1b:ad:06:ea:4c:0b:2b:5f:83:e2:35:a3:
02:60:da:3c:3e:da:83:10:8f:02:1d:4b:57:b8:5d:
36:43:8f:d1:51:3e:dd:87:ce:d7:ae:68:29:bd:cf:
fb:99:d5:6a:a9:70:bd:a0:c9:ab:fd:86:6d:ee:7b:
b1:51:fe:4f:13:26:f7:bf:44:b2:8e:4c:7a:64:41:
52:97:0c:b6:31:01:cc:14:10:ca:03:a2:26:69:0e:
78:13:39:dc:1a:8c:9f:9e:7d:e3:7a:4d:5c:8f:5e:
a3:3a:4c:0f:b8:43:b8:a4:7e:36:cf:44:2e:91:2d:
6d:34:13:ce:be:cb:d5:bf:ef:79:5a:05:ff:6b:1f:
17:ab:90:ac:e6:0f:a7:36:db:05:80:51:7c:1d:39:
d0:04:f3:03:6c:1a:46:62:5d:27:00:80:14:68:fa:
15:96:67:cd:06:8b:9c:bd:bb:bd:ec:b9:3e:6d:3e:
03:44:4e:1a:60:11:52:b0:52:5e:30:f1:ef:d0:39:
14:a6:91:13:ca:7b:17:57:f5:21:8e:bc:10:78:19:
6f:09:c5:51:5f:8e:36:9e:dc:b8:37:ca:ad:55:7f:
f3:e8:38:d6:7d:e8:74:95:98:c2:dd:20:b1:7d:fd:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1C:31:8B:EC:F6:F6:58:A2:8F:DA:71:F6:10:45:A0:E1:3C:A6:B4
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/CBwxi-z29liij9px9hBFoOE8prQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.193.0-185.160.195.255
185.169.221.0-185.169.223.255
IPv6:
2a14:80::/48
Signature Algorithm: sha256WithRSAEncryption
3c:89:c8:c2:17:a4:56:3c:f6:01:ce:76:0a:f3:8d:ed:99:41:
4f:bc:df:21:63:15:02:a4:5c:e2:1f:af:3b:49:7b:9c:a5:49:
05:a8:14:1c:7a:3e:bf:02:3f:9f:15:e0:14:30:90:63:12:c1:
4b:38:65:4d:ad:ab:58:50:0a:26:01:cb:b8:6d:44:44:8c:b3:
67:9b:d6:fb:7a:8f:b4:a0:5e:6e:92:7b:ac:53:41:9a:a4:88:
3a:ea:7e:a7:28:a9:d9:d4:0e:db:1d:36:6d:1c:3c:00:62:22:
42:6e:0d:c8:bf:9f:43:03:86:fe:98:06:a3:0e:ba:8f:72:0f:
e6:7c:49:3a:78:48:b7:02:85:08:a0:ab:40:b3:54:23:28:b4:
d6:df:d5:8f:77:2f:6e:e9:a1:6a:93:35:64:70:63:18:b5:1b:
59:65:a2:75:2e:2a:ab:9b:df:4f:3d:69:d3:d0:13:7e:e2:16:
ca:71:2a:58:18:9b:b3:97:ab:3b:44:a9:50:55:a5:43:a1:ed:
4f:b0:0a:f7:39:12:30:41:44:e4:db:79:df:84:f6:ec:79:97:
af:3a:27:53:07:7b:02:4e:dd:6f:b9:12:69:66:48:e2:3b:8a:
90:32:bc:a6:41:4e:1c:df:8d:e8:c4:80:92:2e:df:80:86:3e:
92:e8:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:46:16 2026 by rpki-client