Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/CFccTSuCEIxalR4ALqPdkAzUO7M.roa
File: CFccTSuCEIxalR4ALqPdkAzUO7M.roa (raw, json)
Hash identifier: kaoUX+bTmXS7CQqlA/MKZqDGlkdoafsR1N6tmoItSeo=
Subject key identifier: 08:57:1C:4D:2B:82:10:8C:5A:95:1E:00:2E:A3:DD:90:0C:D4:3B:B3
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A057CD60EEBD1E03790FC73BB43043EAC7
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/CFccTSuCEIxalR4ALqPdkAzUO7M.roa
Signing time: Mon 31 Aug 2026 12:31:12 +0000
ROA not before: Mon 31 Aug 2026 12:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206938
IP address blocks: 2a07:4a00::/32 maxlen: 32
2a14:4b80::/32 maxlen: 32
2a14:4b81::/32 maxlen: 32
2a14:4b82::/32 maxlen: 32
2a14:4b83::/32 maxlen: 32
2a14:4b84::/32 maxlen: 32
2a14:4b85::/32 maxlen: 32
2a14:4b86::/32 maxlen: 32
2a14:4b87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:cd:60:ee:bd:1e:03:79:0f:c7:3b:b4:30:43:ea:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Aug 31 12:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08571c4d2b82108c5a951e002ea3dd900cd43bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:7a:b3:05:51:b7:0d:74:54:e3:a2:5c:cd:
80:04:29:0e:8f:bc:d4:88:f2:39:27:25:d4:5d:3c:
0c:9f:26:e3:54:27:a0:d3:14:2c:d3:af:60:fa:3e:
eb:aa:4d:e1:79:b1:72:df:79:17:66:cb:51:24:c9:
ab:1f:5b:61:cd:ac:fa:b7:c4:d2:ca:d5:0b:b9:0a:
cc:f3:d0:1d:11:11:2d:fc:54:eb:1b:d5:d7:5b:55:
d4:53:a2:a4:4d:55:b7:d7:47:6e:6c:88:44:cd:f3:
a7:9a:39:fa:3b:1c:d9:97:cc:24:c6:c4:fd:b1:53:
d1:4f:47:27:9b:21:69:16:9a:20:8a:ba:f0:6d:8c:
85:53:d3:cf:87:f7:ff:39:37:ff:5d:ae:81:83:eb:
2d:0a:f7:d3:21:55:36:11:dc:6c:f8:80:07:25:4e:
77:43:f8:27:b1:ec:48:74:7c:f4:f8:b1:0d:31:de:
30:89:c9:7e:ef:c2:f5:d4:5e:ee:2a:87:bf:e1:ae:
5e:2a:72:98:5d:8f:51:96:3f:7d:7c:ea:c1:24:e6:
6b:96:de:37:0d:2f:39:e6:7e:ce:d7:6f:d2:f9:22:
a8:f6:3b:f9:e2:9f:5e:8d:ac:0f:2e:f2:7e:64:7d:
dc:e1:1d:6f:fa:f2:92:bc:76:81:41:ea:26:3b:70:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:57:1C:4D:2B:82:10:8C:5A:95:1E:00:2E:A3:DD:90:0C:D4:3B:B3
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/CFccTSuCEIxalR4ALqPdkAzUO7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:4a00::/32
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
72:68:21:9e:92:d3:0c:a0:cd:61:a9:3b:9b:32:5a:df:7e:13:
f4:7f:6f:29:1e:24:c6:5a:b2:41:4d:14:56:be:75:71:63:a4:
be:62:1e:2e:a4:1a:e0:f7:60:5d:64:5d:95:f8:68:a6:be:3d:
72:16:fb:02:5e:20:a9:78:c6:b8:ca:f3:bc:47:0b:bf:f2:de:
38:2e:02:c8:2e:cc:c3:0b:df:54:af:2e:9e:41:71:e6:37:66:
f4:0c:95:28:34:dc:70:f1:3f:9a:ed:66:25:d0:d8:b4:0f:a8:
70:04:eb:ce:92:e9:41:0d:b3:81:8e:d6:a8:4a:48:6f:e6:20:
de:90:34:fa:77:83:98:e0:bd:73:75:70:e6:1e:53:11:aa:3e:
b6:49:58:66:42:e2:64:03:ed:46:80:8d:79:93:e0:6a:17:de:
f9:59:56:bb:9e:5e:cc:c2:13:97:7b:b2:00:fb:6e:de:83:87:
04:7c:32:c0:15:30:d3:b4:68:b9:14:70:12:06:79:b6:65:40:
3c:1e:57:ab:a3:9b:17:52:ff:51:4c:35:e0:52:15:8d:59:89:
de:91:67:55:6b:25:20:9f:39:b3:ab:70:c1:0e:6d:5b:17:ce:
84:bd:54:4c:da:8e:43:b4:f5:b0:59:1f:86:45:8a:4d:0a:26:
3c:8b:af:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:11:37 2026 by rpki-client