Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CBK_O1Y5uGKgDT79zMtgufM93B4.roa
File: CBK_O1Y5uGKgDT79zMtgufM93B4.roa (raw, json)
Hash identifier: x6KZjG6jhEDH/VJu95ZuQOKMPQNb3xL8KqY/GE1jif8=
Subject key identifier: 08:12:BF:3B:56:39:B8:62:A0:0D:3E:FD:CC:CB:60:B9:F3:3D:DC:1E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E2B4622DE88B08BF10A317EE8D5F068DB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CBK_O1Y5uGKgDT79zMtgufM93B4.roa
Signing time: Fri 15 May 2026 10:54:37 +0000
ROA not before: Fri 15 May 2026 10:54:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 188.213.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:46:22:de:88:b0:8b:f1:0a:31:7e:e8:d5:f0:68:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 15 10:54:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0812bf3b5639b862a00d3efdcccb60b9f33ddc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:cf:11:77:55:6d:89:d9:46:c3:11:bd:d8:
b9:df:8e:6b:e2:78:f8:0d:5a:70:b0:2d:38:03:a0:
d3:09:d9:4d:62:b1:d7:ab:3c:21:f2:7a:ab:51:7e:
3d:3e:88:fc:d8:13:8f:1d:55:82:13:af:10:73:44:
9e:cc:fc:fd:39:84:1e:4a:03:6b:c0:a3:b3:8a:b7:
27:4c:cd:76:07:c4:3a:e5:29:11:d3:32:2e:d8:88:
e7:ae:af:0a:fe:a3:e5:dc:9d:3b:88:35:57:46:64:
b6:11:5a:6d:98:9b:c4:52:0c:dc:73:0a:ef:a9:a6:
b7:25:1a:1b:d0:76:c0:9e:57:f4:07:46:56:3c:83:
fc:93:4a:27:7a:10:82:46:9d:ec:92:b1:2d:4d:b8:
5f:ee:9f:3e:0d:e6:cc:70:2e:40:39:02:bd:53:b4:
96:51:90:d7:4d:a2:35:40:a8:31:ca:4e:76:24:cc:
7a:19:29:de:86:ef:a3:21:e7:af:31:13:47:6a:31:
58:15:a9:7f:b5:ab:f9:8e:33:21:52:81:15:9d:7d:
1f:06:99:8d:d0:d1:a3:cb:96:a0:bf:bf:5f:fc:20:
73:d8:2f:d5:9d:6f:6b:c0:66:e5:14:e6:7f:6b:cf:
7d:d5:b2:68:bb:74:45:8a:e0:af:a3:98:ce:f5:4d:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:12:BF:3B:56:39:B8:62:A0:0D:3E:FD:CC:CB:60:B9:F3:3D:DC:1E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CBK_O1Y5uGKgDT79zMtgufM93B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.216.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b5:a6:dc:eb:af:70:b0:71:5c:34:7d:0e:53:2b:71:40:c0:
fe:5f:51:9f:cb:64:53:03:bd:0a:19:a9:75:aa:f5:26:01:2f:
fb:d4:aa:4f:e8:5b:be:f0:95:5a:04:37:a7:7d:7f:1d:c6:7a:
a0:2a:91:8b:5c:19:a9:a1:45:4d:aa:de:a8:69:bc:20:b6:55:
4a:ac:76:4f:41:ad:65:28:94:0f:96:c8:f1:1d:14:11:f5:22:
e7:c7:7a:e6:af:d9:fc:72:0f:5d:34:54:c2:71:20:e2:94:fd:
63:c6:8f:26:c8:ff:5b:e3:6c:e8:b5:04:ee:fe:6c:28:ad:a8:
a5:8a:e6:65:cd:6b:9a:f7:b6:84:75:5d:a9:f5:4a:f7:ad:80:
ae:23:7e:24:60:5d:0c:ec:c3:e6:e6:20:e9:a3:67:6b:7b:63:
01:ab:c8:2a:de:66:93:04:be:01:69:bb:ec:af:cd:c6:63:61:
bb:d8:6c:33:84:a5:e7:22:f6:82:8d:f3:28:b6:57:1d:5f:1c:
2d:35:2e:71:bf:d5:1a:11:f1:3e:55:23:6b:ed:96:e9:f6:7b:
de:70:aa:8e:c9:99:db:98:b2:c9:37:7c:97:74:ab:5d:7c:4c:
ba:fd:c9:48:ce:f8:7a:27:e8:19:ca:8f:ab:93:80:04:67:41:
ea:62:98:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:20:06 2026 by rpki-client