Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cbsfLfCGm0-_l8oriSMLnYMS6J0.roa
File: cbsfLfCGm0-_l8oriSMLnYMS6J0.roa (raw, json)
Hash identifier: r6zeSkJaAuIuetuhb3K+7UtYWA91agW0JgBzJrtZi68=
Subject key identifier: 71:BB:1F:2D:F0:86:9B:4F:BF:97:CA:2B:89:23:0B:9D:83:12:E8:9D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A12A5FFA793B1771FB3061D69A9C31DD71
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cbsfLfCGm0-_l8oriSMLnYMS6J0.roa
Signing time: Sun 11 Oct 2026 09:51:35 +0000
ROA not before: Sun 11 Oct 2026 09:51:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218809
IP address blocks: 9.247.71.0/24 maxlen: 24
9.247.78.0/24 maxlen: 24
9.247.128.0/24 maxlen: 24
9.247.131.0/24 maxlen: 24
9.247.139.0/24 maxlen: 24
9.247.142.0/24 maxlen: 24
9.247.158.0/24 maxlen: 24
9.247.165.0/24 maxlen: 24
9.247.166.0/24 maxlen: 24
9.247.167.0/24 maxlen: 24
9.247.173.0/24 maxlen: 24
9.247.186.0/24 maxlen: 24
9.247.190.0/24 maxlen: 24
9.247.192.0/24 maxlen: 24
9.247.194.0/24 maxlen: 24
9.247.197.0/24 maxlen: 24
9.247.204.0/24 maxlen: 24
9.247.215.0/24 maxlen: 24
9.247.226.0/24 maxlen: 24
9.247.236.0/24 maxlen: 24
9.247.248.0/24 maxlen: 24
140.225.193.0/24 maxlen: 24
140.225.198.0/24 maxlen: 24
140.225.204.0/24 maxlen: 24
140.225.206.0/24 maxlen: 24
140.225.207.0/24 maxlen: 24
140.225.211.0/24 maxlen: 24
140.225.215.0/24 maxlen: 24
153.76.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:5f:fa:79:3b:17:71:fb:30:61:d6:9a:9c:31:dd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 11 09:51:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71bb1f2df0869b4fbf97ca2b89230b9d8312e89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:10:73:e5:24:43:e9:23:e3:ea:5a:19:c7:c2:
62:9d:d4:36:79:fe:a0:e0:c0:d9:aa:51:fe:95:f5:
db:d7:d3:a7:e0:62:2d:fe:74:08:45:87:1b:d2:9f:
80:f7:cf:ab:ae:48:4c:62:3d:22:a9:c0:19:e8:35:
7a:ce:90:e9:3a:e0:b4:2a:c9:2e:66:56:c7:09:a5:
77:e1:5d:d1:43:a6:e0:99:fc:01:77:4d:91:72:67:
25:85:6e:85:c0:c8:ed:7c:15:e0:41:39:56:3b:03:
2b:51:c0:b5:0d:54:17:b4:35:fe:7d:7a:96:70:63:
29:c7:e6:f0:10:8f:e9:73:80:78:26:24:1b:00:8c:
87:f9:df:f7:c8:b3:3c:87:7b:07:69:89:fa:d9:f0:
27:e5:04:12:f0:4a:46:3f:cc:17:a0:37:a7:27:0d:
7b:4d:8b:43:0e:64:a4:ce:db:9f:79:08:67:6e:66:
22:92:7c:8b:da:ed:18:01:4a:b6:cb:3b:d4:ae:f2:
81:fa:52:20:7e:32:66:a2:63:b6:cc:b7:4f:14:d1:
27:0b:22:17:07:8b:ed:67:7d:81:34:86:80:84:87:
cf:c9:82:84:34:65:03:64:b0:94:b4:7e:86:57:50:
6c:5b:cd:c3:68:20:0c:99:ce:3a:ee:ac:f9:bb:cc:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BB:1F:2D:F0:86:9B:4F:BF:97:CA:2B:89:23:0B:9D:83:12:E8:9D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cbsfLfCGm0-_l8oriSMLnYMS6J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.71.0/24
9.247.78.0/24
9.247.128.0/24
9.247.131.0/24
9.247.139.0/24
9.247.142.0/24
9.247.158.0/24
9.247.165.0-9.247.167.255
9.247.173.0/24
9.247.186.0/24
9.247.190.0/24
9.247.192.0/24
9.247.194.0/24
9.247.197.0/24
9.247.204.0/24
9.247.215.0/24
9.247.226.0/24
9.247.236.0/24
9.247.248.0/24
140.225.193.0/24
140.225.198.0/24
140.225.204.0/24
140.225.206.0/23
140.225.211.0/24
140.225.215.0/24
153.76.196.0/24
Signature Algorithm: sha256WithRSAEncryption
33:7c:f8:78:5f:13:93:72:2e:30:c2:ac:32:f5:b2:75:ef:81:
d2:78:dd:da:a5:a8:4c:d1:02:22:db:5e:5c:cb:8c:72:ac:25:
5f:6a:54:b2:65:28:43:38:c7:12:7e:d7:00:bf:c1:b9:ab:81:
20:a1:ff:df:a1:35:e8:fb:1a:f6:78:03:a0:a9:8c:9c:41:13:
37:b6:55:e1:74:0e:4a:87:80:77:8c:96:72:0e:11:85:6c:8f:
26:ae:fd:8b:6d:ba:d4:28:9a:17:7f:de:5c:7d:c7:26:ea:f9:
bf:45:e0:c7:7e:8b:0a:5f:21:99:11:3d:86:cd:a0:59:71:11:
69:b0:07:46:c7:d2:96:6b:5c:fe:e9:3a:c1:fe:00:9a:2d:78:
96:0b:78:3b:db:e4:1c:39:14:2a:10:bf:f1:e4:e7:92:5c:5d:
e6:6b:08:81:b2:39:3e:cb:6c:3b:40:ee:a6:b7:27:bc:71:94:
21:45:51:d2:88:1a:c2:fc:8c:cf:45:3c:00:8b:0e:94:04:20:
8f:68:ae:0d:5e:ec:1b:27:e0:16:0e:96:ef:2b:8f:ac:54:02:
ad:54:16:97:16:af:c2:c2:1c:4e:c2:d6:15:1c:ea:0c:04:8d:
f2:49:e6:6f:af:ab:70:c7:c5:45:b7:b6:46:38:fa:dc:0a:d7:
65:75:cd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:23 2026 by rpki-client