Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/ciL412e7YxD0dUNoDylFdeftCgE.roa
File: ciL412e7YxD0dUNoDylFdeftCgE.roa (raw, json)
Hash identifier: zeH95vcJIChb0o4sHPA6BcslnlL9BGF1C0+mhOtRPBc=
Subject key identifier: 72:22:F8:D7:67:BB:63:10:F4:75:43:68:0F:29:45:75:E7:ED:0A:01
Certificate issuer: /CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Certificate serial: 019DF84FCC52BDCFD418917012BACBB441AD
Authority key identifier: A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/ciL412e7YxD0dUNoDylFdeftCgE.roa
Signing time: Tue 05 May 2026 13:24:32 +0000
ROA not before: Tue 05 May 2026 13:24:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196749
IP address blocks: 46.18.136.0/21 maxlen: 24
185.125.68.0/22 maxlen: 24
2a06:3dc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:4f:cc:52:bd:cf:d4:18:91:70:12:ba:cb:b4:41:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Validity
Not Before: May 5 13:24:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7222f8d767bb6310f47543680f294575e7ed0a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:82:43:5b:d6:6f:57:1f:45:90:27:4c:79:
23:25:90:d2:da:a6:da:36:9f:e8:d7:32:13:34:e7:
94:9d:84:2b:b2:eb:53:33:b6:50:df:f9:b6:4c:0d:
8a:40:bb:06:dc:9b:4f:c7:07:96:0d:15:1d:eb:a2:
73:69:26:ab:30:a1:4c:96:0f:71:bd:13:49:b2:9b:
83:de:31:e5:9f:25:63:fa:c6:96:86:89:38:0e:47:
1c:0f:82:38:2b:ca:53:8b:43:fc:7a:7f:b2:05:4e:
d0:07:64:43:33:20:52:2f:99:e3:38:b3:bc:a7:84:
fe:37:cc:cc:39:95:e9:8c:44:bc:9a:8f:e0:65:79:
2a:13:d6:36:e6:0d:74:8f:b6:96:44:e3:a7:1f:9c:
8f:1a:2d:aa:f7:67:bd:e0:0b:53:a7:8e:18:70:49:
29:db:c7:eb:0e:a7:9f:0c:71:01:56:ff:6a:b6:74:
85:bf:9e:ee:c9:dd:03:dd:cc:c6:40:82:70:35:23:
45:32:ef:b7:27:dc:9f:9f:c7:e5:5b:44:9a:50:53:
da:a2:3e:3a:71:e4:44:8e:4c:8b:85:a5:1c:f3:d3:
b0:7d:87:9b:44:eb:47:f7:dc:31:4a:c9:d8:c9:2d:
62:8c:63:45:52:1d:44:6a:c5:9d:6c:57:db:10:2a:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:22:F8:D7:67:BB:63:10:F4:75:43:68:0F:29:45:75:E7:ED:0A:01
X509v3 Authority Key Identifier:
keyid:A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/ciL412e7YxD0dUNoDylFdeftCgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.136.0/21
185.125.68.0/22
IPv6:
2a06:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
92:1a:c9:f1:5d:0e:14:b8:65:85:c1:04:68:72:69:47:02:b4:
39:a6:d7:2b:81:e5:02:63:04:dc:10:55:55:7f:9f:79:c6:a1:
3e:22:d3:90:6d:27:61:de:ed:41:dc:c6:81:55:ce:3b:a8:72:
e0:55:08:be:26:6a:d7:09:7a:bf:75:67:68:f6:83:4a:b7:7c:
37:c9:b3:76:64:a7:09:5e:3c:1f:92:71:69:a8:77:30:5b:31:
ad:76:b8:a3:ce:8b:97:5e:4f:d3:79:c9:40:8f:64:33:f5:4d:
6c:74:e2:84:2a:05:c6:09:31:75:70:3e:c6:0f:46:e4:be:d6:
23:b1:5b:c0:b7:6f:02:9b:d0:50:1a:6f:e0:ce:07:8f:78:c1:
6c:c3:d4:34:a0:9f:1d:6a:2d:fe:33:bd:f8:56:51:c0:4a:cd:
c3:15:9a:6d:bf:37:58:ca:d2:39:5c:ca:5c:ce:2f:9b:54:a2:
71:19:02:87:cb:12:3a:e1:2e:d4:ca:84:9a:63:f2:1b:87:67:
09:2e:ed:12:34:35:c1:eb:eb:fd:7a:53:2b:9b:dd:29:75:9b:
7d:2a:ca:01:0c:ca:b0:97:e7:13:2d:93:fe:a3:4f:87:7f:f4:
9e:a0:75:64:c2:20:5c:56:71:b1:04:80:2b:c3:a8:57:3e:09:
0e:7d:19:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:51:20 2026 by rpki-client