Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/cVB_4KeCtrdsz3IxNlNW0DNt5r0.roa
File: cVB_4KeCtrdsz3IxNlNW0DNt5r0.roa (raw, json)
Hash identifier: uqVxjbogMYuriq6WpxC5uiWZfyiDPl2yd7dH40wRIRc=
Subject key identifier: 71:50:7F:E0:A7:82:B6:B7:6C:CF:72:31:36:53:56:D0:33:6D:E6:BD
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 019FC804902B3BAD8DF7232F02F47C5FBA84
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/cVB_4KeCtrdsz3IxNlNW0DNt5r0.roa
Signing time: Mon 03 Aug 2026 14:26:09 +0000
ROA not before: Mon 03 Aug 2026 14:26:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2281
IP address blocks: 57.79.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:04:90:2b:3b:ad:8d:f7:23:2f:02:f4:7c:5f:ba:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Aug 3 14:26:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71507fe0a782b6b76ccf7231365356d0336de6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:08:d5:56:6b:bf:e5:65:c7:e4:12:e4:48:
da:9d:8f:fd:87:75:06:b0:d2:85:5f:12:69:e3:d9:
ba:50:7f:40:b9:3b:45:c4:9c:0c:ae:e6:17:a1:41:
06:68:85:8f:93:f2:96:cb:8c:71:07:03:7e:b3:d9:
45:b1:2d:7b:a6:0f:b4:69:09:4f:1e:67:60:fc:b9:
44:d2:e6:3f:47:c4:77:32:3c:a5:2a:cc:53:ad:2f:
8b:9d:52:26:50:e7:56:ec:0b:8b:0d:2e:d5:36:1a:
c9:50:bc:4a:b5:17:51:5a:46:bc:ca:79:69:a7:57:
e2:c8:81:81:3c:f6:93:7b:23:0c:11:69:c8:e9:b8:
db:db:52:2e:c6:97:c2:dd:6d:bf:23:bc:50:c0:c7:
95:76:fa:7b:25:40:44:33:04:14:f2:ea:d9:44:b5:
e9:61:2b:14:af:93:0d:e9:cd:88:2a:fe:32:24:ef:
05:76:d2:0f:05:0f:b0:d8:26:48:7c:98:60:e1:8f:
bd:d6:ca:b2:c2:e2:6b:19:ba:a5:9f:03:82:29:21:
c9:4a:60:8f:ca:63:ac:d3:8b:e3:b3:ab:26:94:c8:
50:25:3d:72:ec:3a:31:45:35:5b:19:39:e9:11:4b:
c5:bb:68:3e:1e:cb:80:2e:af:b6:5d:74:46:68:41:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:50:7F:E0:A7:82:B6:B7:6C:CF:72:31:36:53:56:D0:33:6D:E6:BD
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/cVB_4KeCtrdsz3IxNlNW0DNt5r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.79.248.0/21
Signature Algorithm: sha256WithRSAEncryption
50:a8:df:d8:b7:68:91:cc:dd:1f:bb:08:29:f8:c3:d1:49:f9:
22:9c:7c:9d:7d:09:f3:74:9a:63:71:9c:c0:27:7f:97:eb:86:
25:39:e7:a5:7b:35:f0:f4:55:72:68:a6:a7:8e:6d:af:f3:2f:
3e:dd:55:79:db:e2:ad:e5:91:03:c5:cc:11:cd:d1:3f:13:6e:
b0:4b:1e:e3:c8:d1:64:14:9f:8d:43:cb:67:f4:92:95:66:75:
2f:93:95:d3:4b:7e:35:16:89:53:8a:ab:41:22:ce:bc:6e:6d:
87:15:98:c6:ea:66:29:2a:2b:39:3a:35:ea:cc:cb:23:af:7b:
9f:5c:84:0c:42:c5:c1:54:4e:91:07:77:f8:78:9e:f8:e3:f6:
dd:e6:ae:fb:38:7b:cf:16:82:d0:5f:65:2d:1a:a8:63:9a:98:
a9:3f:65:75:6a:7d:30:61:a6:44:12:63:3c:fd:7a:c8:65:3a:
e7:42:74:eb:32:e8:06:04:23:a0:8f:bd:7f:fc:5b:5d:f4:fd:
42:f8:e2:c3:d3:4b:bf:6f:0e:c5:54:db:02:b1:c2:b3:a1:e7:
cf:00:72:3f:31:a6:7e:c0:77:d4:6c:a7:52:f5:44:6e:df:a6:
5c:83:da:90:22:af:b8:5a:93:b2:5f:dd:45:c6:c8:af:08:1a:
40:9f:56:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 02:18:09 2026 by rpki-client