Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/CvFBlBLwIHFLjIL8x9Gor9OCFBQ.roa
File: CvFBlBLwIHFLjIL8x9Gor9OCFBQ.roa (raw, json)
Hash identifier: WgW/HRCCeSXdctZKmYQlEtgGubjgMudJvnGV3uIBjZQ=
Subject key identifier: 0A:F1:41:94:12:F0:20:71:4B:8C:82:FC:C7:D1:A8:AF:D3:82:14:14
Certificate issuer: /CN=d09da99a73ba7202418f73718932dc8d7c153e32
Certificate serial: 01A129FC2E171BEDFF740D6D1D7061B00EDB
Authority key identifier: D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/CvFBlBLwIHFLjIL8x9Gor9OCFBQ.roa
Signing time: Sun 11 Oct 2026 08:02:35 +0000
ROA not before: Sun 11 Oct 2026 08:02:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198185
IP address blocks: 130.255.8.0/21 maxlen: 32
2a00:4aa0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fc:2e:17:1b:ed:ff:74:0d:6d:1d:70:61:b0:0e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09da99a73ba7202418f73718932dc8d7c153e32
Validity
Not Before: Oct 11 08:02:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0af1419412f020714b8c82fcc7d1a8afd3821414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:aa:af:88:54:ea:ee:2a:31:52:16:10:9f:
ca:77:17:03:0a:4a:8d:22:d6:65:fd:8c:ed:40:d2:
7d:75:6c:df:ca:6f:d1:c1:89:be:8a:58:3a:ef:7f:
d4:cb:fc:6f:65:e6:50:cd:1b:ab:57:7b:37:40:c2:
59:a6:80:74:0d:e2:42:d8:a0:c5:c5:47:18:af:87:
36:43:ca:c4:b8:63:52:62:00:10:5d:5a:ab:5a:c5:
fb:8f:76:07:df:f1:3b:0c:dc:0c:c2:20:a9:54:cc:
d8:a0:14:50:30:90:78:5f:d1:37:ca:54:93:aa:80:
33:5f:fa:37:6b:fb:ca:64:87:f8:f8:5f:a6:02:b3:
c3:ee:9e:f4:ed:b9:01:9f:14:5c:81:ca:5f:8b:62:
8c:27:47:f1:d7:03:4a:80:64:66:10:c5:e5:62:a0:
49:af:b2:b7:e5:2b:d3:41:2b:6e:a1:e8:18:11:ea:
a8:70:16:be:12:41:4e:ba:bb:25:8e:53:d8:38:fb:
d6:0c:d6:43:ef:e2:f8:d9:bf:00:f7:0d:a8:e9:2b:
8e:f1:a3:85:23:a5:d9:3b:17:3b:c9:e9:ac:79:f0:
42:ca:7a:fc:f1:f8:ec:41:4c:aa:8c:9f:0d:9d:18:
a5:51:5a:74:07:e6:60:89:5b:3d:70:f9:00:30:c9:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F1:41:94:12:F0:20:71:4B:8C:82:FC:C7:D1:A8:AF:D3:82:14:14
X509v3 Authority Key Identifier:
keyid:D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/CvFBlBLwIHFLjIL8x9Gor9OCFBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.8.0/21
IPv6:
2a00:4aa0::/32
Signature Algorithm: sha256WithRSAEncryption
87:6b:29:b4:38:aa:9e:d4:6c:ec:63:56:59:b3:60:5d:d8:c1:
c0:b1:e4:68:3d:e8:ea:f4:f9:24:c4:f2:2b:a0:9b:91:28:62:
0d:67:cc:3c:4d:98:e4:ed:00:48:c3:c3:e6:49:93:f4:1f:0b:
49:3e:ff:09:11:50:48:51:d8:33:40:5c:e0:a2:c5:b8:cc:3b:
66:6f:93:73:f1:90:5c:07:47:c8:b7:3a:c1:70:2f:f0:b6:23:
6b:1a:f8:15:a2:e5:e9:c7:5e:10:d1:b1:bc:22:c7:80:d3:80:
9b:e1:22:f6:b0:39:76:c6:13:97:ab:3f:8d:02:53:98:75:d5:
b5:57:97:94:19:9f:30:60:36:d6:fe:40:9d:83:6f:9d:1b:8f:
6b:23:9d:d4:d3:25:e1:f5:1f:4c:27:c8:1b:87:d8:3e:85:80:
c1:a1:67:2c:24:09:c8:1d:f0:89:c2:87:4b:f5:bc:b1:13:ef:
a4:85:6f:06:24:1d:0f:09:93:59:5a:9c:ef:3a:ba:b1:3f:5e:
09:46:70:16:49:84:c0:ff:75:a4:51:1f:7d:1e:7a:70:e5:b6:
98:d7:f4:99:2a:72:d9:37:45:37:30:dd:d8:3d:04:45:de:9a:
f8:b5:51:85:9c:b2:d4:96:5a:9d:f9:88:27:2e:33:83:ba:2c:
88:3d:d5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:54:54 2026 by rpki-client