Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CpFwLVPuWMqNfIzQN_HUrMYIWDM.roa
File: CpFwLVPuWMqNfIzQN_HUrMYIWDM.roa (raw, json)
Hash identifier: s4OqPwUpZ8DdQV56uihRncblb7yfYV8wwYvWmwTOdG0=
Subject key identifier: 0A:91:70:2D:53:EE:58:CA:8D:7C:8C:D0:37:F1:D4:AC:C6:08:58:33
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368C5AB173658409D2C62F214FA3D2B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CpFwLVPuWMqNfIzQN_HUrMYIWDM.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 194.105.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c5:ab:17:36:58:40:9d:2c:62:f2:14:fa:3d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a91702d53ee58ca8d7c8cd037f1d4acc6085833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:33:44:04:76:cb:68:6f:ab:58:4a:0e:7e:
39:ac:bf:b7:6c:2a:87:60:7e:24:c3:38:87:d5:2d:
c1:a9:fb:05:32:0c:b8:b1:e8:a3:d2:a7:48:d3:55:
db:bd:f2:fc:ad:b6:e9:8e:0d:54:b0:d1:5e:cd:0d:
4f:ae:36:3d:43:bb:f8:43:88:91:a6:e6:0f:80:90:
bf:29:a5:24:c4:41:01:ca:54:e6:28:ff:a0:9e:7a:
d8:f4:e6:1e:26:20:70:64:da:81:1c:6a:e0:7f:4d:
68:ad:bf:bd:d1:ac:0f:76:94:70:57:0d:5e:f0:23:
ec:44:75:9f:14:8e:01:0b:ad:fc:a2:ed:56:c8:9e:
14:a8:41:05:37:09:00:31:d0:7a:86:f0:38:7e:dd:
91:42:c6:a2:79:bc:f4:bf:26:da:87:c9:a6:e6:77:
b2:46:a9:5b:5e:16:8a:44:3f:bf:d2:b5:49:63:98:
36:36:85:9c:84:b9:46:1a:fd:fc:4d:39:7a:fd:a3:
5d:2b:09:0d:ac:bc:03:ad:0c:90:40:52:f5:39:67:
75:d2:cb:fc:50:3e:14:a3:12:56:94:be:69:09:60:
87:8d:43:0b:4e:51:e0:cf:16:c3:b1:62:95:b9:eb:
2a:10:e9:9b:e8:ab:9e:91:3a:df:81:6b:2e:4f:59:
07:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:91:70:2D:53:EE:58:CA:8D:7C:8C:D0:37:F1:D4:AC:C6:08:58:33
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CpFwLVPuWMqNfIzQN_HUrMYIWDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.74.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:26:62:b9:ec:82:5c:12:da:be:3e:f6:26:d6:6e:79:c6:ce:
bd:90:f3:45:79:fd:7b:7b:29:68:2c:5c:6e:81:09:72:a3:5d:
ce:8e:85:c0:a1:97:cd:2e:ed:4d:da:67:67:12:50:f1:f8:d0:
3a:22:b3:ff:7b:cf:a6:88:76:68:a1:fc:c6:64:26:50:68:7e:
91:78:c9:10:41:e7:ef:9a:90:92:ba:4e:4c:01:a7:74:89:ac:
46:b3:0a:c5:c5:c9:5c:69:ac:98:e1:28:f1:52:68:7a:f9:52:
83:bb:f7:db:f8:5c:c0:6f:f6:1a:df:a7:fe:35:30:c2:d3:2a:
cb:e6:99:92:91:df:e9:ca:3f:08:8b:3d:03:3f:44:27:43:58:
42:a8:95:6a:34:2b:79:d3:8f:e8:de:5d:5d:1c:49:86:62:f5:
65:6d:29:a2:6e:21:f5:8d:a5:b5:e3:74:ef:17:89:d4:fe:47:
c4:c0:21:3c:6c:f9:b9:7b:5d:f3:7d:9e:e9:be:1d:9c:3b:17:
2c:a6:c8:05:1c:ae:d7:ed:58:34:3c:68:d3:03:da:f0:47:34:
b2:a7:0d:24:1e:82:03:a7:77:37:4e:6b:62:b1:a9:b3:57:12:
25:9c:c2:a2:ab:0a:ac:4f:3c:4e:9c:53:51:75:7a:26:34:c6:
f9:c1:9d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:27 2026 by rpki-client