Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/CvvGlgWm1GcrOms2BMDm3Ft3YIE.roa
File: CvvGlgWm1GcrOms2BMDm3Ft3YIE.roa (raw, json)
Hash identifier: BlTzWac/CA3jlASMLpb4LLRmE80n50trJVbAwjMNvXU=
Subject key identifier: 0A:FB:C6:96:05:A6:D4:67:2B:3A:6B:36:04:C0:E6:DC:5B:77:60:81
Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial: 019EF9313DE617E142307AE730F0B876ED72
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/CvvGlgWm1GcrOms2BMDm3Ft3YIE.roa
Signing time: Wed 24 Jun 2026 10:33:34 +0000
ROA not before: Wed 24 Jun 2026 10:33:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59778
IP address blocks: 185.166.68.0/24 maxlen: 24
185.166.69.0/24 maxlen: 24
185.166.70.0/24 maxlen: 24
185.166.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:31:3d:e6:17:e1:42:30:7a:e7:30:f0:b8:76:ed:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
Validity
Not Before: Jun 24 10:33:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0afbc69605a6d4672b3a6b3604c0e6dc5b776081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:83:25:01:2f:84:68:ab:9d:7a:28:be:0c:86:
35:af:3d:ab:51:5d:84:18:9d:e2:13:50:cc:84:f6:
bc:b5:c6:f6:8e:be:1b:0c:5a:d4:7d:df:96:ef:b0:
fd:e2:50:8d:15:07:02:da:2d:ca:62:3d:15:5f:c0:
93:5c:e0:bd:fd:9e:45:23:9f:16:21:df:53:b6:3f:
e7:81:ae:ef:ec:c7:a1:c8:14:fa:50:65:60:6c:32:
c7:04:e4:eb:58:12:7c:f7:0c:50:4f:2d:cd:cf:16:
33:2f:c9:04:ff:af:ca:51:32:c5:c8:0e:88:95:9e:
f1:4c:1b:4f:8e:a2:73:4e:4a:a7:c3:23:7a:fc:ca:
90:ce:9b:37:98:3c:fc:60:2d:fc:2c:68:99:a3:ad:
92:20:fd:ee:a3:88:75:c7:2d:9a:07:b8:3b:0d:3d:
bd:c5:c7:77:e3:52:56:a2:54:f7:f8:26:7a:2e:e0:
dd:5c:a3:64:91:bb:6e:0e:e2:fd:8e:56:a9:e9:f1:
d7:66:59:f6:70:f9:7b:94:f0:8c:f5:5b:65:6c:78:
b8:1a:68:92:2a:70:0d:b0:4d:69:2d:13:79:fb:7f:
54:f0:b7:62:7c:8f:9d:f5:39:42:30:ed:1b:a2:9d:
4a:a4:e7:ef:38:79:0d:d2:e9:11:17:0b:bb:ae:79:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FB:C6:96:05:A6:D4:67:2B:3A:6B:36:04:C0:E6:DC:5B:77:60:81
X509v3 Authority Key Identifier:
keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/CvvGlgWm1GcrOms2BMDm3Ft3YIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.68.0/22
Signature Algorithm: sha256WithRSAEncryption
42:9e:1b:74:73:af:a2:de:8e:1e:f6:31:a8:a4:76:03:79:7b:
dc:c8:9b:01:80:64:db:9a:ee:11:f9:d4:ef:98:2a:12:f1:89:
de:0e:83:7d:53:ed:25:73:bc:07:44:65:5b:d4:ae:4c:1e:a4:
50:32:2d:f5:4c:9f:ab:f8:fa:86:68:4d:5f:6e:be:d3:b0:74:
47:c9:f8:45:00:92:98:49:40:aa:d4:3e:4d:d3:df:b5:4c:cd:
3b:e8:71:15:73:4c:14:54:14:fe:f3:0e:c3:ca:88:d9:f1:59:
80:14:ec:2d:63:a8:50:bb:6a:49:cd:2b:0c:7b:a5:21:14:08:
47:27:73:24:0d:58:90:be:92:a3:10:ce:f8:74:40:e6:eb:1c:
bd:2c:31:84:ac:47:8d:5d:38:13:06:8f:5b:e5:10:6f:6d:23:
76:2c:27:71:84:db:ca:80:1b:35:a8:3d:74:df:01:fb:1f:ca:
b5:8f:95:a5:5b:59:e5:ad:20:16:21:83:92:f0:24:56:00:2f:
05:aa:02:84:eb:a6:50:bf:fd:af:dc:f1:1a:8b:ce:47:0f:20:
a6:f8:58:b7:12:39:cf:24:13:6d:0d:f7:fb:25:6b:f5:0e:12:
c9:54:ff:66:8e:99:a5:10:2d:3c:7e:72:a3:b6:61:74:ea:bb:
1a:05:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:58 2026 by rpki-client