Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/CBhFxYlbZteyN6PZ-Vmyl3AaymU.roa
File: CBhFxYlbZteyN6PZ-Vmyl3AaymU.roa (raw, json)
Hash identifier: cEqju8RXsbFDyu/dW9+z6y7ODNyFcVjrj9eawVPTsVE=
Subject key identifier: 08:18:45:C5:89:5B:66:D7:B2:37:A3:D9:F9:59:B2:97:70:1A:CA:65
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 019F236946E0888E249971DF776E977540D7
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/CBhFxYlbZteyN6PZ-Vmyl3AaymU.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 5.181.166.0/24 maxlen: 24
45.81.148.0/24 maxlen: 24
185.229.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:46:e0:88:8e:24:99:71:df:77:6e:97:75:40:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=081845c5895b66d7b237a3d9f959b297701aca65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:60:ac:59:ac:8f:db:d6:e2:94:e5:2c:49:
5a:2d:a6:75:93:de:33:10:9a:70:9d:d2:ea:39:a8:
05:9f:d3:7c:d2:9c:78:72:2b:3f:a8:ca:32:88:34:
5d:e7:6b:bb:9b:a6:19:70:8c:78:37:90:6a:4f:e4:
17:75:0c:ad:aa:7d:13:b6:ee:04:25:7f:84:7c:a8:
d5:46:79:eb:9d:a0:fc:11:04:89:ff:70:f5:d9:0d:
5c:d4:8f:1b:51:47:7a:c6:49:70:10:be:69:50:a6:
d9:40:42:3c:0c:0f:9d:62:e8:9c:31:10:61:7b:3d:
d9:91:41:44:28:50:94:a2:c6:0a:4b:f7:b9:cb:3e:
d2:7d:8b:a5:75:da:c6:27:18:57:7f:2c:72:02:0b:
b8:b6:97:01:1f:a6:09:28:b3:f1:f5:fb:0f:04:0d:
ef:67:23:37:b0:67:53:2f:f7:f0:ff:d3:35:d0:9b:
3f:6d:0a:b1:ba:af:fa:a6:95:45:ce:ee:9c:8f:b6:
5a:83:13:16:24:55:92:7b:71:0b:a1:3a:32:06:e1:
5e:72:53:14:4f:f2:2e:ec:97:85:89:95:6b:2d:25:
2b:4f:2c:ce:9d:bb:70:10:be:ce:6c:a5:b4:f7:48:
11:5a:b3:a1:b6:74:67:73:d3:18:a3:0e:e5:93:db:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:18:45:C5:89:5B:66:D7:B2:37:A3:D9:F9:59:B2:97:70:1A:CA:65
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/CBhFxYlbZteyN6PZ-Vmyl3AaymU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.166.0/24
45.81.148.0/24
185.229.243.0/24
Signature Algorithm: sha256WithRSAEncryption
93:3e:1a:1c:47:37:6c:3e:30:22:dc:ae:14:1f:3b:12:86:61:
0d:5c:ec:0b:fe:8f:88:ef:7e:b0:fe:a9:de:d2:73:7d:01:a1:
8a:f2:de:b7:e2:28:d9:17:9e:1b:ca:79:bd:46:5a:05:24:d7:
52:32:e5:b4:55:4e:02:9f:f2:5c:6c:41:5f:e5:ad:54:11:7b:
3c:eb:c3:ba:4f:c7:08:44:bb:2a:0c:14:4e:b7:35:fb:e9:cc:
00:96:8c:51:ca:11:67:b7:62:0f:f3:0d:17:e4:39:3c:53:eb:
53:7b:40:28:e8:5d:9b:5b:34:7b:11:a0:d0:9b:67:86:41:6d:
de:ae:b5:c8:65:6e:c5:c2:5b:83:d7:9b:eb:18:7a:b3:b7:20:
5d:19:14:49:da:e0:41:1f:6b:2d:2f:f1:39:cc:86:d3:77:5a:
3f:0b:2c:a1:1b:86:c6:dc:fc:fe:b3:b8:ea:aa:b1:fb:27:a1:
1b:c0:21:6b:a0:0d:aa:5b:de:40:16:ae:dd:4c:08:6c:8b:9d:
44:d9:a4:2f:af:2c:07:c5:6a:c2:d0:9a:04:59:ae:eb:f3:f1:
33:f6:42:c7:27:34:fa:fc:5b:19:42:fa:0e:ef:a1:c2:6a:e7:
1b:bb:9a:3c:26:bc:93:e3:69:b1:28:26:a5:1a:4e:f5:e2:d8:
f3:d8:3f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:59:14 2026 by rpki-client