Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/CFo5ABZ8MUKR3Fd6UO8--zq7M8k.roa
File: CFo5ABZ8MUKR3Fd6UO8--zq7M8k.roa (raw, json)
Hash identifier: 2+XQO3qwflJmVUasaub9xdlpRBF+UPsxhcWzlGiEL9U=
Subject key identifier: 08:5A:39:00:16:7C:31:42:91:DC:57:7A:50:EF:3E:FB:3A:BB:33:C9
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 019F236887D56EB9721E7F0F9BC6C54FD1A8
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/CFo5ABZ8MUKR3Fd6UO8--zq7M8k.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 46.148.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:87:d5:6e:b9:72:1e:7f:0f:9b:c6:c5:4f:d1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=085a3900167c314291dc577a50ef3efb3abb33c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:d1:6e:bb:58:8c:9e:1d:94:fb:d7:f0:4c:
fa:3f:6c:ed:4e:57:df:49:29:55:44:a2:90:43:4c:
9a:bb:e4:d1:53:64:ea:d1:29:d1:74:2c:e5:48:8e:
05:9c:0b:ba:aa:8a:14:1d:da:46:7b:5b:41:43:ed:
47:d7:ef:44:68:59:85:f6:40:7f:5b:44:f3:0e:0a:
b0:e1:b8:28:cb:94:b0:c5:04:d6:9a:f2:70:a8:63:
a0:bc:ea:1e:36:ed:4d:aa:73:ad:3c:0b:73:8a:9e:
ac:09:57:b2:22:5d:ec:dc:19:4a:f7:af:68:88:7e:
cc:36:ec:0f:8e:34:d2:54:76:73:c1:92:0b:6a:35:
f8:fb:36:ac:5c:1d:99:8e:2a:b6:ec:5d:53:65:ec:
7e:2e:b3:82:5c:b4:b6:02:b9:01:fd:b0:e5:9a:0c:
e7:b5:21:e6:92:93:68:71:c4:23:ae:70:30:6f:cb:
9f:a7:10:d2:56:1b:d8:81:ca:bc:97:4c:5d:6d:0e:
f5:87:a3:8c:57:1a:b7:92:e6:5c:ee:bc:b5:eb:06:
b2:2b:1e:42:0f:86:5c:4f:86:14:49:2a:8c:17:26:
80:91:76:a4:fb:71:3d:13:fb:b2:9a:c5:e3:47:d4:
a8:e0:3a:72:74:00:3f:b8:d1:52:47:4c:ba:a0:10:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5A:39:00:16:7C:31:42:91:DC:57:7A:50:EF:3E:FB:3A:BB:33:C9
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/CFo5ABZ8MUKR3Fd6UO8--zq7M8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.209.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:34:e9:f1:45:3d:3f:db:bb:eb:bd:bc:40:10:e7:88:40:73:
07:6e:92:60:48:71:42:0f:ae:09:1d:82:c8:f6:a8:aa:96:59:
d9:21:1c:77:51:6c:d3:f9:1d:3a:59:56:06:4b:3d:7a:13:b8:
54:fb:95:d7:d4:05:ea:e3:15:02:10:3d:b4:45:2c:c8:ac:7c:
9e:93:d6:2e:77:78:3e:6b:a4:56:9f:56:13:22:6a:60:b3:a9:
a6:ff:0e:fe:da:5a:97:03:a0:b2:a2:16:37:b4:16:d1:70:a7:
32:cf:47:1b:d9:73:86:84:21:a5:26:a7:07:16:cf:48:c5:86:
9a:f2:70:18:53:5b:4c:ca:be:32:66:86:da:a2:e0:c9:f9:98:
6c:95:07:ef:37:d5:93:dd:a4:5a:cc:ec:04:27:7a:b0:8c:53:
78:28:bb:ca:e0:4b:af:23:19:39:61:81:cb:7c:e7:a2:75:01:
0a:0b:11:42:97:26:33:e9:6b:fd:9b:54:a9:8a:be:50:39:5b:
88:f2:78:4c:6e:64:2f:25:4f:e9:77:93:1e:3a:11:9d:9a:84:
e6:a9:8d:55:11:2e:d4:12:a7:08:5a:61:bf:d8:7f:fe:d4:3a:
ed:1c:43:0a:ea:84:0f:08:04:de:d2:83:e0:73:9f:fe:61:af:
8d:ce:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:13 2026 by rpki-client