Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CbreoFkGdOGp5c3GuTIzewVwCEQ.roa
File: CbreoFkGdOGp5c3GuTIzewVwCEQ.roa (raw, json)
Hash identifier: OZnsVvDmTxTqYTwbwdmbITgihgydGcv2apj3bgG8OhM=
Subject key identifier: 09:BA:DE:A0:59:06:74:E1:A9:E5:CD:C6:B9:32:33:7B:05:70:08:44
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019FEAB18795BA78E0C2CFAFAEEC09255DB1
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CbreoFkGdOGp5c3GuTIzewVwCEQ.roa
Signing time: Mon 10 Aug 2026 08:02:10 +0000
ROA not before: Mon 10 Aug 2026 08:02:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.200.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
45.8.253.0/24 maxlen: 24
85.208.105.0/24 maxlen: 24
193.168.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:b1:87:95:ba:78:e0:c2:cf:af:ae:ec:09:25:5d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 10 08:02:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09badea0590674e1a9e5cdc6b932337b05700844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:b3:c2:bc:83:69:72:35:e2:34:ac:24:0a:
49:c7:5d:60:9b:30:73:5c:7f:0a:66:29:48:5d:f3:
38:b3:c6:71:a5:13:64:31:21:93:16:1d:9e:2d:aa:
49:68:2c:23:18:e0:fd:f8:61:a2:e2:5c:6b:7f:c8:
3a:ee:dc:14:83:1c:91:43:9c:bf:3b:77:fc:be:a8:
86:8c:ac:9c:cd:1f:9c:1c:c6:e2:e5:d2:4e:fd:1b:
40:d0:37:70:8c:6d:f4:2c:c4:46:f5:fb:ad:da:9f:
fb:2b:b3:24:3f:f6:5a:52:d5:b7:d2:55:06:31:77:
8f:b1:4d:d4:cf:af:2d:89:fa:7d:53:b1:68:65:80:
02:bc:e1:23:04:62:67:af:38:88:9a:1d:96:68:d9:
bc:16:58:d9:26:f3:5b:cc:e3:79:55:a9:8a:4a:aa:
38:0f:7f:9c:c9:26:58:48:b9:1c:8b:43:dd:da:f4:
a3:58:d2:04:71:6e:17:97:2f:fb:c0:fd:91:b1:d0:
b9:b5:92:a3:e7:34:cb:74:53:5b:1f:37:6f:57:4b:
60:ac:af:87:40:0e:32:50:62:03:ee:50:d3:ad:e3:
e1:83:46:95:44:13:70:3f:2d:87:38:db:27:52:f8:
c5:dd:09:bd:36:4f:a9:9d:7c:9b:97:bc:02:b2:fd:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BA:DE:A0:59:06:74:E1:A9:E5:CD:C6:B9:32:33:7B:05:70:08:44
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CbreoFkGdOGp5c3GuTIzewVwCEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.200.0/24
45.8.252.0/23
85.208.105.0/24
193.168.210.0/24
Signature Algorithm: sha256WithRSAEncryption
95:2f:ba:45:32:14:4a:20:31:ee:fd:e4:95:95:88:3e:1d:1f:
d2:13:4a:a4:5c:7f:98:9b:02:50:47:b1:25:28:95:8a:5a:b5:
f9:a6:74:5c:06:33:68:14:2d:45:9d:21:88:24:a8:ee:20:4e:
5d:ce:04:38:9e:dd:34:d9:28:ad:05:54:d0:75:02:fa:80:a7:
68:f9:db:05:23:09:ea:d3:79:a0:23:7a:61:d8:69:5a:33:e7:
33:c7:cf:83:88:51:58:ab:46:09:83:8a:fc:1f:f7:72:91:c9:
f0:2b:16:bf:93:a4:32:65:f4:a8:ed:61:3c:3c:01:ed:87:65:
61:fb:f6:f5:de:cd:c0:c2:6a:f3:77:60:de:04:34:26:9d:2c:
d6:7b:83:71:8a:80:be:d7:7d:f6:72:ff:2c:2d:a6:66:13:6b:
8d:86:3e:59:31:8a:58:f3:b6:32:c1:67:14:da:b1:2c:fe:83:
84:77:2b:b4:f3:5f:90:77:53:29:66:db:a7:00:98:e9:12:a2:
29:0c:16:a9:c7:64:fa:7b:51:a1:b0:16:7b:cb:ae:78:bf:a3:
a8:da:f5:bf:c6:2b:24:55:3a:8c:69:03:36:2e:aa:70:6a:16:
e3:9f:ce:f0:7d:f4:0e:ab:18:10:1c:22:91:6d:99:b7:20:f6:
35:a3:08:e4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ/qsYeVunjgws+vruwJJV2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwODEwMDgwMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWJhZGVhMDU5MDY3NGUxYTllNWNkYzZiOTMyMzM3YjA1NzAwODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri6zwryDaXI14jSsJApJx11gmzBz
XH8KZilIXfM4s8ZxpRNkMSGTFh2eLapJaCwjGOD9+GGi4lxrf8g67twUgxyRQ5y/
O3f8vqiGjKyczR+cHMbi5dJO/RtA0DdwjG30LMRG9fut2p/7K7MkP/ZaUtW30lUG
MXePsU3Uz68tifp9U7FoZYACvOEjBGJnrziImh2WaNm8FljZJvNbzON5VamKSqo4
D3+cySZYSLkci0Pd2vSjWNIEcW4Xly/7wP2RsdC5tZKj5zTLdFNbHzdvV0tgrK+H
QA4yUGID7lDTrePhg0aVRBNwPy2HONsnUvjF3Qm9Nk+pnXybl7wCsv1H9wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAm63qBZBnThqeXNxrkyM3sFcAhEMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvQ2JyZW9Ga0dkT0dwNWMzR3VUSXpld1Z3Q0VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQjIAwQB
LQj8AwQAVdBpAwQAwajSMA0GCSqGSIb3DQEBCwUAA4IBAQCVL7pFMhRKIDHu/eSV
lYg+HR/SE0qkXH+YmwJQR7ElKJWKWrX5pnRcBjNoFC1FnSGIJKjuIE5dzgQ4nt00
2SitBVTQdQL6gKdo+dsFIwnq03mgI3ph2GlaM+czx8+DiFFYq0YJg4r8H/dykcnw
Kxa/k6QyZfSo7WE8PAHth2Vh+/b13s3Awmrzd2DeBDQmnSzWe4NxioC+1332cv8s
LaZmE2uNhj5ZMYpY87YywWcU2rEs/oOEdyu081+Qd1MpZtunAJjpEqIpDBapx2T6
e1GhsBZ7y654v6Oo2vW/xiskVTqMaQM2Lqpwahbjn87wffQOqxgQHCKRbZm3IPY1
owjk
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:57 2026 by rpki-client