Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/cfZY6a_P68a48WrfPdh2ybzN0mo.roa
File: cfZY6a_P68a48WrfPdh2ybzN0mo.roa (raw, json)
Hash identifier: vz82xH5oEj0u8LL1xE6ynS2ZCw12kUa4tRY5hXJQvWw=
Subject key identifier: 71:F6:58:E9:AF:CF:EB:C6:B8:F1:6A:DF:3D:D8:76:C9:BC:CD:D2:6A
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019DEE3032E244A81BA30DC74AF797FE3188
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/cfZY6a_P68a48WrfPdh2ybzN0mo.roa
Signing time: Sun 03 May 2026 14:13:49 +0000
ROA not before: Sun 03 May 2026 14:13:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199467
IP address blocks: 45.159.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:30:32:e2:44:a8:1b:a3:0d:c7:4a:f7:97:fe:31:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 3 14:13:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71f658e9afcfebc6b8f16adf3dd876c9bccdd26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:cf:e7:ac:9b:ad:bf:ae:d5:c7:c5:88:2c:
e9:ab:4d:12:9a:45:81:08:a3:ef:a9:aa:4e:a5:78:
3c:b4:45:5c:93:5e:89:d3:99:e3:c2:ba:45:0b:80:
cb:53:37:50:df:f0:29:82:bc:54:b7:7a:d8:c5:6a:
60:5b:a8:62:c0:b6:d6:cb:d6:33:65:71:ae:fa:3b:
b0:d1:d7:f1:87:66:ba:57:27:43:39:8d:34:c8:ea:
70:52:87:24:14:55:de:74:c1:be:01:e5:2b:11:3c:
35:e5:f9:b1:6c:34:39:c8:d5:54:ff:2e:ed:92:ea:
77:6e:73:c8:c3:0b:5c:50:3a:34:99:f7:30:28:69:
27:76:71:52:a3:e7:51:f1:c8:ee:c2:b0:5c:e6:77:
5e:4b:b2:a9:5e:60:1f:c3:22:65:fb:82:27:2b:b9:
7e:a5:35:38:8f:af:5b:49:e0:18:4e:16:32:a8:28:
b1:35:e6:f6:a7:b2:ac:a5:f8:ff:97:c5:c5:b7:e6:
af:38:f6:cd:59:78:07:89:ca:fd:4a:82:e7:66:8d:
10:ee:24:51:3a:3b:8e:dc:5b:17:3a:b9:17:77:88:
bf:89:07:53:2b:a4:43:32:2d:b7:38:d8:16:a1:ba:
fb:7d:87:7b:d8:c5:54:28:b2:a2:bc:e1:65:df:b7:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F6:58:E9:AF:CF:EB:C6:B8:F1:6A:DF:3D:D8:76:C9:BC:CD:D2:6A
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/cfZY6a_P68a48WrfPdh2ybzN0mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.148.0/24
Signature Algorithm: sha256WithRSAEncryption
94:68:84:d1:14:26:a8:b7:15:94:33:17:84:78:48:35:cd:c6:
9e:b2:33:b5:83:3c:86:73:7b:d4:13:8f:c9:e1:5a:86:a9:4a:
76:99:46:b3:91:f8:70:e9:e3:8b:8a:4f:e0:8e:a8:39:df:0d:
e8:e6:eb:a8:6b:af:7e:b3:01:c1:51:11:20:ff:a8:b0:f2:79:
ed:5a:f2:2b:e9:65:b5:ff:59:05:01:39:29:29:2b:ae:32:8b:
c2:80:70:cc:64:4d:d1:62:4a:24:5a:4e:0e:60:88:7d:7c:76:
1c:cf:21:67:e8:3f:ec:55:76:fc:7d:24:19:98:ab:86:84:21:
2e:43:f8:5e:a0:97:1e:65:f7:a0:a0:cc:c7:13:da:ef:0c:42:
a7:c3:a6:f2:11:eb:8f:5a:f7:06:35:41:86:af:d7:d3:be:c9:
2d:0d:7b:f4:9a:e6:e9:80:b2:ad:4d:b4:d4:75:37:cd:04:25:
5a:d0:5c:18:71:8e:f8:d7:d7:50:1d:66:a1:bf:cb:09:f5:f0:
39:8f:8c:98:54:59:e6:07:34:d0:5d:d1:a6:bb:45:69:c1:3d:
94:58:87:5b:92:d8:c4:84:41:d9:40:1e:07:cd:24:5a:6e:79:
ac:4b:80:1f:c4:3a:51:7f:a7:59:eb:cb:f4:3e:41:2b:07:4f:
65:1a:96:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 01:54:20 2026 by rpki-client