Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cckM6iYhbL_WSC0LwJWQZgqC5F0.roa
File: cckM6iYhbL_WSC0LwJWQZgqC5F0.roa (raw, json)
Hash identifier: wSV74rFizs80sXj9syWABc9HEo9X681NrjX53AaMI+w=
Subject key identifier: 71:C9:0C:EA:26:21:6C:BF:D6:48:2D:0B:C0:95:90:66:0A:82:E4:5D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A16321D302C2C94C0C04E0C4765AF2E409
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cckM6iYhbL_WSC0LwJWQZgqC5F0.roa
Signing time: Thu 22 Oct 2026 10:22:03 +0000
ROA not before: Thu 22 Oct 2026 10:22:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215391
IP address blocks: 109.236.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:21:d3:02:c2:c9:4c:0c:04:e0:c4:76:5a:f2:e4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 22 10:22:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71c90cea26216cbfd6482d0bc09590660a82e45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:7d:4a:04:52:58:5f:4a:d1:31:13:d3:e8:
40:56:9b:55:47:76:b4:83:8e:ef:c4:06:dd:14:b4:
bc:4e:e5:02:4b:69:0c:bb:2c:da:15:8c:f9:e1:85:
d2:b3:90:d5:1a:93:07:4f:e4:83:65:cb:43:10:5e:
cd:fa:93:27:07:ec:16:e8:d5:f7:90:84:c5:35:70:
24:96:a3:86:af:70:c3:a8:6c:fa:32:a1:b8:34:4c:
b5:ea:78:62:18:4e:83:32:17:26:22:54:6d:db:e3:
82:4e:ba:ba:74:2d:7d:26:9e:22:63:fc:26:3c:23:
f7:1b:04:fa:cc:f2:8b:d2:aa:45:98:1e:90:aa:71:
d0:aa:7b:f2:32:31:d0:ea:f5:27:ec:25:1f:cf:4b:
83:00:79:36:97:ce:2f:27:f5:ca:33:95:d1:6d:ed:
44:c2:13:9e:39:c1:c1:9e:23:09:02:2e:56:0c:02:
83:f1:ac:2a:bf:16:c0:47:07:6e:f0:6e:29:b8:36:
c3:a3:e8:ef:3c:c4:cf:d3:d6:f6:93:8b:4a:d1:03:
dc:e8:17:9f:ec:20:08:20:73:6c:46:4e:69:02:dd:
93:63:c9:02:53:d5:35:72:2a:cd:bc:c0:a1:68:9c:
96:bc:ff:e2:83:de:83:f8:c4:c2:78:31:d6:ac:0e:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C9:0C:EA:26:21:6C:BF:D6:48:2D:0B:C0:95:90:66:0A:82:E4:5D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cckM6iYhbL_WSC0LwJWQZgqC5F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.48.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b7:a8:11:3c:da:01:92:76:9a:36:4d:14:86:eb:07:ee:8e:
f6:52:78:a6:c7:57:41:7c:5e:d5:19:dc:89:d2:62:17:f6:23:
3c:6d:86:ba:83:43:21:15:f1:67:f4:ba:c8:e5:c0:0f:68:70:
31:d7:2e:90:f7:41:9d:90:a6:df:80:57:ec:15:83:f1:0e:9a:
28:a4:5b:78:dc:7c:02:71:52:a3:6b:e7:99:1a:4f:4d:5b:7d:
77:b4:fd:0d:1f:5a:90:76:50:55:d6:41:cc:33:3d:e2:b0:4d:
18:3c:56:a9:7b:a6:93:a5:97:ce:70:59:57:6a:15:96:69:da:
c2:d7:77:d7:76:14:3c:3a:2a:78:67:d5:c9:09:30:45:d9:2e:
bb:d6:ba:11:31:38:d8:06:dd:80:ca:ee:cd:e9:44:c2:c7:c6:
34:e5:fe:73:07:02:b1:ad:82:33:27:e4:dd:40:cd:7a:ed:5e:
d2:cf:66:42:86:60:b5:70:da:c1:9f:30:95:05:4b:5b:89:57:
0a:e3:59:b5:ec:69:ed:6a:43:dd:89:bd:7d:77:56:78:e8:ac:
3c:b1:cb:0e:f7:2a:5d:c5:c1:54:a3:7f:18:1d:18:a2:b8:6e:
95:45:c8:79:2a:b0:85:6d:fc:8e:e6:51:47:61:39:16:d3:b3:
e9:29:c1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:12:46 2026 by rpki-client