Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/cfkj9HKlcBWjZEXYxhhL7CA9buM.roa
File: cfkj9HKlcBWjZEXYxhhL7CA9buM.roa (raw, json)
Hash identifier: 8k37EIHSY6nL7xihWWvq14/BZrfYo3UyfWUncp6eE8E=
Subject key identifier: 71:F9:23:F4:72:A5:70:15:A3:64:45:D8:C6:18:4B:EC:20:3D:6E:E3
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 01A07FAD040688D8E327CFA9C7FEEF68B3AC
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/cfkj9HKlcBWjZEXYxhhL7CA9buM.roa
Signing time: Tue 08 Sep 2026 06:20:40 +0000
ROA not before: Tue 08 Sep 2026 06:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29386
IP address blocks: 5.0.128.0/21 maxlen: 21
5.0.136.0/21 maxlen: 21
5.0.144.0/21 maxlen: 21
5.0.152.0/21 maxlen: 21
5.0.160.0/21 maxlen: 21
5.0.168.0/21 maxlen: 21
5.0.176.0/21 maxlen: 21
5.0.184.0/21 maxlen: 21
5.155.128.0/21 maxlen: 21
5.155.136.0/21 maxlen: 21
5.155.144.0/21 maxlen: 21
5.155.152.0/21 maxlen: 21
5.155.160.0/21 maxlen: 21
5.155.168.0/21 maxlen: 21
5.155.176.0/21 maxlen: 21
5.155.184.0/21 maxlen: 21
5.155.192.0/19 maxlen: 19
178.253.100.0/23 maxlen: 23
194.58.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:ad:04:06:88:d8:e3:27:cf:a9:c7:fe:ef:68:b3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Sep 8 06:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71f923f472a57015a36445d8c6184bec203d6ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:47:c4:83:ab:e0:20:5b:68:85:39:50:b6:
22:98:96:fe:7d:74:6e:24:56:91:2d:7f:95:2a:a1:
8e:7a:5d:5e:f4:29:a6:ba:37:54:70:b6:ee:40:64:
a8:b4:e4:71:3b:1d:54:6a:4b:6d:4b:e2:6c:7f:b6:
f8:41:31:09:df:01:8c:3b:ac:e4:84:d8:30:46:0d:
2b:7c:b4:d6:26:0c:da:d0:bf:66:38:25:92:a5:86:
47:9b:dc:27:aa:37:09:7a:e7:14:c5:26:0d:4d:b8:
f9:21:49:b1:92:f6:67:87:b4:66:83:da:c5:f3:30:
3a:71:22:ce:a5:f2:3b:74:d6:46:5f:ab:00:61:15:
2a:77:da:7e:e9:cd:0b:b2:9f:69:9c:c3:45:92:3c:
31:29:76:e0:a4:bd:63:59:5e:7a:8e:92:29:f2:4c:
92:d8:58:7f:25:b0:fb:4a:6b:11:4d:c0:d4:02:63:
34:e2:ec:98:b2:e7:b1:67:fb:c4:14:e6:2f:bc:c8:
40:ce:ea:7b:3a:e4:e7:1b:0f:6b:d3:40:70:ba:f3:
f8:21:f6:47:db:a2:08:96:f3:d2:1f:fd:2d:40:ed:
ed:ad:0f:99:6d:a6:e1:57:4b:a3:70:a6:77:e8:58:
78:7c:7e:f1:f6:5a:5e:2b:ee:1f:60:06:96:79:9f:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F9:23:F4:72:A5:70:15:A3:64:45:D8:C6:18:4B:EC:20:3D:6E:E3
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/cfkj9HKlcBWjZEXYxhhL7CA9buM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.128.0/18
5.155.128.0-5.155.223.255
178.253.100.0/23
194.58.0.0/21
Signature Algorithm: sha256WithRSAEncryption
73:be:37:2a:da:2a:9c:22:4e:b2:84:e1:d3:3f:f3:76:63:c5:
6f:03:ab:ec:07:e1:01:b3:08:26:de:d9:75:96:f0:18:53:4a:
74:95:b9:0a:8a:d6:95:34:b9:a2:e5:58:e5:5e:a2:c0:d3:6d:
22:ec:a2:77:b7:4a:9a:00:c8:48:f9:af:d9:fd:24:0a:5d:39:
a7:aa:3e:59:8f:bb:a9:c2:ef:cf:86:7e:af:ef:ea:ce:49:50:
b5:1a:cf:3e:54:22:54:fe:60:5d:85:cb:fe:b3:a9:ea:51:62:
2d:1e:a1:51:b9:c8:58:01:ff:52:ac:4d:6f:63:36:3c:57:7a:
a6:ae:cf:31:ca:d3:75:5c:e7:6e:05:38:fd:77:cf:6c:26:d5:
f7:24:e1:45:a3:3f:ea:c1:55:af:ed:e0:56:b1:09:1c:1f:d5:
31:fb:20:84:d0:f7:90:38:cc:19:db:a2:d0:98:8d:cd:f1:e0:
57:e7:8f:42:88:84:91:38:3e:8a:9f:6f:52:9b:f9:b6:79:00:
1d:6d:e8:6e:35:fb:fc:cd:19:6d:3c:64:77:bd:52:02:63:a1:
19:6a:cb:72:9f:8f:8b:36:62:7b:b9:31:53:24:1d:6a:8a:19:
04:b2:49:20:7d:c8:69:e2:20:2c:4c:d4:6c:a1:f7:b9:ab:f9:
ce:df:fb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:59:34 2026 by rpki-client