Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Cv2FDH45uWL3nvEd5t1GFHjZZds.roa
File: Cv2FDH45uWL3nvEd5t1GFHjZZds.roa (raw, json)
Hash identifier: jkirpezNcZ9cAL3b3bQOUzocvXOWzlkjytdDpfGw3Is=
Subject key identifier: 0A:FD:85:0C:7E:39:B9:62:F7:9E:F1:1D:E6:DD:46:14:78:D9:65:DB
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A15839BA207316F25A1D7C292737833AC2
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Cv2FDH45uWL3nvEd5t1GFHjZZds.roa
Signing time: Tue 20 Oct 2026 07:32:20 +0000
ROA not before: Tue 20 Oct 2026 07:32:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32418
IP address blocks: 152.89.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:39:ba:20:73:16:f2:5a:1d:7c:29:27:37:83:3a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Oct 20 07:32:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0afd850c7e39b962f79ef11de6dd461478d965db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:30:f0:de:07:dd:80:65:40:97:02:21:0e:
0c:94:c0:bd:19:b7:50:1e:ab:e2:e9:01:df:bb:dc:
d8:06:ee:78:e9:45:31:49:59:2d:04:02:53:91:4d:
2e:51:61:fc:a3:aa:ca:da:81:9b:c3:ce:04:2d:30:
30:1c:99:01:f4:01:8a:70:d8:b6:7c:9d:bc:b0:02:
f5:bc:7f:14:9a:5b:bf:fd:3a:3b:55:f0:db:e1:ce:
e1:24:b0:08:94:a5:1d:08:32:3b:70:f0:fa:9b:40:
76:6b:97:37:86:0b:04:ac:c8:22:f5:f4:c8:12:bf:
17:b4:6d:b5:be:c5:e3:e3:f1:e6:d0:66:e9:63:97:
c0:fa:f9:25:71:f3:fc:3f:46:01:bc:5b:d4:bd:05:
6e:5a:5e:69:25:4f:b4:86:33:27:34:56:d0:25:0a:
c8:2e:5b:60:3f:23:14:9b:c8:b5:d3:3c:47:e7:aa:
f0:df:9f:a9:6e:51:38:37:7e:b8:1e:0c:ab:07:56:
ed:4b:b3:14:27:46:aa:d0:28:7a:ac:6f:fa:ac:6e:
8e:e1:b5:2a:ff:6e:5a:e7:f9:ca:47:72:fc:d9:af:
eb:82:5e:f6:45:8e:6d:05:73:48:47:ce:69:24:34:
ea:b1:9a:ba:15:44:f4:cb:86:17:4a:d4:9a:34:f8:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FD:85:0C:7E:39:B9:62:F7:9E:F1:1D:E6:DD:46:14:78:D9:65:DB
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Cv2FDH45uWL3nvEd5t1GFHjZZds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.85.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5a:83:3e:1b:97:6a:6a:9c:d9:75:a8:71:3f:cd:21:d5:53:
29:c8:0f:e7:00:f0:4d:7c:cc:48:44:d6:eb:11:91:eb:e5:52:
92:27:55:9e:3c:32:d2:b5:bf:b5:1c:a6:e0:d7:8a:a4:a9:e7:
c8:f0:9c:37:fb:54:c4:25:47:12:6c:2e:6a:a7:cb:c3:b2:1a:
57:d2:e4:9e:10:c9:59:6d:c5:21:06:88:fd:1f:44:dd:0a:ef:
dd:57:a3:16:41:c7:32:70:0c:a3:a3:66:7a:1f:79:22:f7:ec:
f3:4f:75:a4:d1:98:23:ec:c1:61:da:eb:bc:59:60:10:7b:5d:
5f:26:16:34:71:83:47:94:63:93:27:d4:3c:f6:ec:2f:9c:15:
e5:ac:92:66:e1:20:25:1d:0c:14:2d:79:90:d4:13:00:25:37:
e3:ba:3e:19:0e:8b:7d:13:45:85:59:74:68:b9:78:ac:4b:0e:
ab:63:43:6d:65:69:e2:c4:61:9d:2c:9a:5c:ad:d3:04:5d:cb:
b9:7c:0a:2b:5d:3a:49:0c:b6:ff:db:58:2b:f7:f2:38:54:ef:
2a:91:64:93:47:60:20:53:e6:44:33:77:85:d4:79:17:e5:a1:
f6:cf:b1:14:56:7b:ae:31:09:19:cc:4d:ab:4d:4b:46:ee:4e:
bf:4a:57:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:26:44 2026 by rpki-client