Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/CbmENpJLaG0YX9_Gx0vq5uAUoqE.roa
File: CbmENpJLaG0YX9_Gx0vq5uAUoqE.roa (raw, json)
Hash identifier: 6zLFAdu+7Zk1blKU97MMoM4dLWkBF7BLSH6EDDgIK/M=
Subject key identifier: 09:B9:84:36:92:4B:68:6D:18:5F:DF:C6:C7:4B:EA:E6:E0:14:A2:A1
Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial: 019FEC02248329F10E7EF9A9BB4A44D496D2
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/CbmENpJLaG0YX9_Gx0vq5uAUoqE.roa
Signing time: Mon 10 Aug 2026 14:09:51 +0000
ROA not before: Mon 10 Aug 2026 14:09:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216067
IP address blocks: 74.122.24.0/24 maxlen: 24
104.167.17.0/24 maxlen: 24
104.167.26.0/23 maxlen: 23
176.116.4.0/24 maxlen: 24
185.77.23.0/24 maxlen: 24
185.188.16.0/24 maxlen: 24
217.114.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:02:24:83:29:f1:0e:7e:f9:a9:bb:4a:44:d4:96:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Validity
Not Before: Aug 10 14:09:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09b98436924b686d185fdfc6c74beae6e014a2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:41:3f:d5:14:35:f6:20:8a:36:57:9c:5d:
f4:7d:87:94:7c:e1:db:69:38:89:01:1e:6b:fd:ed:
e5:f1:e4:8d:da:c6:ed:95:12:91:1d:ad:6f:4c:1f:
d0:7f:a7:0b:8e:3b:36:89:c0:58:5a:c9:b8:cf:35:
13:ce:ae:c9:3d:ae:a7:c8:fd:17:0c:2b:5f:20:7b:
77:cd:38:08:16:85:22:d6:07:c0:98:00:6a:b6:93:
a6:e2:e8:cc:e8:9a:8f:f5:3d:37:0a:56:42:8a:32:
45:48:17:e8:b3:a1:73:2c:8e:d7:ec:6c:74:d0:82:
ba:9c:51:30:ee:7c:df:53:61:65:6a:a6:87:ec:00:
61:70:80:d1:df:1f:e3:fc:4f:c6:42:0a:3d:9d:9c:
23:86:84:dd:93:11:a9:c3:01:f2:d5:12:c3:ef:6d:
c2:50:0c:f8:12:30:7a:36:7a:1a:8f:25:e3:d0:c1:
49:18:3f:18:f7:47:e0:08:f0:68:ac:f7:48:13:c8:
53:dc:98:5a:21:24:fc:f6:ea:97:27:f2:a7:65:42:
9e:c4:4f:2b:1b:dd:83:21:a9:b6:83:e5:33:41:1a:
6b:e0:94:28:7f:b7:e4:c3:f0:2e:86:92:88:d2:da:
e0:d7:1a:9f:bb:fb:ac:2d:6b:5a:1d:77:3f:ca:52:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B9:84:36:92:4B:68:6D:18:5F:DF:C6:C7:4B:EA:E6:E0:14:A2:A1
X509v3 Authority Key Identifier:
keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/CbmENpJLaG0YX9_Gx0vq5uAUoqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.122.24.0/24
104.167.17.0/24
104.167.26.0/23
176.116.4.0/24
185.77.23.0/24
185.188.16.0/24
217.114.35.0/24
Signature Algorithm: sha256WithRSAEncryption
07:78:68:da:01:f6:f1:37:19:4d:a1:6d:5d:55:e5:65:0c:cf:
87:4a:e8:3b:3f:ae:e3:21:a9:b1:6b:0b:62:c7:21:0d:22:21:
a0:ed:34:46:ce:54:d5:8f:45:65:7f:68:a3:44:94:71:b1:60:
03:a1:47:58:4f:95:6c:39:69:4f:75:78:b5:26:3d:6d:7c:87:
ae:08:12:2d:fc:d8:f5:98:8a:b0:c7:ab:79:8b:f0:36:b5:cd:
0d:7e:29:25:04:c5:26:44:df:d5:7c:ac:1c:47:04:ba:11:4f:
cc:c7:ed:ba:ed:21:c0:46:9d:1b:a4:c1:b7:43:4a:c0:d6:c5:
9f:bc:7f:b8:4b:e6:74:41:df:5c:14:bf:46:16:a4:36:a5:12:
68:47:f3:22:66:95:75:30:7f:a9:e5:22:45:61:9c:21:5c:ae:
6d:84:70:0e:34:fe:68:aa:b5:87:ec:33:80:93:f3:4d:48:b0:
28:94:6c:a4:35:68:6d:a5:eb:50:9c:65:99:de:32:81:34:a7:
dc:31:31:62:15:4e:22:59:c1:90:bb:2b:47:13:a6:54:61:81:
02:bf:fa:66:c9:f4:ed:83:e4:4b:70:18:a6:88:a4:df:fb:af:
82:f8:61:a5:fd:bb:dd:54:15:c6:71:1f:de:e1:70:d8:8f:3d:
8a:6a:ec:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:30:25 2026 by rpki-client