Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/cKuRn51gRRyg0OzAqqYwpXqrSrA.roa
File: cKuRn51gRRyg0OzAqqYwpXqrSrA.roa (raw, json)
Hash identifier: ECfFGFUr9DpRFN+AijELwtKue5sli/pFKgwzXdvA+WE=
Subject key identifier: 70:AB:91:9F:9D:60:45:1C:A0:D0:EC:C0:AA:A6:30:A5:7A:AB:4A:B0
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A1A1899212230E3853361C52853F1E154C
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/cKuRn51gRRyg0OzAqqYwpXqrSrA.roa
Signing time: Tue 03 Nov 2026 13:11:49 +0000
ROA not before: Tue 03 Nov 2026 13:11:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 213.145.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:89:92:12:23:0e:38:53:36:1c:52:85:3f:1e:15:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Nov 3 13:11:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70ab919f9d60451ca0d0ecc0aaa630a57aab4ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c4:92:00:cb:17:d8:dc:54:9c:55:54:2e:d0:
1b:0a:e3:5b:a8:a8:33:f3:8b:fe:f7:3c:bd:8b:5d:
92:75:1c:41:a0:d6:38:fd:00:4a:12:96:3a:b4:77:
5a:92:a6:9c:69:75:1c:66:81:d1:96:a3:30:34:e5:
8b:5a:06:09:5b:65:07:34:9d:62:db:8b:b2:03:1d:
e7:87:de:d0:a4:4b:0e:6e:5f:a2:91:06:26:3f:77:
25:57:97:39:93:73:5d:b9:00:93:c1:37:7a:57:c8:
76:32:06:ae:d8:b2:c3:c9:1d:a4:92:91:18:ef:fb:
ca:12:3a:3f:69:d5:c5:4e:1b:80:0d:b9:8d:ca:03:
74:e5:b3:c6:44:0c:ed:d4:33:1b:5e:e8:a0:5f:4a:
d4:95:1b:78:cd:e7:f4:b5:b7:d5:f6:4e:e8:19:87:
91:bd:74:eb:7b:dc:61:e0:f3:7a:13:73:fd:b1:7b:
2c:fd:05:21:b6:1a:91:14:0d:c9:6a:57:05:5b:c4:
81:e9:8e:03:7b:ec:ac:c5:69:68:11:86:ca:d5:ea:
45:c4:3c:66:a1:9d:e2:e1:94:6c:e7:02:74:c7:db:
95:64:d0:85:52:b1:51:0f:6f:8e:7a:93:26:a8:94:
ab:98:28:4e:01:6a:00:32:4e:10:a1:62:a1:be:1c:
f5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AB:91:9F:9D:60:45:1C:A0:D0:EC:C0:AA:A6:30:A5:7A:AB:4A:B0
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/cKuRn51gRRyg0OzAqqYwpXqrSrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.78.0/24
Signature Algorithm: sha256WithRSAEncryption
ea:b5:cd:a2:a8:3f:43:89:97:cc:f0:17:e8:00:a2:e5:e4:2e:
c6:b7:50:ee:ac:8f:41:60:ae:c0:bf:61:2d:32:99:7a:98:ed:
aa:2b:18:c7:bf:de:00:4f:6d:ef:ab:85:93:33:ff:16:5d:0f:
12:fd:2c:f1:f5:b3:d1:e0:bb:59:dd:16:c9:05:c7:db:8c:ee:
a8:9b:3e:29:83:32:4c:a5:e9:58:4a:e8:44:98:6d:3c:6e:5f:
f4:74:8f:c5:25:cf:72:17:e8:2c:d8:4f:3e:55:ad:f6:fd:0a:
81:7e:0b:77:00:35:2a:1e:f3:4b:77:43:7f:8e:e3:76:d5:a4:
b3:7a:e1:72:19:b9:58:2d:fd:a7:30:aa:35:ee:3e:88:2c:69:
28:a9:d1:78:ce:b2:75:f4:50:a3:5c:b8:61:dc:b5:1c:ca:04:
30:9c:d6:37:bb:6e:de:ad:20:09:46:26:6a:79:85:c8:2b:e8:
4e:3a:c6:da:87:8a:8f:6d:0e:fa:e7:c6:7f:c3:ae:d5:73:d4:
88:25:af:27:88:02:c0:f5:96:4c:3f:f4:d5:eb:ff:99:fb:b0:
ae:8e:d8:bd:1c:fa:db:bc:46:ab:bf:0e:9d:0a:0e:65:28:83:
5c:4f:87:b5:7d:40:81:ed:8d:ed:d8:a7:02:e0:1d:8b:e4:c5:
a3:28:76:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 07:51:01 2026 by rpki-client