Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/CfbCB0PQx5l8WTJ2S7ENdm7RZdM.roa
File: CfbCB0PQx5l8WTJ2S7ENdm7RZdM.roa (raw, json)
Hash identifier: 875hfwYq5vhAYX7OIsUoPo8qm1rzCuQ03Pj7tkWPWtU=
Subject key identifier: 09:F6:C2:07:43:D0:C7:99:7C:59:32:76:4B:B1:0D:76:6E:D1:65:D3
Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial: 01993351F5A436B6D670E64C161C71076B2B
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/CfbCB0PQx5l8WTJ2S7ENdm7RZdM.roa
Signing time: Wed 10 Sep 2025 11:10:33 +0000
ROA not before: Wed 10 Sep 2025 11:10:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43648
IP address blocks: 45.131.236.0/23 maxlen: 24
185.78.16.0/22 maxlen: 24
2a05:6680::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:51:f5:a4:36:b6:d6:70:e6:4c:16:1c:71:07:6b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Validity
Not Before: Sep 10 11:10:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09f6c20743d0c7997c5932764bb10d766ed165d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:48:78:8e:bc:81:4b:5e:5b:11:1a:dc:8d:07:
f0:17:66:23:4a:8b:7f:b3:b1:8c:fb:4c:8a:9e:46:
f2:47:5d:f0:8c:06:bf:02:f1:f9:6d:ad:fd:85:ee:
1e:3d:47:3d:a9:2c:4d:3e:9d:80:89:95:97:fe:00:
21:40:e2:c8:ac:72:82:e2:b4:ed:2e:f6:fd:86:37:
43:c6:b7:dc:17:c5:1d:a6:47:7a:c0:42:d3:fc:72:
72:9a:99:34:63:5c:73:1f:9a:98:43:b4:57:c7:7b:
29:f3:8e:5e:ef:0c:d2:30:33:91:b6:c2:66:20:8c:
a5:27:4a:fd:b2:6a:13:a8:04:72:ac:b9:ae:fb:34:
9c:4c:bd:a4:3a:c7:e6:79:57:f7:f6:4c:80:d5:f8:
90:09:d1:86:2b:ad:c1:bd:c3:95:01:54:16:b0:e5:
14:04:d8:25:08:e2:7f:5d:a9:45:70:5d:40:7b:99:
69:a4:62:2e:f8:c5:3e:1c:0f:29:81:64:b1:3e:61:
00:d3:f1:c7:eb:05:f0:60:88:e6:6a:4b:bc:e4:63:
2b:76:f8:b9:88:91:0a:f9:f2:f4:79:c3:72:81:68:
5f:6d:c6:c0:e3:fd:8c:31:3f:1a:f4:8f:0c:90:e8:
df:1d:85:eb:8a:8d:15:cf:b8:84:8d:c0:16:87:fa:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F6:C2:07:43:D0:C7:99:7C:59:32:76:4B:B1:0D:76:6E:D1:65:D3
X509v3 Authority Key Identifier:
keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/CfbCB0PQx5l8WTJ2S7ENdm7RZdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.236.0/23
185.78.16.0/22
IPv6:
2a05:6680::/29
Signature Algorithm: sha256WithRSAEncryption
ae:7e:2b:fb:b7:9e:a3:0c:55:d0:f8:16:64:39:31:6a:d6:73:
f8:3d:20:70:bc:fa:5a:74:a6:52:a9:3b:4e:c5:8a:0e:3d:70:
54:85:3f:86:7a:86:73:a3:91:ef:4f:c7:36:71:db:7f:c9:8d:
8d:15:af:4c:fc:70:77:b0:f9:cd:c3:67:e2:ee:27:d7:84:6f:
41:80:fc:d3:4b:a9:77:e1:76:2a:95:f5:65:7d:b3:c4:23:04:
aa:d0:da:d5:2f:61:d1:9c:44:4b:2f:6c:c5:78:4e:45:06:93:
a1:bf:98:4e:19:c5:77:b0:a4:55:0a:80:0c:8f:90:c8:80:ae:
a0:0f:3e:b1:ae:86:0c:88:d5:9e:a4:b9:63:2e:d2:c4:27:9e:
7d:67:f6:b8:17:f1:1e:e4:01:88:df:05:8e:52:21:00:c3:c4:
18:91:67:3c:a3:42:6e:ae:d9:a1:7e:48:4a:a2:0e:48:ef:33:
52:ad:ae:9f:b3:b0:13:a3:c7:e0:b7:85:e4:93:ea:cc:63:0d:
50:b0:18:c4:e6:ca:ec:a6:6b:47:79:d0:99:59:f4:36:97:4a:
a2:2a:44:00:cc:f7:71:53:d3:48:00:f4:31:a8:7b:7b:47:43:
85:d3:2d:c6:c8:3b:2c:cd:92:17:ff:a8:2a:6c:93:44:af:ba:
26:b8:be:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:16:47 2025 by rpki-client