Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/Cbwy7ZTHRdEOY7GRBfFj_luZf7c.roa
File: Cbwy7ZTHRdEOY7GRBfFj_luZf7c.roa (raw, json)
Hash identifier: 35gqWtEcP4/HxKKbREK7gqnsXOG4vXjbmy1ljsXsfXo=
Subject key identifier: 09:BC:32:ED:94:C7:45:D1:0E:63:B1:91:05:F1:63:FE:5B:99:7F:B7
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019EEFEE9972608B622834755C81E5017B52
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/Cbwy7ZTHRdEOY7GRBfFj_luZf7c.roa
Signing time: Mon 22 Jun 2026 15:24:11 +0000
ROA not before: Mon 22 Jun 2026 15:24:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47430
IP address blocks: 185.105.238.0/24 maxlen: 24
2a10:ab00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:ee:99:72:60:8b:62:28:34:75:5c:81:e5:01:7b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jun 22 15:24:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09bc32ed94c745d10e63b19105f163fe5b997fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:d0:14:03:4c:26:09:8e:d7:ba:7d:73:44:
75:d6:25:3e:f1:89:ae:f9:6d:00:e2:74:00:a4:15:
2b:0b:b3:b7:f9:9c:7b:5e:ed:2d:55:d4:61:ed:e4:
dc:04:e6:2e:c0:88:c8:61:62:79:2f:89:ce:6a:66:
3a:d6:9c:6a:3a:5c:1a:d2:df:14:da:b5:16:7a:44:
29:95:29:da:4c:e7:63:fc:37:7c:01:6d:e0:44:dd:
ef:85:07:4a:a6:db:d2:7c:3a:55:9e:36:ea:c9:4a:
a6:6d:62:78:85:56:74:d0:de:c4:e1:71:89:75:56:
64:da:aa:08:68:f7:e4:f4:3a:5b:15:27:43:05:0d:
2a:a1:1d:64:e5:3a:c2:8f:9f:05:43:57:37:71:59:
3b:8e:33:fb:2a:03:39:a7:0d:ca:fa:b2:5a:dd:22:
ee:7a:fa:6d:aa:5f:e4:d2:2c:9b:5c:dd:91:a9:60:
c0:d7:fa:ae:45:dd:67:ad:a6:a7:59:7e:74:71:55:
34:32:53:0d:47:b2:c6:c3:09:ae:02:c1:ea:4d:27:
8d:14:5a:a5:df:da:97:4b:00:0a:cc:c0:8b:12:77:
ab:fa:fb:94:a0:e2:d9:bc:70:a4:d7:66:1a:49:fd:
d0:02:ac:08:a6:c8:56:9b:83:34:62:8b:bd:cf:ed:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BC:32:ED:94:C7:45:D1:0E:63:B1:91:05:F1:63:FE:5B:99:7F:B7
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/Cbwy7ZTHRdEOY7GRBfFj_luZf7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.238.0/24
IPv6:
2a10:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
7a:18:4b:e5:32:3c:da:2b:20:ea:b8:39:8c:f3:5a:69:83:52:
19:a2:0f:15:a9:a5:d2:c2:3a:0f:22:4b:0e:2f:61:1d:35:d5:
64:1a:da:fc:ea:56:27:cb:96:90:08:65:fc:e4:3b:f6:9d:f1:
60:d8:98:b5:f6:3a:53:d9:28:34:b6:28:8b:4f:79:de:94:29:
b8:15:f3:b1:94:a5:1e:eb:3b:d7:e4:ea:8d:be:f7:73:6f:20:
2d:38:12:62:37:69:67:39:ff:47:4d:a2:a3:55:95:65:9f:21:
14:cc:22:fa:f1:4a:2d:27:2e:37:b9:55:f6:35:d8:49:58:13:
20:52:fe:b5:b8:dd:6a:56:2a:b1:a9:1c:bf:2a:77:c5:e1:aa:
80:41:82:70:b9:22:6f:4b:28:c6:1e:eb:9f:b4:9d:88:5e:3e:
30:f7:86:08:b0:58:02:52:c0:c0:81:3e:20:60:70:57:90:e3:
9c:df:a7:75:1a:a3:13:c5:e3:4a:6c:1f:9d:bb:f2:4f:92:2f:
45:e3:f4:19:4b:31:2e:42:8d:f8:58:22:46:a3:e3:78:87:44:
48:1c:97:c0:7c:e9:96:a8:96:82:fb:7c:f7:96:a3:8b:24:83:
83:db:2d:0d:12:07:f1:a9:72:fc:25:7e:51:b7:7d:7a:0b:22:
52:c9:15:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:47:55 2026 by rpki-client