Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/ckCKGBy3gfOynIsxgKH7v5Tgxs8.roa
File: ckCKGBy3gfOynIsxgKH7v5Tgxs8.roa (raw, json)
Hash identifier: klqqBPeOruXdOkHRPI1j3EwT9LC1T/WC+8cjVI4eguQ=
Subject key identifier: 72:40:8A:18:1C:B7:81:F3:B2:9C:8B:31:80:A1:FB:BF:94:E0:C6:CF
Certificate issuer: /CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Certificate serial: 019F23693A40CF69E183DD2B3C77A9968AD1
Authority key identifier: 06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/ckCKGBy3gfOynIsxgKH7v5Tgxs8.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16222
IP address blocks: 185.37.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3a:40:cf:69:e1:83:dd:2b:3c:77:a9:96:8a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72408a181cb781f3b29c8b3180a1fbbf94e0c6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:48:76:a1:ea:f6:2c:37:d2:13:d5:27:5c:
dd:aa:66:3f:34:25:34:65:e1:c4:e5:43:dd:56:39:
ec:05:02:4f:3c:fe:5f:e7:02:c4:ef:1c:2e:ee:ba:
24:db:59:23:38:03:e7:be:37:29:e2:84:e1:63:57:
00:a8:3a:6d:bc:ad:36:9e:19:72:a6:c4:41:6e:f5:
e9:7e:6e:b5:70:d0:2f:9f:ac:b9:e2:bc:de:09:ed:
78:d1:79:4d:ca:5f:c9:e2:da:00:1c:86:e4:14:8b:
f5:10:9c:11:84:48:d3:5d:00:b6:a0:c2:9e:30:e4:
d7:92:94:19:b3:62:ee:41:8d:4d:aa:53:f5:3a:6a:
24:db:fc:6c:1d:40:2b:06:c2:cf:9c:01:50:f6:09:
74:e7:32:36:10:ed:40:de:2a:fb:50:ce:b7:65:6d:
e7:ab:21:a0:28:fa:10:6c:69:71:73:56:f3:2c:d4:
73:53:d8:62:ae:45:74:8b:04:ea:4b:f6:ff:88:e1:
d2:da:64:c7:a7:71:60:cb:43:fe:e3:63:bb:0c:00:
a5:71:fe:6c:6a:f3:d4:66:2d:ac:ca:30:1f:83:e9:
0b:ab:8e:b0:68:fa:b1:10:cf:1d:d8:b4:e1:69:30:
da:4a:3c:00:a2:5e:da:e5:68:6d:bb:62:6f:88:75:
93:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:40:8A:18:1C:B7:81:F3:B2:9C:8B:31:80:A1:FB:BF:94:E0:C6:CF
X509v3 Authority Key Identifier:
keyid:06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/ckCKGBy3gfOynIsxgKH7v5Tgxs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.60.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e4:b8:65:00:c6:64:cb:c1:39:ad:08:be:b1:2a:82:1c:b8:
e3:19:df:7d:64:1d:a9:b8:d5:7e:87:cd:a7:fe:48:5b:07:df:
c0:c9:a6:ea:33:d4:dc:d4:1c:89:63:f3:49:af:31:47:f7:ec:
a5:46:1e:fd:4d:30:5e:a9:8d:17:25:71:24:59:ca:5e:43:3c:
1e:fa:86:80:b5:6f:cf:2b:42:26:cb:05:41:67:e7:2e:a5:7b:
93:f2:5e:5b:ee:ee:88:e0:22:a0:11:99:fc:9a:41:d5:b5:5f:
00:6e:66:35:f7:bc:be:5f:71:20:45:e5:7d:b6:29:33:6d:79:
42:f6:62:a8:f5:bc:f6:d8:dc:aa:0b:b9:a4:e9:c5:73:4a:7c:
6d:26:d0:0b:7a:50:25:8a:54:90:75:47:1f:90:b2:91:32:e1:
94:e9:3e:c6:29:e7:b8:8a:56:3c:1b:06:93:1d:09:03:92:46:
1e:24:4c:f2:af:96:5d:c9:70:41:6b:51:af:00:3f:99:b5:6a:
4f:df:f0:11:97:37:fd:a8:6c:7f:3a:28:61:da:b2:7b:05:c3:
39:89:0e:6f:f1:a9:91:5b:4f:5a:99:b3:84:3e:59:67:15:66:
af:37:db:8c:0c:3a:be:68:1a:64:61:84:87:46:9b:cc:f2:51:
11:d7:fc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:08:11 2026 by rpki-client