Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/cF65Y72OTkUIe_PM4Wd1M3sisbs.roa
File: cF65Y72OTkUIe_PM4Wd1M3sisbs.roa (raw, json)
Hash identifier: oVz1TLgu7Q2K4UrameIrD6zZiFY59GSx7iKcM+J23ds=
Subject key identifier: 70:5E:B9:63:BD:8E:4E:45:08:7B:F3:CC:E1:67:75:33:7B:22:B1:BB
Certificate issuer: /CN=c3ab815c095c49e523907c2b4612977097a6b858
Certificate serial: 019F23682A90B7B6E936B6469E378EF7E8A9
Authority key identifier: C3:AB:81:5C:09:5C:49:E5:23:90:7C:2B:46:12:97:70:97:A6:B8:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6uBXAlcSeUjkHwrRhKXcJemuFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/cF65Y72OTkUIe_PM4Wd1M3sisbs.roa
Signing time: Thu 02 Jul 2026 15:17:36 +0000
ROA not before: Thu 02 Jul 2026 15:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57222
IP address blocks: 195.162.4.0/23 maxlen: 32
195.162.4.0/24 maxlen: 32
195.162.5.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6uBXAlcSeUjkHwrRhKXcJemuFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2a:90:b7:b6:e9:36:b6:46:9e:37:8e:f7:e8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3ab815c095c49e523907c2b4612977097a6b858
Validity
Not Before: Jul 2 15:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=705eb963bd8e4e45087bf3cce16775337b22b1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:65:a4:fe:f8:8d:28:f4:a8:a6:5c:1b:28:
23:61:7e:38:0a:82:fd:4a:67:08:ca:36:6b:6a:a3:
25:ca:04:b9:c5:86:66:a2:f5:cf:16:98:7d:c4:49:
d5:81:d6:12:d7:d8:a7:a3:d0:42:10:d0:13:74:8e:
4d:8c:e2:6c:a6:c4:65:3d:5f:e4:44:97:b7:08:7c:
02:ae:4b:d8:d4:4b:4c:dd:95:f2:e2:d5:af:2a:fb:
ee:a1:c7:f2:49:b9:88:e1:5c:eb:2e:df:9d:90:81:
57:cd:4f:86:82:73:ac:c5:5c:1f:ca:45:ea:cf:e3:
fa:22:00:2c:34:47:6d:12:9c:4e:38:03:0b:1b:84:
c8:a9:60:b2:91:46:0a:2c:73:8f:82:52:9a:9a:e0:
d3:9c:f8:af:2a:6c:ba:e9:9f:76:43:3c:09:d4:7f:
39:f6:75:8b:4e:db:25:5b:f7:2f:e1:d6:91:26:f3:
a3:bc:ad:0c:a1:38:9b:89:84:30:39:41:fa:78:d6:
ea:c5:c2:fa:2e:f3:b2:8d:88:7a:75:62:7d:d8:46:
77:d7:98:1e:da:84:27:c7:3e:40:f0:8e:b9:02:0b:
45:27:27:b2:c4:94:15:94:03:df:bf:9f:94:88:f9:
4a:01:e4:1d:51:21:81:06:53:6a:86:91:96:3b:c6:
87:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5E:B9:63:BD:8E:4E:45:08:7B:F3:CC:E1:67:75:33:7B:22:B1:BB
X509v3 Authority Key Identifier:
keyid:C3:AB:81:5C:09:5C:49:E5:23:90:7C:2B:46:12:97:70:97:A6:B8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6uBXAlcSeUjkHwrRhKXcJemuFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/cF65Y72OTkUIe_PM4Wd1M3sisbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.4.0/23
Signature Algorithm: sha256WithRSAEncryption
90:9e:ab:92:49:dc:08:9f:82:83:a3:f8:a6:1b:73:44:2c:e5:
10:ce:69:15:a9:1a:f5:2a:a3:c4:7b:db:7a:cc:b7:d8:66:60:
f7:50:db:80:9a:1a:65:f5:76:24:27:b3:07:b9:5e:21:65:17:
bd:69:14:79:a2:a1:bd:ad:c0:d1:78:52:6e:bf:77:37:56:22:
4d:1f:83:e5:fb:be:1d:83:3f:52:72:6d:42:d3:ef:51:e6:1f:
da:96:6e:02:37:eb:7c:95:44:ec:ab:a2:b9:e9:04:78:2b:1b:
20:11:83:46:aa:2f:a9:18:47:c4:3c:d1:b9:35:3b:22:5d:1c:
9b:1c:6d:7b:aa:85:2a:c3:98:05:0f:f2:2f:f9:43:6e:b6:ec:
65:e0:93:e4:ca:d1:51:59:18:80:50:7b:73:32:f1:d1:e4:14:
6c:b9:e7:82:c0:48:22:b0:8b:cf:7f:51:da:7b:f7:82:74:19:
66:e7:c2:fd:21:f4:3a:89:6e:86:5c:b1:f7:83:eb:08:95:c4:
64:0d:4e:33:f8:0e:26:07:21:10:df:5d:49:d3:0a:47:2a:d4:
01:b3:cb:9f:44:cc:f7:3a:f0:6b:4b:d1:62:94:f9:9e:fe:a9:
85:89:58:a6:3c:64:2c:bc:86:fb:68:20:26:84:0e:a5:91:c1:
a5:43:bc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:24:21 2026 by rpki-client