Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/CuVc4PF5d3AMtHwH59bi3KpoEcU.roa
File: CuVc4PF5d3AMtHwH59bi3KpoEcU.roa (raw, json)
Hash identifier: YY5JT2rh1l3bec5cvOqTSnBQtzBt2nClBilF97d7XCU=
Subject key identifier: 0A:E5:5C:E0:F1:79:77:70:0C:B4:7C:07:E7:D6:E2:DC:AA:68:11:C5
Certificate issuer: /CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Certificate serial: 019F236895FF7936A10A74A964DFF1335CAD
Authority key identifier: 95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/CuVc4PF5d3AMtHwH59bi3KpoEcU.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 185.48.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:95:ff:79:36:a1:0a:74:a9:64:df:f1:33:5c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ae55ce0f17977700cb47c07e7d6e2dcaa6811c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:0e:de:f3:43:59:25:a4:32:5c:44:88:bd:
52:69:cb:5d:0c:bf:86:69:4e:98:71:ca:63:18:e9:
0b:dd:d8:86:f8:c7:19:1f:aa:95:44:f1:98:9a:18:
3e:86:3b:93:8f:52:c5:ee:c4:28:53:35:f3:4b:e8:
62:81:4a:db:d3:66:ce:28:fb:9d:2b:db:20:85:2d:
a1:38:7b:90:d5:5d:83:83:ee:e0:b9:2d:56:eb:eb:
45:d7:8a:c8:b2:e7:bd:8f:a8:0f:0a:70:cf:19:28:
ab:b8:e5:1b:aa:fd:bb:bb:11:25:ca:f5:9d:ab:70:
0e:76:af:1b:47:be:7b:f9:75:98:1a:e9:2b:12:84:
8e:1e:94:e6:0a:02:ad:65:c2:ee:42:ec:46:3d:24:
49:5a:0b:47:3c:9f:b3:db:35:45:c0:1e:99:32:ac:
d9:5e:8b:e1:67:0e:24:b2:e7:26:5f:7e:4c:bc:2f:
fc:72:8e:b7:91:f0:23:b4:93:d1:84:32:5c:fe:29:
b5:ee:a3:96:c8:f7:0b:78:29:6f:09:0d:f4:e4:73:
46:42:13:c7:87:3b:48:66:ed:cc:72:39:a3:a8:3b:
6c:5d:02:d9:a9:b5:64:da:db:87:4c:55:a7:1f:88:
48:98:bc:d9:d0:30:0d:b9:30:33:f1:4b:f2:9b:0c:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E5:5C:E0:F1:79:77:70:0C:B4:7C:07:E7:D6:E2:DC:AA:68:11:C5
X509v3 Authority Key Identifier:
keyid:95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/CuVc4PF5d3AMtHwH59bi3KpoEcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.27.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:bf:c3:92:9d:e5:5d:8c:82:54:d7:55:d5:4c:c0:37:3e:f0:
28:2a:22:c4:42:3c:36:74:f6:6e:62:dd:fb:40:c0:d2:6d:41:
4d:aa:dd:15:b5:06:44:9d:0a:9a:11:08:41:86:f0:36:0c:e7:
08:a7:4b:52:23:0e:d8:b8:0a:cb:25:1c:e0:32:ba:6b:af:2d:
26:dd:57:cf:38:e1:ee:f4:64:42:22:9d:ab:09:ce:f1:c1:27:
38:f3:7e:28:a5:05:2c:d6:6d:aa:7f:3c:ce:d9:e1:47:ca:23:
19:a9:4d:ed:fd:ef:ea:be:dd:8d:9d:0e:44:25:0d:f0:0d:02:
03:84:bd:29:57:4d:ec:e1:25:a9:f2:11:6a:92:ee:49:b6:a5:
27:ba:ee:84:85:63:1b:bc:38:e7:a6:d1:dd:ab:4d:f3:13:a2:
e2:ef:d9:74:c4:c2:48:a3:1a:d1:cc:0d:17:a2:b7:23:54:2f:
f7:1b:3b:51:5e:b1:1e:c4:53:fc:b3:67:4b:88:45:9c:6b:aa:
de:7c:c9:fa:d6:a0:c9:3e:49:b0:b7:a0:2f:8b:ee:7b:31:09:
02:29:b8:d3:46:49:79:b2:11:24:e4:74:b3:2a:d2:a0:b3:fc:
4c:9e:28:da:b4:4b:c3:0f:52:30:01:ba:4d:06:33:be:0f:6a:
f2:8c:b6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:28 2026 by rpki-client