Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/CVxfx3KQzEER-BBbsCQ4b2WjeFk.roa
File: CVxfx3KQzEER-BBbsCQ4b2WjeFk.roa (raw, json)
Hash identifier: P12FxyadZ3+D6ncFfUITGrjK2DjmN6s5NrQ2Cl3FgF4=
Subject key identifier: 09:5C:5F:C7:72:90:CC:41:11:F8:10:5B:B0:24:38:6F:65:A3:78:59
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 019DDF3079810060A53B222957236D4686A1
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/CVxfx3KQzEER-BBbsCQ4b2WjeFk.roa
Signing time: Thu 30 Apr 2026 16:19:49 +0000
ROA not before: Thu 30 Apr 2026 16:19:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213784
IP address blocks: 83.166.205.0/24 maxlen: 24
83.166.208.0/24 maxlen: 24
83.166.216.0/24 maxlen: 24
84.247.66.0/24 maxlen: 24
84.247.73.0/24 maxlen: 24
84.247.74.0/24 maxlen: 24
84.247.78.0/24 maxlen: 24
84.247.111.0/24 maxlen: 24
84.247.113.0/24 maxlen: 24
84.247.115.0/24 maxlen: 24
84.247.116.0/24 maxlen: 24
84.247.117.0/24 maxlen: 24
84.247.118.0/24 maxlen: 24
84.247.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:30:79:81:00:60:a5:3b:22:29:57:23:6d:46:86:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Apr 30 16:19:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=095c5fc77290cc4111f8105bb024386f65a37859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7f:11:5c:d7:a7:5d:fc:ee:90:91:31:89:a7:
9b:0d:4b:e2:77:76:d1:c0:67:5c:81:da:ce:ce:3b:
f2:93:ee:f9:b8:13:cd:87:04:08:ff:02:50:7f:b9:
05:f7:af:22:ce:61:16:3e:76:c8:fd:49:20:df:50:
7f:40:88:ad:82:2b:27:df:2f:53:4c:a6:63:c6:18:
69:18:0b:15:16:c9:aa:8c:e9:24:10:e4:63:c0:f8:
9e:5d:b9:06:02:d2:97:85:8c:e1:b3:a0:e6:3e:ae:
5b:cd:83:7d:59:31:65:31:c9:90:93:d5:e0:4a:19:
70:53:8d:5b:44:dc:40:4d:44:2c:5a:47:51:16:54:
6d:a3:96:16:bf:c9:62:d3:79:5c:31:48:1c:66:69:
3e:61:5b:28:a9:96:07:b9:9b:91:51:b1:b3:f8:3d:
ee:17:8f:d3:9a:70:62:a6:47:da:22:31:a5:60:6f:
29:a9:da:96:ea:f4:c6:1a:e3:6b:34:69:79:ea:67:
80:0c:20:ca:32:80:4e:5a:cf:33:aa:71:a3:d8:42:
cb:45:28:2c:f0:e8:22:c0:43:b7:14:af:6b:c5:18:
df:bc:a7:54:e9:be:a2:c6:37:10:84:16:b5:5c:a6:
7a:25:de:fb:21:b9:36:b2:b3:29:de:11:5f:42:3e:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5C:5F:C7:72:90:CC:41:11:F8:10:5B:B0:24:38:6F:65:A3:78:59
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/CVxfx3KQzEER-BBbsCQ4b2WjeFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.166.205.0/24
83.166.208.0/24
83.166.216.0/24
84.247.66.0/24
84.247.73.0-84.247.74.255
84.247.78.0/24
84.247.111.0/24
84.247.113.0/24
84.247.115.0-84.247.118.255
84.247.121.0/24
Signature Algorithm: sha256WithRSAEncryption
74:70:76:69:61:b9:b7:a0:8d:99:ce:fa:11:d2:f1:c5:80:68:
c6:5c:63:6c:1f:e2:05:cd:13:9d:36:46:70:95:92:aa:06:cd:
c8:03:b9:eb:e4:30:1e:99:94:14:22:ac:20:46:fd:84:b5:07:
2a:22:6a:b9:fe:1c:af:36:d0:c5:d2:b4:15:37:41:3a:a0:b1:
87:48:3b:9a:6d:b0:06:b1:31:e1:e3:f4:04:79:55:24:ae:1e:
76:a4:db:91:61:a3:81:28:03:3e:12:9d:be:17:6e:6c:bd:05:
f8:75:30:96:e3:78:ba:73:5d:a8:4e:fd:38:75:84:84:ac:af:
ea:41:e0:6c:9a:41:c8:85:a3:32:b3:c7:14:a2:76:c3:72:39:
f6:bf:b3:26:72:f1:37:40:f7:f8:2b:a0:05:fc:c2:00:7b:9a:
6f:28:8b:88:b9:c2:f7:e7:5f:36:94:ec:78:d9:10:cc:de:de:
c4:c1:81:98:67:83:db:47:9d:3d:db:e2:f1:22:97:b6:4a:38:
9a:ed:60:bb:90:c1:0c:58:ee:3d:ea:2e:16:72:3d:c3:e8:32:
78:54:58:e5:ac:02:ad:49:4e:5f:bb:02:64:93:73:d7:22:ac:
53:2f:71:a3:f5:90:70:31:56:3d:f4:96:3a:c9:df:6f:d3:73:
df:49:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:06 2026 by rpki-client