Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cFOs-d6qbV3mb4SLPRPICjGfyO8.roa
File: cFOs-d6qbV3mb4SLPRPICjGfyO8.roa (raw, json)
Hash identifier: JYl8Q5kOPZuzVnA9t7Egub7Gbnwz8ElKB4o4tw1k5uQ=
Subject key identifier: 70:53:AC:F9:DE:AA:6D:5D:E6:6F:84:8B:3D:13:C8:0A:31:9F:C8:EF
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019DFE8CA38251A9E1B80290F1AB76EDEDD2
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cFOs-d6qbV3mb4SLPRPICjGfyO8.roa
Signing time: Wed 06 May 2026 18:28:42 +0000
ROA not before: Wed 06 May 2026 18:28:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 45.8.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:8c:a3:82:51:a9:e1:b8:02:90:f1:ab:76:ed:ed:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 6 18:28:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7053acf9deaa6d5de66f848b3d13c80a319fc8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:68:68:ba:24:d3:12:dd:92:be:ca:a1:57:0e:
ff:48:78:86:1a:65:1e:ba:36:56:a6:8e:c1:28:cf:
95:a4:8e:0e:33:fe:ef:cc:a7:c0:ba:7d:fc:35:ff:
f8:d9:92:aa:9c:c1:f1:12:b3:47:99:3b:43:34:fd:
0a:03:4f:ec:cb:cb:f5:b8:03:81:94:05:c0:ef:d4:
23:b8:d7:7c:0f:c4:db:13:6b:c7:f1:d6:18:ab:6f:
ee:41:a4:d9:13:a3:49:54:6a:83:ec:63:d7:98:a2:
35:26:3b:8d:f0:7f:fa:ca:74:55:80:29:3f:d1:21:
60:e4:a3:97:2b:72:2c:16:e1:b1:87:ba:d1:78:b5:
a8:10:f0:99:7b:6e:4c:ba:f5:53:cf:2a:1e:02:c0:
b4:eb:f7:93:dd:47:74:96:09:47:6a:e5:ec:04:19:
7d:bb:b0:67:50:d5:5e:ce:41:72:e2:f1:7d:33:02:
7d:54:a1:8a:e1:87:88:ef:ec:92:29:26:8c:95:a5:
cb:69:76:b0:24:1a:97:3b:9e:18:9e:0c:b8:32:b5:
2d:14:90:9b:22:9a:94:bd:a8:15:70:2a:91:e6:47:
be:bc:01:7e:d2:35:90:d2:68:95:3f:30:64:32:9c:
61:9c:2c:a8:7a:04:77:9a:38:bd:0c:98:de:06:53:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:53:AC:F9:DE:AA:6D:5D:E6:6F:84:8B:3D:13:C8:0A:31:9F:C8:EF
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cFOs-d6qbV3mb4SLPRPICjGfyO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
10:49:6f:6e:f7:29:e1:e7:45:39:59:a3:b8:9b:ed:82:53:a3:
ff:59:55:e0:c9:2e:69:f9:0f:de:94:84:1e:33:c1:bd:65:86:
8e:4b:53:d8:c5:ba:d1:5a:a9:47:89:0f:be:8e:c8:ea:03:4e:
38:72:58:21:b4:c6:eb:18:69:bb:4f:16:6d:99:11:e8:10:bd:
97:4f:e9:4a:7e:63:b0:92:2b:a2:8a:69:22:8a:8b:18:5f:89:
a4:dc:3f:da:d9:34:52:5c:e4:6a:fe:90:0f:9c:ba:05:ee:c8:
28:b9:74:8a:dd:67:98:f6:f7:c4:f5:5f:c4:6c:ff:14:a1:fe:
cf:5f:7b:47:b7:02:71:81:b9:74:cf:52:8a:c7:58:cc:2d:18:
37:a3:3e:b6:ce:d5:ee:1a:2f:79:c0:8b:01:6a:c7:bf:be:0e:
56:90:8c:8f:6e:77:fa:08:34:2b:ee:6c:90:3e:5f:ef:da:6e:
2f:50:a3:47:6f:ae:b0:e7:47:e1:79:b0:eb:b9:4e:51:21:9a:
52:89:9f:82:c3:6a:8c:5e:7a:00:29:9b:4f:12:39:36:6e:c2:
e7:34:ab:0a:0d:62:97:6d:0e:42:1c:c8:a7:ee:71:74:56:a5:
9a:ed:3e:78:cc:6f:03:41:d5:2b:9b:dc:e9:38:7d:55:2c:02:
d2:3a:6c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:38:12 2026 by rpki-client