Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/cfmv_tc0fZVJXvMbEzxp3huvJQA.roa
File: cfmv_tc0fZVJXvMbEzxp3huvJQA.roa (raw, json)
Hash identifier: 5exQ8N+3HVkALP9EFbCrgal+azdpyvlnwuRFMo6QR2M=
Subject key identifier: 71:F9:AF:FE:D7:34:7D:95:49:5E:F3:1B:13:3C:69:DE:1B:AF:25:00
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 019F1DE7465B8CA019DAD699D816A37EE29D
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/cfmv_tc0fZVJXvMbEzxp3huvJQA.roa
Signing time: Wed 01 Jul 2026 13:38:43 +0000
ROA not before: Wed 01 Jul 2026 13:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209723
IP address blocks: 85.209.4.0/23 maxlen: 23
147.78.224.0/23 maxlen: 23
2a09:ac80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:e7:46:5b:8c:a0:19:da:d6:99:d8:16:a3:7e:e2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Jul 1 13:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71f9affed7347d95495ef31b133c69de1baf2500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:28:2e:0d:a3:de:8e:39:08:1d:34:4e:6b:
ac:0e:e6:0e:d7:a2:69:48:2d:e7:b1:4f:37:45:92:
2f:b0:4f:33:a1:07:94:ba:1b:67:8e:7e:cb:d3:5f:
dc:f2:4d:1c:99:34:0f:dd:45:66:32:40:49:cc:9f:
f9:f9:ba:30:93:e7:cb:42:8d:7f:37:b7:0f:40:d9:
3d:3f:b5:1d:d9:9b:d9:81:de:62:94:5b:48:a3:54:
ab:68:13:12:51:f0:23:9c:3c:21:77:de:3f:85:bf:
a4:93:b5:13:53:0f:ff:ff:65:90:ae:14:a2:bd:c9:
04:14:ad:f1:29:e6:5c:45:bd:d1:88:5e:cb:92:f3:
ca:30:9b:76:83:56:e6:74:18:63:82:cb:22:14:d2:
73:be:8f:bc:b5:8d:a2:c0:8a:1a:f2:7e:55:d5:d8:
07:60:93:18:1d:4b:4c:e0:44:a1:ec:85:53:a7:c7:
9f:f4:fc:ad:db:f1:1e:ed:c3:05:d9:2a:97:9d:86:
60:53:3e:3c:cd:52:ca:7a:c4:37:5b:59:74:ff:05:
74:c4:cf:2d:14:33:84:35:94:a7:ee:37:b8:aa:e9:
50:32:6d:e2:b4:71:df:4f:52:fe:21:fb:6b:ea:65:
ce:57:80:de:3a:07:6d:5d:f9:ce:c3:71:28:1a:c2:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F9:AF:FE:D7:34:7D:95:49:5E:F3:1B:13:3C:69:DE:1B:AF:25:00
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/cfmv_tc0fZVJXvMbEzxp3huvJQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.4.0/23
147.78.224.0/23
IPv6:
2a09:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
41:65:e2:6d:27:d2:dc:9d:ec:ef:32:71:bc:62:b0:74:46:42:
41:b8:42:ba:cd:2c:d6:d3:5f:3d:1f:71:8b:13:cb:cf:c3:fb:
de:dd:38:15:66:ea:01:6e:c9:aa:3b:52:3b:5c:ae:19:2e:ce:
81:66:d8:cd:4c:1b:03:00:76:21:60:c4:a3:90:d9:91:68:e5:
bd:f0:fb:0c:6b:c2:14:90:9e:19:b4:75:50:fa:5f:c1:ba:60:
03:89:ce:0d:73:05:44:8c:56:b2:70:36:db:ed:12:46:95:48:
b4:37:3c:a6:6a:b9:f5:8c:03:d7:53:e5:69:ac:23:04:8f:69:
e9:24:aa:50:74:83:2a:47:96:3b:4d:c8:88:0f:0d:cb:dd:92:
4f:60:4c:de:40:d8:2e:b4:a3:50:b8:34:ac:7f:21:25:dd:06:
ef:35:a3:a8:cf:81:3b:fe:a9:0f:e7:1e:bc:fc:c3:44:51:7b:
bc:42:51:f8:32:25:1a:18:ae:23:18:d9:b0:cf:b8:54:c9:12:
a5:e1:92:a9:fa:24:2c:51:be:19:c0:90:e2:ba:84:ca:1c:d9:
e5:65:8d:19:9b:1a:25:b9:ed:e0:5c:dc:60:18:b3:d6:8f:88:
9d:33:0b:4a:d0:26:8e:a2:64:0c:c4:b4:4b:da:d7:1a:29:cb:
35:50:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:15 2026 by rpki-client