Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/CFADAv46sEn0msMDLeVnp_GSKac.roa
File: CFADAv46sEn0msMDLeVnp_GSKac.roa (raw, json)
Hash identifier: nhjd/2M6IGYSiqZoYsBxTLKlKrhaVySqjqbStVsFev8=
Subject key identifier: 08:50:03:02:FE:3A:B0:49:F4:9A:C3:03:2D:E5:67:A7:F1:92:29:A7
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019E117405C7F9947222B9AB4B3D04976B02
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/CFADAv46sEn0msMDLeVnp_GSKac.roa
Signing time: Sun 10 May 2026 10:34:36 +0000
ROA not before: Sun 10 May 2026 10:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 37.148.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:11:74:05:c7:f9:94:72:22:b9:ab:4b:3d:04:97:6b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: May 10 10:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08500302fe3ab049f49ac3032de567a7f19229a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:36:10:b1:51:49:d2:39:58:f4:c3:54:f2:
67:f5:13:67:74:0e:9a:e9:6e:a7:bb:99:66:42:ba:
8a:33:1c:64:23:be:2e:fa:4e:75:a5:49:34:0f:51:
fc:d5:fa:97:c8:b2:7b:e8:cc:2e:16:ac:76:c9:11:
89:50:6a:de:19:03:90:5e:59:f9:4a:87:09:31:6c:
91:b6:f1:26:c7:ac:16:30:59:74:ab:d5:47:84:79:
c2:04:0c:64:8c:14:b3:49:b7:57:f4:e7:e5:d0:2b:
b1:b0:c2:ce:7d:f4:fb:2c:6b:75:a7:6b:32:7b:b3:
91:29:2c:2e:92:ba:7e:46:e2:39:4c:a5:af:32:d1:
9b:b9:86:d1:4c:a0:75:3b:f4:0c:ae:a3:3f:08:e9:
67:8e:0d:2a:ab:1d:3e:be:5e:90:ec:bc:2f:e9:fc:
ab:db:0e:40:c5:bc:e2:79:9c:1a:60:4f:c6:de:7d:
b2:d4:4e:f9:9f:e6:e2:1f:22:70:86:be:0d:d5:8e:
87:41:10:aa:c4:f7:65:87:a7:26:5f:17:57:01:c5:
49:dd:b5:ab:1b:09:c4:b3:04:fe:79:89:4e:33:03:
2c:d0:11:42:3c:74:8e:bf:9e:dc:97:85:8e:12:fa:
8b:7a:30:e5:cf:98:0d:5b:44:37:a5:da:6e:16:02:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:50:03:02:FE:3A:B0:49:F4:9A:C3:03:2D:E5:67:A7:F1:92:29:A7
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/CFADAv46sEn0msMDLeVnp_GSKac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.131.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4d:15:7b:ad:50:02:c8:08:57:57:73:21:1c:e5:0a:3d:f5:
32:bc:8b:f9:9b:9d:99:86:bb:f3:3c:e1:ad:e1:ce:c4:e7:a6:
8d:39:b4:54:a7:29:49:9b:7c:14:ef:13:1d:bf:8d:71:86:31:
45:c6:31:d8:9f:2f:4e:27:49:06:19:29:ec:ef:e0:ba:e4:c1:
6e:0a:96:60:17:3b:e1:ea:e5:b7:89:44:46:69:76:d1:3d:56:
78:1f:6c:92:22:4f:41:d7:f8:34:ec:6f:19:f3:bb:b5:c6:12:
15:e1:9c:5d:16:dd:e3:2f:67:30:9a:bf:e8:09:f1:df:35:02:
89:d2:e9:81:8d:87:a0:b6:8e:a8:0c:2a:00:66:63:d1:33:ac:
40:e8:b8:50:e0:a3:06:a8:8e:11:8f:cd:3f:7b:00:06:33:21:
b1:cb:76:50:b1:2c:4a:13:c0:c7:33:de:6c:63:16:f0:ba:09:
ea:c4:a3:f7:50:ae:aa:dd:b3:97:e9:4b:58:ec:15:09:89:61:
6b:b8:31:36:8e:87:1e:d9:1c:4f:f6:7b:d8:e8:aa:21:73:00:
f1:d7:dd:0d:3e:b5:ad:18:e9:38:6a:d8:dd:8d:0c:6b:d7:1f:
57:b4:0a:ac:37:ee:6e:47:96:c7:49:e6:5d:8b:69:ba:91:c2:
a8:c0:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:29 2026 by rpki-client