Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/cF9T-jxoP9kV3otKbs6wprWqe14.roa
File: cF9T-jxoP9kV3otKbs6wprWqe14.roa (raw, json)
Hash identifier: By9z72uPVXpGvtlPCEnMJBu0BtKh3WPCweFaBQSyntA=
Subject key identifier: 70:5F:53:FA:3C:68:3F:D9:15:DE:8B:4A:6E:CE:B0:A6:B5:AA:7B:5E
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 019C7ABE732FC7C0557290282E1EF57E164E
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/cF9T-jxoP9kV3otKbs6wprWqe14.roa
Signing time: Fri 20 Feb 2026 11:10:27 +0000
ROA not before: Fri 20 Feb 2026 11:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60989
IP address blocks: 5.181.192.0/22 maxlen: 24
85.155.160.0/21 maxlen: 24
185.21.248.0/22 maxlen: 24
2a04:1d80::/29 maxlen: 32
2a0e:1000::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:be:73:2f:c7:c0:55:72:90:28:2e:1e:f5:7e:16:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Feb 20 11:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=705f53fa3c683fd915de8b4a6eceb0a6b5aa7b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:7d:d8:50:f0:dc:c9:ff:8e:85:e4:01:49:
18:90:2d:b5:8e:df:23:5e:4e:8d:f4:83:ed:83:a5:
7f:90:4c:73:be:90:33:95:f6:f7:a1:0c:f7:d6:83:
bf:f5:06:99:93:ab:d7:cb:2f:36:22:bf:b0:57:3f:
42:7f:8a:4e:f4:36:82:36:ed:b2:b1:93:59:9c:72:
72:9a:1d:4b:4c:d1:c8:bb:b1:83:72:1d:a1:e5:0c:
e8:5e:e4:f3:2a:09:b7:ba:e2:bb:56:34:80:fe:01:
0a:5c:c8:50:f2:78:ec:df:40:d2:71:a2:f2:a2:db:
30:a2:16:70:e0:cb:63:c1:ac:8c:cb:91:ef:9f:ae:
b4:65:08:16:95:9d:f8:65:18:fb:71:0f:72:9c:86:
7c:19:62:0b:58:bd:74:72:74:ac:28:cc:fe:51:24:
86:c1:01:da:3f:d7:4b:1a:40:1e:0d:f5:c7:88:76:
6b:32:f9:a8:fd:05:da:24:b7:d5:cc:d8:81:12:33:
a8:66:e6:af:ca:6c:1f:6c:91:c3:eb:37:c9:6f:17:
eb:35:07:06:aa:40:14:b6:ea:8b:ad:c3:20:4e:60:
6e:32:f3:75:8e:b9:b6:a2:89:72:d1:c8:7c:0f:66:
de:b4:b7:1d:65:55:93:14:c9:d8:8e:42:04:a7:a8:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5F:53:FA:3C:68:3F:D9:15:DE:8B:4A:6E:CE:B0:A6:B5:AA:7B:5E
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/cF9T-jxoP9kV3otKbs6wprWqe14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.192.0/22
85.155.160.0/21
185.21.248.0/22
IPv6:
2a04:1d80::/29
2a0e:1000::/29
Signature Algorithm: sha256WithRSAEncryption
0a:b3:12:e1:0d:71:d1:58:45:1c:f6:96:e2:02:ca:17:d6:45:
c1:bc:5e:7c:64:61:28:9e:f6:09:8d:9a:96:65:c6:75:3f:c5:
d4:03:1f:84:86:77:2b:e0:0f:61:86:3b:1f:65:d3:0b:f3:2e:
9c:57:42:98:cd:3d:50:65:6f:ac:94:dc:ed:11:46:8d:b4:bc:
0a:fa:b5:4e:2e:1c:b9:45:20:e7:95:8d:78:d8:66:71:df:84:
09:51:5d:8f:e1:85:2a:ef:24:02:43:4a:d6:87:86:d0:9d:24:
42:88:1f:ac:ea:d3:a2:7e:00:5f:32:3c:cd:9b:51:f6:b8:65:
18:de:2a:d9:d5:14:28:ea:61:b3:da:46:92:c7:55:58:7d:6a:
27:98:ce:51:04:06:e0:73:96:ba:3e:15:ae:c4:9b:6c:df:4b:
8c:84:3a:2a:96:c9:19:5f:86:0b:85:dc:a3:e0:70:3c:6e:c4:
c0:2f:fb:83:0e:71:76:7c:5c:ae:17:e0:09:4b:ed:c6:64:66:
66:87:31:c3:93:48:68:64:61:eb:b9:d0:6e:c2:ba:7f:0e:49:
0e:38:2e:91:ab:74:09:0f:33:89:cc:8d:ee:a5:eb:92:f7:ec:
fe:cc:4d:bb:00:b1:1a:7c:df:96:e6:fd:46:94:d1:46:5c:3a:
ed:b0:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:20:23 2026 by rpki-client