Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/cKf_i1BKOsOVOz6z05RX1NKopHw.roa
File: cKf_i1BKOsOVOz6z05RX1NKopHw.roa (raw, json)
Hash identifier: 0VE+3FGc3lBzs4pWdnG1Ws706SgN7R/OSEvdVqhc/2w=
Subject key identifier: 70:A7:FF:8B:50:4A:3A:C3:95:3B:3E:B3:D3:94:57:D4:D2:A8:A4:7C
Certificate issuer: /CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
Certificate serial: 01A0F7D3F7677DC7DA51F2F889CEB8D92C80
Authority key identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/cKf_i1BKOsOVOz6z05RX1NKopHw.roa
Signing time: Thu 01 Oct 2026 14:17:38 +0000
ROA not before: Thu 01 Oct 2026 14:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207147
IP address blocks: 212.46.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:d3:f7:67:7d:c7:da:51:f2:f8:89:ce:b8:d9:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
Validity
Not Before: Oct 1 14:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70a7ff8b504a3ac3953b3eb3d39457d4d2a8a47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:d7:8c:2b:25:6c:6b:31:e8:5c:be:75:4c:
0d:bf:7e:86:7d:f5:67:72:93:a5:38:bd:ac:df:2b:
a6:2f:2a:17:18:7a:38:e0:ed:ec:f4:a2:28:28:09:
54:43:b6:6a:d5:b1:1d:de:39:d4:1b:4a:99:bf:3b:
4a:02:a0:b0:f7:9b:ac:5a:ce:e6:1b:d2:3f:a6:6a:
f1:f1:14:70:eb:59:d9:92:fa:8d:09:dc:d0:35:2c:
c0:4d:71:56:a0:ab:43:6a:da:7e:be:8a:fc:19:7c:
93:4e:d8:29:6e:eb:0e:da:30:c9:ca:73:df:72:57:
fb:d9:44:3a:93:7e:59:f8:f4:aa:be:d2:43:d8:58:
bc:06:14:e3:d1:b9:bc:52:68:d5:31:51:9a:f2:1d:
70:cb:88:e1:d9:24:37:66:d0:03:57:74:7b:f2:ff:
4f:11:d4:30:15:3d:fd:ab:c1:37:63:a1:30:c7:63:
70:18:c5:bd:7e:c3:58:4d:bc:d3:88:0a:47:0c:87:
10:65:51:01:3a:80:2c:4e:25:3b:2d:4f:37:3a:a4:
b7:11:1b:88:0c:35:a7:2f:1c:04:01:18:7d:a6:f5:
fe:c7:a9:99:e6:c9:d4:df:a5:29:47:c2:89:46:b2:
31:43:cd:0e:81:5d:3d:53:86:3e:f3:02:43:f4:d0:
a6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A7:FF:8B:50:4A:3A:C3:95:3B:3E:B3:D3:94:57:D4:D2:A8:A4:7C
X509v3 Authority Key Identifier:
keyid:B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/cKf_i1BKOsOVOz6z05RX1NKopHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7e:6c:80:98:d4:93:ba:71:96:f8:33:75:1c:fd:6a:10:67:
a4:ca:b3:be:dd:02:a1:03:2e:6f:98:3b:c4:2d:dd:e6:86:0d:
08:f3:6c:84:8c:2c:d7:9b:b3:70:44:80:a4:b7:89:2a:f3:bb:
66:55:fc:ad:72:2b:93:69:2b:e7:2f:28:ab:ee:19:65:6f:38:
58:4f:0c:9a:9b:d9:21:c2:d7:81:9d:92:47:52:d4:17:a2:82:
5c:fd:5f:0c:8e:b6:56:3c:f0:7e:6a:28:2c:c4:72:1a:bc:9a:
00:18:d8:b2:61:d8:66:3b:cd:7a:3a:f9:a2:13:4b:e8:78:6a:
6f:bf:98:e5:9d:02:03:40:63:9e:ed:48:38:22:19:20:2c:0f:
f8:a5:ae:ea:f8:9c:9d:3a:d7:de:70:bf:1d:c2:47:ed:cb:98:
cf:12:c6:25:c5:c2:38:cf:f5:2e:18:5a:f4:b5:48:41:d9:9b:
14:94:dd:72:a3:0f:88:34:5f:81:38:92:1f:e9:e5:10:b6:ad:
f4:a7:21:61:f7:4b:71:4d:cd:a1:6a:a2:f8:b6:9c:7e:fd:ac:
50:64:4b:32:57:bc:3e:9c:24:a1:b2:05:c0:ce:34:f2:f0:ef:
44:f2:65:d3:89:35:58:d2:89:fe:7e:a3:78:1f:76:ba:0f:f6:
30:09:de:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:11:26 2026 by rpki-client