Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/cKjV-S3vKRON_iQR1UcK7ixO478.roa
File: cKjV-S3vKRON_iQR1UcK7ixO478.roa (raw, json)
Hash identifier: shgcyfjQXynL0H/wKYb7lT258UeJcf6Tzc/Y0uyEvlg=
Subject key identifier: 70:A8:D5:F9:2D:EF:29:13:8D:FE:24:11:D5:47:0A:EE:2C:4E:E3:BF
Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial: 019B79110E0AFC8FDA4CCC088C03F27B8EBC
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/cKjV-S3vKRON_iQR1UcK7ixO478.roa
Signing time: Thu 01 Jan 2026 10:18:39 +0000
ROA not before: Thu 01 Jan 2026 10:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64482
IP address blocks: 185.189.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:0e:0a:fc:8f:da:4c:cc:08:8c:03:f2:7b:8e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Validity
Not Before: Jan 1 10:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70a8d5f92def29138dfe2411d5470aee2c4ee3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:04:f3:4f:80:2c:25:02:35:b3:72:d8:20:9d:
6b:fb:15:82:98:81:d2:44:5e:1a:dd:55:43:1a:2e:
ac:07:e7:9c:18:66:3c:17:cb:7f:0a:4b:85:bc:87:
0e:24:b6:54:51:cd:63:d8:15:9c:bf:7b:18:57:f7:
59:64:6d:5b:75:63:50:17:9c:fc:d3:c2:f5:9c:46:
09:53:c3:79:23:07:13:a5:e8:c3:2d:cb:d0:08:0e:
60:f4:51:d6:c3:01:0f:c6:d0:b6:ac:06:c8:36:16:
d3:08:1c:91:c0:7f:a2:2a:b3:bc:3c:08:6f:d6:32:
e4:b9:9e:82:34:a5:75:c6:92:81:98:09:a5:79:49:
b3:9c:fa:96:2d:aa:0f:cb:39:12:d3:5f:fe:6c:17:
10:f9:c2:9a:36:8f:39:5f:b0:a2:09:42:8a:ad:a0:
67:aa:b9:46:85:b9:11:0b:62:86:c6:99:cb:e9:3d:
60:32:c7:64:cc:4a:c3:e8:a0:6c:59:2c:4b:d6:b3:
19:9d:d6:b2:2d:7d:2d:1b:37:3f:f6:a8:1a:40:07:
44:db:fc:85:fc:b0:58:2b:bd:d4:c7:1c:71:8d:ec:
eb:1e:cf:1d:c9:a6:69:4c:2e:8e:a0:15:77:45:92:
e4:95:50:62:e0:28:f8:ad:db:99:c4:50:46:58:8e:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A8:D5:F9:2D:EF:29:13:8D:FE:24:11:D5:47:0A:EE:2C:4E:E3:BF
X509v3 Authority Key Identifier:
keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/cKjV-S3vKRON_iQR1UcK7ixO478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.74.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c8:e8:48:e6:68:58:14:74:32:a8:66:55:ab:95:1b:9f:77:
be:47:47:8e:99:9e:c0:9d:98:ff:fb:46:5d:ba:b7:2e:f7:f3:
f6:ed:49:21:98:32:3c:96:ea:62:f8:f8:8a:d0:b5:c6:27:5e:
2a:f6:5b:00:0d:f2:fe:21:b9:db:99:44:fa:6e:87:8e:09:ed:
a4:73:3d:63:24:0c:fd:5e:d2:b0:67:cf:4e:6c:19:4d:39:9b:
9b:01:2b:ec:d1:f1:2a:46:34:37:b2:15:37:95:db:4e:5a:3d:
94:8f:d4:98:ab:02:19:d7:45:b0:eb:ad:81:1d:8b:39:97:3c:
63:6b:99:3d:2b:de:6d:20:ee:f6:0d:00:2f:f0:ab:b8:82:93:
6b:10:61:01:2f:c8:73:8d:36:24:b1:3e:32:a4:ac:4c:6f:5f:
83:7b:a8:2c:34:c2:d8:fb:1b:02:a7:a9:55:ed:39:51:8a:5d:
c7:c6:d5:b5:a1:fb:4d:4d:ad:bb:b8:86:15:6f:fc:0e:b9:c6:
4c:1f:52:77:6b:fc:e1:da:f0:9e:ff:16:46:93:6b:18:10:ce:
66:6d:07:4d:d3:52:ae:3b:c9:dd:54:36:5d:a6:e3:d7:4b:24:
48:29:fd:76:90:ca:d2:58:88:a6:5a:0e:1d:a3:4d:25:39:40:
13:d0:cc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:13:47 2026 by rpki-client