Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/CP1-ZWFt3LQXYmFLwdbDKA6-btk.roa
File: CP1-ZWFt3LQXYmFLwdbDKA6-btk.roa (raw, json)
Hash identifier: hFhoH59R3e+GZod8NYfc3YpX1Y6SV4cXhI67xJcoHls=
Subject key identifier: 08:FD:7E:65:61:6D:DC:B4:17:62:61:4B:C1:D6:C3:28:0E:BE:6E:D9
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019D860704C1C5553B2A18A3EE6F6DD5158D
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/CP1-ZWFt3LQXYmFLwdbDKA6-btk.roa
Signing time: Mon 13 Apr 2026 08:48:20 +0000
ROA not before: Mon 13 Apr 2026 08:48:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 85.232.179.0/24 maxlen: 24
85.232.184.0/24 maxlen: 24
85.232.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:07:04:c1:c5:55:3b:2a:18:a3:ee:6f:6d:d5:15:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Apr 13 08:48:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08fd7e65616ddcb41762614bc1d6c3280ebe6ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:98:80:ae:fd:d2:f4:6b:40:64:24:fb:de:d0:
84:87:64:f2:12:27:fe:dd:41:11:5a:d0:96:53:ae:
07:0f:b6:73:12:3e:cf:03:f3:16:95:4e:c7:72:1b:
50:4f:5f:0c:e3:b7:bb:47:9f:ca:9d:99:3f:bf:97:
5e:09:50:e5:f5:47:28:e3:82:43:44:a3:ef:e1:fe:
32:c7:c5:1b:ba:8b:68:bd:77:cb:f8:e3:98:5b:10:
c2:bb:d3:87:a1:7f:47:28:d4:f7:4b:1a:8d:46:5a:
7a:aa:94:c4:e5:9a:c7:af:bf:ec:02:ae:2b:51:91:
5b:1d:87:b8:d5:60:06:f7:54:6f:1d:b4:34:2d:89:
85:c2:ef:36:86:d7:8f:29:df:94:de:7c:d0:45:23:
81:3d:2c:1a:dc:da:7e:53:4f:80:58:f4:1b:f3:92:
c0:80:bc:19:6b:72:f7:71:c8:b0:2f:08:c7:a0:b8:
f6:e9:c2:c5:b9:da:a3:6c:fe:1e:1a:10:ab:b7:17:
16:7b:17:87:be:bd:cd:89:fc:16:7e:e2:86:1c:88:
f4:fa:e3:d6:b9:ed:52:44:e0:1b:50:24:73:4a:39:
c9:c3:31:fe:83:b2:a8:08:60:ab:6f:df:1d:7f:c6:
5b:eb:19:5c:eb:4b:e1:19:48:ae:dd:ec:01:92:64:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FD:7E:65:61:6D:DC:B4:17:62:61:4B:C1:D6:C3:28:0E:BE:6E:D9
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/CP1-ZWFt3LQXYmFLwdbDKA6-btk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.179.0/24
85.232.184.0/24
85.232.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:38:99:54:80:21:dc:cc:41:48:9e:84:cb:e5:4b:b6:db:45:
76:89:45:32:e7:6d:d5:e1:c5:8c:63:56:c7:1a:be:aa:48:7e:
7b:da:06:3c:c7:43:40:1c:ff:2e:ab:f6:c7:82:fd:46:17:8d:
38:6b:68:ce:4a:a5:08:3d:d7:01:8e:35:4d:39:7c:0a:15:b1:
00:d6:00:0c:62:72:49:d3:45:0a:9d:9b:45:01:82:b4:78:52:
2e:f4:b1:fb:9a:0f:99:24:4c:f0:dc:08:f3:66:37:ab:44:4c:
1e:2e:82:b3:60:72:01:eb:33:f0:bb:8f:90:28:6a:bb:eb:10:
07:48:f6:3c:72:22:c1:97:e9:a7:56:8e:70:e6:df:64:05:19:
52:43:e7:e0:5d:c2:0c:7f:09:c7:9e:26:79:db:f6:ba:cc:49:
68:e4:80:92:da:25:d5:0d:d4:44:c5:d1:b2:19:2f:90:6e:3a:
fe:a3:3b:16:dc:62:fe:e1:98:b7:ae:e8:e9:ea:01:7a:bd:af:
0d:05:c7:58:c0:14:98:97:46:e3:60:a9:f5:11:88:75:2a:30:
f1:9f:ce:1b:b2:18:69:5f:d8:5a:6e:51:16:f7:b4:67:5e:f7:
9b:a1:b4:fc:4b:0a:f0:5c:7a:5b:d8:e5:7c:fa:f4:c8:72:fa:
3a:5c:0b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:25 2026 by rpki-client