Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/cf5HDAfqI3OG_hehJe-miMQh95I.roa
File: cf5HDAfqI3OG_hehJe-miMQh95I.roa (raw, json)
Hash identifier: exOGJzd+hAG/2KIk86X4tCMOCYo5iR+G2wvIBJBTC2k=
Subject key identifier: 71:FE:47:0C:07:EA:23:73:86:FE:17:A1:25:EF:A6:88:C4:21:F7:92
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 01A16389F2384CCF0146B4723983011A72D6
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/cf5HDAfqI3OG_hehJe-miMQh95I.roa
Signing time: Thu 22 Oct 2026 12:15:47 +0000
ROA not before: Thu 22 Oct 2026 12:15:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 46.243.56.0/22 maxlen: 24
91.195.242.0/23 maxlen: 24
124.198.192.0/19 maxlen: 24
139.66.0.0/16 maxlen: 24
147.204.0.0/16 maxlen: 24
155.56.0.0/16 maxlen: 24
194.39.128.0/21 maxlen: 24
194.39.136.0/22 maxlen: 24
194.45.236.0/23 maxlen: 24
194.55.88.0/22 maxlen: 24
194.169.146.0/23 maxlen: 24
202.89.128.0/20 maxlen: 24
217.77.240.0/20 maxlen: 24
2a00:fe00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:89:f2:38:4c:cf:01:46:b4:72:39:83:01:1a:72:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Oct 22 12:15:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71fe470c07ea237386fe17a125efa688c421f792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:58:3f:99:61:69:dc:fb:a3:42:97:6e:3c:18:
6f:f3:04:71:61:24:95:1a:3a:8e:e4:12:24:a4:51:
9e:c5:72:d8:1a:18:d1:49:3c:fb:3b:b8:97:40:9f:
66:b0:d9:98:37:66:61:02:d9:5c:e2:ca:36:71:9e:
4c:f8:86:08:fb:8f:5c:ef:5f:b3:19:34:5b:71:59:
d1:2a:39:a6:a1:d0:59:0b:60:33:59:70:d7:ff:bb:
f2:d7:47:4c:c9:07:9b:56:17:2d:e7:36:dc:b9:eb:
fd:3f:5e:17:5e:88:65:52:df:6b:52:01:33:f5:09:
70:c8:fe:27:8f:a7:ce:c7:0e:cc:fe:c1:1b:28:3c:
79:3a:62:69:b9:6a:ca:f4:ff:35:02:08:4b:fe:66:
bc:8c:a4:41:52:7f:77:64:36:d0:c6:06:6c:06:16:
33:7b:c9:c2:97:a8:55:50:7f:fe:c0:8e:ea:6c:72:
fa:10:68:6c:42:e6:95:9b:c2:d2:71:8e:9a:29:b0:
a4:64:aa:24:4d:8c:1b:ac:aa:5c:53:17:40:67:88:
a2:b9:28:4a:9e:de:e9:f6:97:7a:06:79:c0:d1:95:
f7:e8:3a:c0:b7:bd:ed:8f:b1:d4:0d:37:3f:4e:e8:
02:8d:3d:29:50:30:9e:b3:a6:ed:9e:95:7d:2c:2c:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FE:47:0C:07:EA:23:73:86:FE:17:A1:25:EF:A6:88:C4:21:F7:92
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/cf5HDAfqI3OG_hehJe-miMQh95I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.56.0/22
91.195.242.0/23
124.198.192.0/19
139.66.0.0/16
147.204.0.0/16
155.56.0.0/16
194.39.128.0-194.39.139.255
194.45.236.0/23
194.55.88.0/22
194.169.146.0/23
202.89.128.0/20
217.77.240.0/20
IPv6:
2a00:fe00::/32
Signature Algorithm: sha256WithRSAEncryption
12:6b:23:bb:be:ba:2d:82:de:41:d7:0a:3a:7c:74:c3:d8:9a:
31:be:bd:d4:f2:9d:7a:45:b9:92:b9:21:f6:b2:41:ab:2a:c7:
e8:15:bd:4c:bb:b8:b3:3f:14:54:84:bc:8d:9c:77:c5:a4:60:
65:91:dc:e4:72:9f:91:5f:63:25:1a:09:0f:6c:6f:5f:1c:26:
20:f3:7d:56:c4:dc:54:44:7e:e6:f9:4f:c4:2f:46:d8:b2:6a:
ff:78:0b:aa:81:fd:5c:f4:5e:66:95:39:e1:b9:93:3d:d5:8f:
11:2a:04:5d:ab:94:06:c9:cd:aa:5a:d9:eb:e3:ae:43:2a:61:
63:99:55:06:b6:d9:0d:c8:f1:b9:4e:da:6b:c1:b2:38:68:dd:
c1:5d:6b:63:23:ac:32:56:72:74:ca:9b:2c:f8:63:73:f7:f4:
ba:25:61:20:f0:9a:06:58:f2:7a:7c:74:af:93:58:e7:2b:d1:
ad:fd:d9:97:4c:bd:6f:d1:ea:94:75:0c:a9:82:63:39:b3:7c:
13:ba:2d:45:d9:d4:b3:58:4f:37:63:c6:9f:d5:99:2a:86:7b:
c7:db:39:69:87:4a:47:9d:a4:35:62:f9:72:d3:1b:37:51:c0:
a2:de:76:e5:bc:57:16:f4:98:01:46:e6:9c:95:91:3d:b8:55:
b2:00:8c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:29:40 2026 by rpki-client