Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cfVKF13v_Nai1mjI31QMlL2pfn4.roa
File: cfVKF13v_Nai1mjI31QMlL2pfn4.roa (raw, json)
Hash identifier: h3AA4zsWuwpBXlX2c15dCQcoYim5ZwMCnVm1QgqIDfA=
Subject key identifier: 71:F5:4A:17:5D:EF:FC:D6:A2:D6:68:C8:DF:54:0C:94:BD:A9:7E:7E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1A2779CDCE6FB30CAD45B53E243942DFF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cfVKF13v_Nai1mjI31QMlL2pfn4.roa
Signing time: Tue 03 Nov 2026 17:31:50 +0000
ROA not before: Tue 03 Nov 2026 17:31:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.240.28.0/24 maxlen: 24
151.241.162.0/24 maxlen: 24
151.242.87.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.101.0/24 maxlen: 24
151.244.188.0/24 maxlen: 24
151.247.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:77:9c:dc:e6:fb:30:ca:d4:5b:53:e2:43:94:2d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 3 17:31:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71f54a175deffcd6a2d668c8df540c94bda97e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:56:ac:18:70:fe:9b:ad:f3:72:19:33:a8:
f6:ab:bd:07:13:64:e9:5e:eb:e4:5d:81:43:2b:29:
51:ac:77:63:1c:d1:f5:f9:38:d2:ec:63:55:a9:16:
07:49:ef:ba:93:c5:98:e6:7a:75:d6:7e:88:e4:aa:
d8:4f:65:c3:d7:94:73:2d:91:30:e8:03:d9:56:ae:
fc:ea:90:14:a7:99:51:58:00:0d:61:89:bb:42:3d:
42:18:de:dc:a0:4b:88:8f:71:19:01:58:e3:68:2f:
5f:cd:3e:f4:2b:94:3a:af:e9:27:99:5f:df:45:a8:
6b:5b:db:5e:76:b2:ed:18:87:f5:59:c3:3b:74:de:
84:dd:9d:9e:bd:9e:df:5f:dc:63:4f:20:1d:c4:9f:
8c:4d:4b:8e:7b:12:53:01:7d:02:62:90:2e:08:91:
1d:9e:0f:46:53:e5:9b:e7:8e:67:5d:c1:55:14:64:
6f:f4:de:98:ff:dd:ee:94:5f:9d:7a:87:ac:f7:62:
a1:99:d4:c1:21:fd:e9:62:fa:13:5b:d5:ca:2d:68:
9b:8a:8d:8c:92:c6:aa:d5:34:a8:76:6f:af:46:7b:
fb:7e:62:4b:a1:e8:66:76:4b:7b:96:24:46:12:a9:
da:56:9e:be:f3:d6:12:59:75:36:ec:54:72:3a:ba:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F5:4A:17:5D:EF:FC:D6:A2:D6:68:C8:DF:54:0C:94:BD:A9:7E:7E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cfVKF13v_Nai1mjI31QMlL2pfn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.240.28.0/24
151.241.162.0/24
151.242.87.0/24
151.243.6.0/24
151.243.101.0/24
151.244.188.0/24
151.247.15.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ad:d0:f9:ed:99:37:3b:a6:2c:99:c0:cb:e2:ac:20:6a:75:
a9:33:92:20:2c:62:6e:31:74:29:a9:4f:4a:46:66:e4:f8:98:
3f:74:2a:87:db:1a:39:62:ca:36:1c:58:e3:6d:37:00:20:ea:
b1:68:6a:87:bb:c8:8d:6a:70:68:40:94:20:ca:db:b4:1d:95:
d5:3f:17:0e:53:98:a0:26:a7:e5:36:76:a6:98:bf:ed:0f:50:
47:a0:e5:01:0e:be:8d:5d:a6:c4:c0:9d:a0:63:3d:8e:83:cd:
38:15:4d:58:67:af:6c:b9:f5:25:e8:5f:8d:55:4f:cd:16:44:
17:98:6b:98:d7:85:ed:1a:78:3f:3d:c5:d0:52:33:33:7f:32:
5c:54:b4:f3:2f:60:44:06:a8:b6:48:96:03:07:e2:81:01:de:
60:26:9f:58:5b:04:fa:74:75:65:82:55:23:bd:53:90:f9:85:
58:3d:ab:0a:04:a5:9a:bf:08:e3:6f:59:3e:29:61:9b:a7:a0:
75:f7:e7:21:23:96:c1:85:30:2e:72:6f:14:57:21:e9:c3:2d:
56:c2:56:c7:ad:27:74:10:28:b3:83:9b:14:ec:1e:df:d4:0b:
eb:79:19:91:8a:e9:e4:3b:c5:1e:1d:1a:1a:ae:ce:7b:3b:ec:
84:b9:8a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:50:09 2026 by rpki-client