Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/cfcUIrcXeHF8jaIvcUmBzrrqJCw.roa
File: cfcUIrcXeHF8jaIvcUmBzrrqJCw.roa (raw, json)
Hash identifier: aD3bmplE0aDVhwS/89upgnN9WEDbNnoFPGzrwXZaLVc=
Subject key identifier: 71:F7:14:22:B7:17:78:71:7C:8D:A2:2F:71:49:81:CE:BA:EA:24:2C
Certificate issuer: /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial: 01A0B54CC7A8AF239B853B0E4FBBC6F1A17B
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/cfcUIrcXeHF8jaIvcUmBzrrqJCw.roa
Signing time: Fri 18 Sep 2026 16:15:03 +0000
ROA not before: Fri 18 Sep 2026 16:15:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27176
IP address blocks: 78.110.168.0/24 maxlen: 24
81.92.219.0/24 maxlen: 24
94.46.246.0/24 maxlen: 24
185.99.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:4c:c7:a8:af:23:9b:85:3b:0e:4f:bb:c6:f1:a1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
Validity
Not Before: Sep 18 16:15:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71f71422b71778717c8da22f714981cebaea242c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:3a:7e:16:5d:81:cd:4c:ca:41:18:da:70:
8a:d3:5e:75:b7:26:a3:0c:27:24:59:47:b7:05:bf:
9e:5a:01:ab:dc:32:ce:38:12:e6:20:c7:78:ed:e0:
2e:38:1f:29:c0:70:43:70:91:a1:a6:43:9d:db:c0:
27:5c:f6:8e:73:d9:0d:40:40:9b:55:fc:9d:28:dc:
09:01:c8:cd:cb:9a:6f:e3:78:37:98:57:a8:a0:28:
0f:6d:ee:07:91:6f:14:65:13:32:83:f5:e4:8f:4d:
a3:0a:c2:60:f5:69:fb:bb:c6:fe:96:72:d1:b7:f6:
d7:fe:b5:a0:f6:91:a3:19:cf:91:bc:48:57:f6:0f:
26:d3:41:88:c0:00:6a:c0:04:7f:42:ce:91:a4:7d:
59:87:f3:07:1a:c5:16:7f:97:20:4d:e6:f6:ce:7b:
46:3c:49:c7:8a:13:5d:4f:b3:5b:37:dd:46:bb:8f:
e7:f5:a5:1b:d1:18:4e:04:f5:08:a2:33:db:d8:9c:
2b:b2:cc:21:e6:7b:e5:88:68:f1:9e:c3:c9:c2:8a:
76:f9:f0:ee:85:4d:31:6d:66:70:d1:c2:80:5c:00:
8c:cb:c7:b0:3b:94:ac:54:d4:79:c9:32:a2:9c:1c:
58:a9:a2:fd:d2:7d:8f:df:64:90:e8:f4:d4:c8:11:
49:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F7:14:22:B7:17:78:71:7C:8D:A2:2F:71:49:81:CE:BA:EA:24:2C
X509v3 Authority Key Identifier:
keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/cfcUIrcXeHF8jaIvcUmBzrrqJCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.168.0/24
81.92.219.0/24
94.46.246.0/24
185.99.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:34:c6:a6:cf:33:74:e1:85:c9:58:85:26:21:d3:d6:54:2f:
e1:8d:86:56:7f:59:4b:af:80:d9:d4:f1:bc:6c:59:e1:c8:d3:
6f:c7:f6:c3:b0:0a:8c:91:eb:a5:5f:ac:dd:3d:98:7a:53:14:
90:96:38:19:ed:b2:68:ca:ea:3a:01:2a:eb:3a:73:c2:63:f9:
f9:67:0b:4d:c4:12:41:10:0f:e4:60:2c:5b:54:5d:6a:34:36:
b4:ef:9f:07:9f:3a:3a:01:84:fb:56:ae:36:7e:d9:5b:7f:6f:
b7:6c:43:36:88:ea:5f:5a:0d:5c:d1:0e:3c:82:99:df:c1:5f:
3f:d0:23:62:49:ab:3c:9c:5f:9a:dc:49:2a:5b:1d:22:37:d8:
fa:42:9e:b8:c9:d0:c8:65:5b:7d:87:ff:33:75:ef:d5:50:d6:
23:11:18:ef:70:d6:2c:ec:cb:d3:3c:35:75:0a:0a:55:e9:9b:
fc:b5:02:e4:c7:8d:e6:ba:ad:a6:aa:de:0b:67:81:14:a4:72:
b1:dc:84:80:bf:17:5c:15:30:1d:cb:9d:18:af:2a:23:53:d2:
90:73:6c:8d:c3:7c:d1:b5:64:cf:83:97:4e:a7:69:d0:6b:33:
cd:00:99:04:02:98:3c:49:b5:7e:bb:f8:84:fe:d7:41:7b:2f:
5c:be:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:20:51 2026 by rpki-client