Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Cvv_4s96A3UjJHdV83hDaoce6w0.roa
File: Cvv_4s96A3UjJHdV83hDaoce6w0.roa (raw, json)
Hash identifier: cVTsPnrfYC3Xv5HxeXmgHF6y4s23xqZQdvoM/PbYabA=
Subject key identifier: 0A:FB:FF:E2:CF:7A:03:75:23:24:77:55:F3:78:43:6A:87:1E:EB:0D
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A19265C632500BCC28879310D4D30E4CAB
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Cvv_4s96A3UjJHdV83hDaoce6w0.roa
Signing time: Sat 31 Oct 2026 14:38:25 +0000
ROA not before: Sat 31 Oct 2026 14:38:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200823
IP address blocks: 200.96.110.0/24 maxlen: 24
200.96.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:65:c6:32:50:0b:cc:28:87:93:10:d4:d3:0e:4c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Oct 31 14:38:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0afbffe2cf7a037523247755f378436a871eeb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c1:b5:08:f0:fa:78:97:86:dc:71:86:73:b3:
52:9c:eb:d1:73:2f:d5:65:8e:c0:c8:e3:a1:26:80:
84:6c:1a:f5:4a:0c:4a:6c:36:b3:82:61:54:aa:21:
16:3a:9d:1f:37:26:3e:09:ed:57:c4:63:c3:af:75:
f6:bb:ea:f1:4e:7c:e8:53:7e:38:01:a2:71:f7:02:
c9:9d:34:ad:b2:d0:8c:51:11:df:a4:7b:b9:25:b4:
3d:ff:bf:e8:a2:0a:4b:7e:fb:8f:c2:a2:42:c3:63:
73:ee:ab:a7:93:27:c6:8f:ef:63:67:ab:da:e1:1b:
fc:0a:7d:9d:5a:10:31:73:a4:b5:74:39:23:c2:f2:
53:2f:09:27:70:da:f2:cb:dc:15:c9:0b:02:6c:07:
80:33:28:b0:01:fc:36:57:55:0a:a4:fb:85:5c:f5:
0b:11:2c:32:81:44:09:35:d9:16:50:5d:b7:8a:d1:
32:49:ba:02:52:4c:6d:33:15:4b:28:ac:d9:b5:7b:
ff:27:03:21:07:ff:3b:73:d9:8a:6b:45:ea:7d:2b:
72:f3:41:85:f6:52:91:4b:be:8a:fc:92:d1:1a:20:
48:be:8a:ba:f2:36:94:36:88:76:f3:2d:4f:e4:b5:
2b:bf:e6:1c:12:fe:fb:53:4c:51:2f:70:9c:2b:ad:
75:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FB:FF:E2:CF:7A:03:75:23:24:77:55:F3:78:43:6A:87:1E:EB:0D
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Cvv_4s96A3UjJHdV83hDaoce6w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.96.110.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:71:d5:85:47:64:fa:12:7f:94:3e:68:e2:aa:a9:4f:9d:50:
c4:3a:16:04:ea:d5:6a:4c:f3:54:dc:33:c7:95:4c:26:5e:63:
78:ee:4d:99:7f:65:85:63:45:62:ac:3e:e2:2f:eb:68:35:c9:
d5:4f:29:10:c8:56:14:57:0d:7c:f6:75:63:30:d4:8c:2b:09:
bd:88:fd:8b:b6:62:a9:70:d6:71:bb:fa:d9:2c:2b:99:d3:3b:
d5:28:7a:33:fc:39:ec:35:fe:41:2d:bb:46:64:f8:ce:86:c1:
28:2a:09:4a:a7:d0:a3:cb:21:14:ed:21:1a:8e:54:35:b3:9e:
5e:f4:3f:00:3c:f9:cc:e3:ab:52:95:12:cd:df:b9:f4:cb:86:
93:44:28:33:42:d8:81:a5:75:58:8e:f6:75:38:d1:74:15:9d:
11:25:75:55:90:eb:c2:7a:7a:d2:1a:8f:21:bc:d6:2e:b9:30:
a8:64:8c:a5:e8:85:96:26:94:2e:34:55:d1:9a:2c:0f:9f:16:
68:16:a1:f6:51:89:4f:44:28:8a:fc:ba:65:4f:b9:18:7a:0a:
91:8c:91:0a:03:aa:85:7f:1a:bf:2f:72:e7:ba:8a:fc:0d:2a:
93:2f:40:3f:b1:78:ad:e3:dc:6e:3a:a3:11:47:d3:51:a9:ba:
1b:db:aa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 08:25:36 2026 by rpki-client