Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/CKCofthc_5QsmvvxxMkq99F6nD8.roa
File: CKCofthc_5QsmvvxxMkq99F6nD8.roa (raw, json)
Hash identifier: 2ut3B1GYgmXcwJO530EMSyVMmk7e0gGaaT9X5CFd6t0=
Subject key identifier: 08:A0:A8:7E:D8:5C:FF:94:2C:9A:FB:F1:C4:C9:2A:F7:D1:7A:9C:3F
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 01A0AFFE339E1AEA6000F39099E203A26E19
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/CKCofthc_5QsmvvxxMkq99F6nD8.roa
Signing time: Thu 17 Sep 2026 15:31:07 +0000
ROA not before: Thu 17 Sep 2026 15:31:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60893
IP address blocks: 45.150.104.0/22 maxlen: 24
91.132.240.0/22 maxlen: 24
91.132.243.0/24 maxlen: 24
109.94.160.0/24 maxlen: 24
130.255.171.0/24 maxlen: 24
146.19.165.0/24 maxlen: 24
178.211.138.0/24 maxlen: 24
185.24.48.0/22 maxlen: 24
185.58.148.0/22 maxlen: 24
193.0.233.0/24 maxlen: 24
194.9.7.0/24 maxlen: 24
195.80.40.0/22 maxlen: 24
2a00:7420::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:fe:33:9e:1a:ea:60:00:f3:90:99:e2:03:a2:6e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Sep 17 15:31:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08a0a87ed85cff942c9afbf1c4c92af7d17a9c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:18:a9:c1:3f:da:0c:4a:7a:2a:ec:a0:97:
5b:88:78:da:6d:bf:b9:bc:5b:25:bb:50:6e:f1:09:
5c:96:5f:d5:25:4b:6c:1b:5a:1d:04:3b:fb:fe:a9:
a4:c3:81:f3:55:c2:ba:85:59:a9:ae:8e:d9:c8:fa:
fc:08:15:7a:4a:a6:dc:a9:92:5e:0a:ed:1f:30:e4:
1e:87:3c:8d:b5:61:6f:40:9f:c8:e4:e7:85:22:aa:
82:43:2c:ac:9f:93:53:b7:8d:25:ce:83:c8:3d:5c:
3a:4b:d0:c9:1a:c0:cc:b6:c2:a8:6d:87:cf:9d:4a:
23:25:52:35:13:64:3d:ff:f6:5f:6a:76:12:30:06:
ef:b0:2e:f1:0e:40:e2:b1:62:54:8a:a3:bf:e2:f0:
b8:0b:5a:fd:d2:a5:45:0c:9a:51:c3:ca:c3:32:68:
ac:64:f2:6c:6d:e4:38:2b:6b:e0:ed:f9:2b:7f:b4:
7f:43:2d:14:a6:ef:38:8e:90:73:ba:fb:d7:27:3f:
65:15:db:81:31:2c:ae:c6:4a:98:df:c3:f4:52:c6:
f8:79:5b:c6:25:55:b8:2f:b9:8c:2a:3f:9c:fd:f5:
a7:a4:cc:fe:78:92:f7:4f:f5:4e:56:a2:8d:85:ab:
07:da:f6:37:62:17:0c:c6:dc:71:78:31:c0:d4:0b:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A0:A8:7E:D8:5C:FF:94:2C:9A:FB:F1:C4:C9:2A:F7:D1:7A:9C:3F
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/CKCofthc_5QsmvvxxMkq99F6nD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.104.0/22
91.132.240.0/22
109.94.160.0/24
130.255.171.0/24
146.19.165.0/24
178.211.138.0/24
185.24.48.0/22
185.58.148.0/22
193.0.233.0/24
194.9.7.0/24
195.80.40.0/22
IPv6:
2a00:7420::/32
Signature Algorithm: sha256WithRSAEncryption
6e:fd:ef:0d:40:03:b3:3e:28:1c:82:1f:b4:61:7c:00:4b:e7:
9d:3f:02:fd:52:55:2d:7f:6d:bf:a9:09:94:60:2e:ae:b6:8b:
3e:e3:f2:da:b5:10:65:b5:0f:d0:f5:c5:8d:40:c3:44:10:c2:
bc:b2:5a:ce:d5:d4:5d:8f:e0:9b:c7:3e:d9:37:d9:20:61:49:
02:f2:9b:3c:36:e6:b0:a1:e9:ad:4d:37:37:32:a8:5c:ca:79:
3b:1e:5b:c4:b2:90:84:0d:42:35:e1:46:a8:26:c3:45:97:0c:
6d:be:65:3e:40:44:2a:d9:21:a7:32:0f:dc:d0:fe:e7:88:7a:
eb:6e:78:f1:10:0a:03:71:09:fb:dd:ca:f8:cd:a2:be:88:a8:
dc:aa:7d:ef:89:53:ac:27:27:9f:aa:29:16:f1:02:84:7c:28:
2e:57:44:69:b4:39:d0:21:35:9c:51:15:f8:33:79:26:69:fa:
49:4c:af:a5:8b:18:d9:e5:8d:ad:cc:9e:04:8c:a6:d1:a7:10:
76:02:42:bf:31:4a:3a:7f:5f:e9:c3:6a:dd:8d:a0:a9:ac:1e:
30:c9:95:d6:54:10:6a:b6:e7:92:09:f5:17:a2:f1:de:e2:da:
9c:76:e4:58:26:fa:ea:05:de:87:17:7f:c3:ee:be:83:5e:9d:
cc:89:6c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:26:15 2026 by rpki-client