Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cxrJOCAKzspFxXGxwDsaKA6komE.roa
File: cxrJOCAKzspFxXGxwDsaKA6komE.roa (raw, json)
Hash identifier: hwef9Si5EJC782Lni8QeXF1C1DdUs2jIdy5lMc9coNU=
Subject key identifier: 73:1A:C9:38:20:0A:CE:CA:45:C5:71:B1:C0:3B:1A:28:0E:A4:A2:61
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0CEDC1485964696BA2BCC92721731958A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cxrJOCAKzspFxXGxwDsaKA6komE.roa
Signing time: Wed 23 Sep 2026 15:22:04 +0000
ROA not before: Wed 23 Sep 2026 15:22:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214471
IP address blocks: 31.13.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:dc:14:85:96:46:96:ba:2b:cc:92:72:17:31:95:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 23 15:22:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=731ac938200aceca45c571b1c03b1a280ea4a261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:d6:48:a8:f2:aa:8e:e6:9e:84:43:65:e4:
7c:c2:22:9d:0e:1e:40:f9:ef:9a:b8:d3:5e:44:dd:
78:9e:9e:a2:d7:a5:ea:5c:c7:66:c1:42:cb:b0:fb:
17:d5:db:fa:fb:e2:5e:28:f1:3a:38:95:25:a1:4f:
80:ff:9d:9d:1f:ac:fa:52:f7:a5:91:d3:c5:62:bb:
8c:e8:a5:ce:e3:15:71:c7:3d:c5:94:be:9c:e2:99:
fb:53:18:3c:6b:b5:af:9e:2a:a7:d2:80:46:36:7d:
cf:00:bb:f0:f8:28:65:6e:cf:8b:d4:d9:2a:cf:c4:
6d:37:75:d2:5f:4d:f1:96:9a:c8:49:9b:3c:f0:87:
9f:f7:a1:f8:f3:21:6a:52:5c:39:bd:e2:7c:78:be:
ee:aa:3a:1d:98:5f:bf:55:0b:1e:2e:a3:62:db:94:
2b:76:2b:6c:68:d9:f1:d5:0d:da:7c:12:39:0d:79:
89:86:c8:19:3f:fb:c4:e0:a2:80:4f:e0:f5:87:50:
44:58:f0:00:e5:62:5d:8e:e3:50:e7:a3:c9:a4:cd:
32:6b:44:5b:45:ac:8d:e6:e6:27:f6:6d:6e:0f:a5:
2c:30:75:2d:e3:3e:80:38:19:18:b1:2a:5f:da:13:
3e:90:92:c9:5f:d8:5a:10:5b:b3:d2:b8:d8:1e:a9:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1A:C9:38:20:0A:CE:CA:45:C5:71:B1:C0:3B:1A:28:0E:A4:A2:61
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cxrJOCAKzspFxXGxwDsaKA6komE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.231.0/24
Signature Algorithm: sha256WithRSAEncryption
82:1f:52:10:75:d1:d7:95:c5:f2:3c:80:da:bb:44:fc:a9:2e:
c0:cb:e3:9c:c6:31:17:ef:08:9a:ed:e3:55:2e:05:15:28:13:
58:5f:78:4f:8b:d2:bd:9a:a3:3f:1f:50:82:40:bc:9a:37:52:
10:c4:de:0e:a3:89:f8:98:a7:3a:35:52:96:d6:6d:88:14:9e:
ea:ea:5c:f6:13:4a:20:60:41:bd:19:57:2e:c6:bb:ef:b2:d5:
5a:23:75:88:b5:41:23:73:a9:dc:98:25:da:e3:11:8c:46:fd:
16:e4:c7:b4:d7:8c:7c:01:53:1e:d1:5a:82:51:6f:3c:6e:cb:
9b:6d:37:89:fe:58:2f:83:1f:83:8e:36:21:59:aa:eb:e5:63:
06:be:be:0e:be:aa:27:df:71:c5:34:3b:33:de:fc:da:5f:35:
c8:3f:66:ef:d3:5d:da:7c:63:76:66:6e:56:cf:c7:54:e5:84:
29:84:47:37:d3:00:29:62:f7:65:90:31:35:35:aa:74:2e:ae:
30:6c:f7:c9:e1:1c:39:4e:5f:8c:da:94:87:dd:b3:40:4d:db:
73:93:4f:38:6b:90:2f:c9:43:93:c8:78:a5:86:78:88:01:da:
c8:b5:a6:28:e3:1b:33:1d:77:1e:7a:81:e2:30:3c:e0:b7:5c:
7e:5d:93:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:50:23 2026 by rpki-client