Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/cdMRy-DSW-Du9L3CtDWvp5caKcw.roa
File: cdMRy-DSW-Du9L3CtDWvp5caKcw.roa (raw, json)
Hash identifier: l8rhu4zGSNjHb80a0G3SPIKn/ZhqpNDg+4wgaALeTKc=
Subject key identifier: 71:D3:11:CB:E0:D2:5B:E0:EE:F4:BD:C2:B4:35:AF:A7:97:1A:29:CC
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01A14060AA422180D0C8F378F0CED09B4403
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/cdMRy-DSW-Du9L3CtDWvp5caKcw.roa
Signing time: Thu 15 Oct 2026 16:23:59 +0000
ROA not before: Thu 15 Oct 2026 16:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206787
IP address blocks: 45.95.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:60:aa:42:21:80:d0:c8:f3:78:f0:ce:d0:9b:44:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Oct 15 16:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71d311cbe0d25be0eef4bdc2b435afa7971a29cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:30:02:b7:a2:7d:85:bc:bf:be:d5:13:3b:
76:88:1b:5a:b0:8e:56:60:8e:7d:9c:8e:24:c7:14:
b5:a6:17:cb:ac:a4:4e:69:37:c8:64:e5:08:18:91:
d4:2c:0f:f7:2c:22:fc:24:71:10:f4:cd:d0:c6:58:
5a:97:a6:aa:c6:2a:e7:67:23:67:af:05:c5:23:84:
fe:21:a9:07:77:cd:2a:99:53:d7:a2:ee:ff:81:59:
1f:47:52:c1:37:aa:3d:b7:90:d0:55:9e:2d:ad:5a:
6b:5c:13:03:a3:48:06:55:ba:6b:a6:38:b8:9a:dd:
e7:f1:de:c6:27:ba:93:b1:3a:4c:75:c7:8e:2f:c7:
dc:5a:49:a0:ac:fa:71:2e:70:e4:df:37:b0:7b:80:
76:71:15:89:00:2a:96:a5:77:6e:51:b5:a6:ed:2d:
6f:10:07:03:3a:b5:bb:64:26:52:de:24:01:36:d3:
d3:27:e1:8a:59:c4:02:a2:3b:8e:00:c2:b6:b4:ad:
3e:5b:9a:64:0f:68:9a:c2:26:c1:c5:0f:07:0f:17:
17:40:4e:a4:fb:43:3f:e1:37:35:80:ac:90:d6:01:
7b:91:83:de:2e:97:96:b5:65:2f:5c:43:43:d4:ff:
be:d7:20:c2:ba:6c:bf:0a:66:07:c2:c1:dc:a5:0c:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D3:11:CB:E0:D2:5B:E0:EE:F4:BD:C2:B4:35:AF:A7:97:1A:29:CC
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/cdMRy-DSW-Du9L3CtDWvp5caKcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d4:f3:42:4d:7f:24:04:dc:9c:87:4d:92:7d:78:b5:3b:93:
da:9d:0f:e7:f0:d7:62:4a:8e:34:57:eb:ea:a2:cf:46:03:b2:
3a:8d:5b:94:f5:53:00:59:76:de:ff:9c:7f:d7:d8:e5:cd:0b:
ff:01:7b:d8:85:b4:4f:e2:de:44:fb:42:8d:a0:94:bc:8e:63:
2a:bd:4a:29:14:97:a8:b8:e0:e7:a1:13:17:31:ab:28:71:4a:
42:b7:2f:51:81:8d:fa:63:b6:1e:82:bb:97:d2:16:31:53:c6:
0a:9c:a0:e0:a2:51:0c:cd:5d:55:5f:ea:14:48:a7:38:18:f4:
1c:2f:5c:ba:6a:51:1e:04:5f:3c:9a:08:9c:d8:1b:46:51:79:
d8:26:7f:f7:e0:30:f5:36:d3:b9:6e:6d:98:67:78:60:d1:78:
93:a0:3b:86:a4:1e:fe:be:7b:4f:a7:86:ae:23:f0:d5:f6:b4:
7e:0d:87:90:f1:44:11:ac:b5:8b:19:1f:ea:a3:73:67:8c:07:
6c:81:89:2a:77:eb:f1:dc:de:1c:5c:c4:3f:cd:ba:17:f9:d5:
97:b9:81:62:c5:f2:6e:2e:a8:26:e6:36:08:d2:ea:7f:1f:ad:
d7:c7:d6:ee:81:12:94:b9:7b:e6:84:a2:49:a0:78:5d:3d:63:
e8:2a:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:23:52 2026 by rpki-client