Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cOMhRxduLw18TIe2EJANKourNbc.roa
File: cOMhRxduLw18TIe2EJANKourNbc.roa (raw, json)
Hash identifier: vRamlKR5R5SmfC3d0sMnuMWhFKCo/1NfKoqnzL94OGM=
Subject key identifier: 70:E3:21:47:17:6E:2F:0D:7C:4C:87:B6:10:90:0D:2A:8B:AB:35:B7
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 019D053E1DD67D510336DC84EFF3F34FBB28
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cOMhRxduLw18TIe2EJANKourNbc.roa
Signing time: Thu 19 Mar 2026 08:37:30 +0000
ROA not before: Thu 19 Mar 2026 08:37:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209697
IP address blocks: 141.226.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:3e:1d:d6:7d:51:03:36:dc:84:ef:f3:f3:4f:bb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Mar 19 08:37:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70e32147176e2f0d7c4c87b610900d2a8bab35b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:f6:9e:33:5b:98:e9:b7:26:da:c2:46:ec:
16:81:43:69:37:27:a7:8a:93:0f:3f:4a:32:ca:fe:
f6:de:e6:4e:3c:cb:0f:46:98:05:a4:f0:29:a7:08:
9c:ee:12:3a:77:13:69:92:a7:84:b7:4c:a2:98:41:
15:4f:d1:73:a2:3c:50:b9:b5:1a:4f:3c:1a:14:d8:
a7:64:2d:ad:50:d6:8a:b4:f5:4b:12:41:59:f5:fc:
65:fc:45:6a:ff:ba:b5:98:45:c9:f7:1d:b2:eb:e3:
d9:12:ca:7f:33:03:67:a9:28:f1:95:7b:52:a5:02:
01:e8:88:ee:d9:7e:b4:0b:b0:28:93:f4:78:cd:59:
17:db:a5:72:92:82:9a:0b:9f:95:68:ec:11:fe:e4:
a8:2b:e1:49:3d:b2:b0:43:4b:1e:a6:63:49:b7:1a:
ae:11:04:20:e6:0b:5a:64:40:7b:20:89:53:76:de:
6c:a5:8e:bb:79:2c:cd:09:78:aa:58:18:56:ff:6c:
4d:60:8c:5b:af:6f:a7:bf:b0:a7:3b:6d:c4:0e:84:
c4:be:68:df:cb:3d:d2:63:1a:b1:dd:79:95:b5:3b:
de:e1:96:53:40:e4:a6:05:7d:82:59:35:17:0b:f6:
96:fd:73:5d:40:79:ea:23:5f:67:76:35:b5:68:9c:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E3:21:47:17:6E:2F:0D:7C:4C:87:B6:10:90:0D:2A:8B:AB:35:B7
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cOMhRxduLw18TIe2EJANKourNbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.243.0/24
Signature Algorithm: sha256WithRSAEncryption
82:71:24:ee:29:d4:2c:63:7a:b5:47:46:47:13:69:d9:b7:b4:
7e:f3:f2:9d:3a:5f:62:d6:99:e2:e2:ed:2d:0e:8d:e3:02:b2:
47:f5:ca:7f:a7:3b:6c:eb:ca:8b:1d:28:d8:a1:db:8a:90:ae:
d9:6c:c3:af:16:1c:4e:ef:1f:60:fe:38:04:8d:6c:00:f6:06:
8f:dc:e2:d7:24:fa:50:81:e2:fa:48:b0:fa:46:5f:95:dc:f7:
c4:02:ad:4b:5d:8c:74:c0:4b:73:39:3f:61:3d:20:f2:bd:68:
a2:ce:b0:da:3a:28:c7:58:a1:68:9a:89:99:83:a0:dd:d0:ec:
00:21:97:03:d1:35:ef:15:62:ef:4b:55:37:88:eb:f9:94:73:
7a:ac:15:4f:04:06:82:7c:13:fb:6a:11:ea:d1:45:a9:bb:7b:
4f:4d:a1:4b:cd:be:ea:42:32:02:fe:c8:e7:54:21:41:b7:ce:
f6:bd:ae:57:c2:d2:3e:7d:0d:8f:be:8a:43:27:a9:e2:0d:c8:
f2:6f:fe:5b:a8:0e:75:66:61:7b:aa:c9:9e:8d:0f:6d:42:e5:
17:3a:ca:dc:9c:0d:76:ec:b4:fe:99:d8:2b:d3:43:db:89:cc:
c9:f5:89:13:eb:51:45:1f:58:03:e5:8e:52:ab:99:11:3e:e0:
4e:6f:f7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 15:55:23 2026 by rpki-client