Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/CxapUH8XVVec3lS0Cg0coCY6Qgc.roa
File: CxapUH8XVVec3lS0Cg0coCY6Qgc.roa (raw, json)
Hash identifier: KpO1kPmmOH+sNqrFN8XQ7Qyy163B9gWQQIFfTO0U4as=
Subject key identifier: 0B:16:A9:50:7F:17:55:57:9C:DE:54:B4:0A:0D:1C:A0:26:3A:42:07
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019A1B559DF5477E010B175C33DACE4E01AD
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/CxapUH8XVVec3lS0Cg0coCY6Qgc.roa
Signing time: Sat 25 Oct 2025 12:26:27 +0000
ROA not before: Sat 25 Oct 2025 12:26:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.56.26.0/24 maxlen: 24
109.122.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:55:9d:f5:47:7e:01:0b:17:5c:33:da:ce:4e:01:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Oct 25 12:26:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b16a9507f1755579cde54b40a0d1ca0263a4207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ca:68:89:82:18:61:e8:9d:0a:72:b7:d1:66:
ab:90:74:f9:33:5f:20:2e:49:b6:b1:19:bd:15:2a:
fc:f0:9c:72:5a:a7:91:34:23:3f:d4:83:61:3e:92:
aa:f0:b3:0d:72:f9:af:31:0c:d3:87:ad:42:cf:56:
dd:87:64:d2:9b:de:10:28:c5:d1:e8:e3:df:ee:13:
7a:f1:8a:cd:be:d5:92:03:1d:18:22:80:6c:1e:a4:
da:cf:b9:b7:c8:de:4a:24:82:e2:0f:c6:f4:28:0d:
32:7b:c7:5d:e9:44:5a:4c:9a:40:15:a7:50:67:02:
a9:d5:80:ad:d8:d0:6f:d0:c4:7c:d2:b5:4a:d5:99:
15:83:08:b0:ae:69:95:72:29:b1:7f:f9:8f:05:63:
36:89:3c:2b:31:7c:5c:0e:26:45:38:85:1f:4d:c9:
72:29:54:69:1a:8b:bc:65:9c:1a:97:3b:0e:2d:67:
2f:f6:9b:ae:04:97:6f:a3:8e:aa:b9:60:81:7b:79:
5c:e3:49:35:13:3d:9b:cc:d1:d1:e6:17:ec:6b:bd:
80:a9:3d:79:1c:76:4f:e9:92:33:c1:1f:cb:e1:ea:
9e:e4:80:a9:88:26:8b:54:68:46:bf:db:c1:46:ff:
1b:f9:79:55:8d:ee:89:e6:55:1a:44:1c:44:71:71:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:16:A9:50:7F:17:55:57:9C:DE:54:B4:0A:0D:1C:A0:26:3A:42:07
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/CxapUH8XVVec3lS0Cg0coCY6Qgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.26.0/24
109.122.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:30:a7:94:67:68:77:e3:d1:ea:42:e1:ac:d3:7c:b1:2b:0e:
4a:a7:69:25:7b:32:70:af:ba:d3:ad:fe:19:04:15:33:17:b7:
93:33:a6:8f:2f:d4:58:ac:9e:a2:2f:f4:9b:29:02:1a:bc:4a:
36:65:91:88:56:c2:0b:86:a4:a3:d1:2d:34:02:93:35:91:db:
ab:7d:91:91:23:dd:aa:c6:10:e8:d9:9b:82:01:57:7a:1a:fe:
b8:89:a5:35:bd:9d:8f:31:03:f3:6e:1e:cf:cf:37:35:1f:0f:
1b:55:83:76:5f:63:a0:b5:bc:02:b0:6a:05:14:42:71:b1:4d:
47:1f:8d:5f:7e:fc:f4:2c:80:fd:84:4d:12:7c:76:e8:b8:73:
f1:6d:a6:6a:ae:b2:b0:29:d7:5b:1f:b7:91:f4:8d:42:e4:6b:
7c:01:f9:3b:ab:76:89:d6:2d:d7:9f:86:c1:68:f9:fb:9e:a2:
e2:67:58:23:27:cf:53:9b:7d:be:76:b4:72:41:57:22:04:b3:
f5:49:ad:e9:38:95:a9:5e:af:52:47:24:1d:bd:5b:96:be:b9:
17:cb:46:4c:53:f7:c7:6b:49:b8:3a:5c:d6:a5:fa:9c:33:b0:
f7:d5:f2:54:cf:5c:65:fc:15:70:f3:50:7f:39:a0:1c:0c:eb:
da:89:79:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:38 2025 by rpki-client