Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/CxgA9YiPBMsYb9XxKTCOPIVLzko.roa
File: CxgA9YiPBMsYb9XxKTCOPIVLzko.roa (raw, json)
Hash identifier: xaQA1gSzqeGm1Aeoz0nTDqTIJv4JtlEhyqTdHLQ4lc0=
Subject key identifier: 0B:18:00:F5:88:8F:04:CB:18:6F:D5:F1:29:30:8E:3C:85:4B:CE:4A
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01A03335EF49E84D83B398BBD79F519B4749
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/CxgA9YiPBMsYb9XxKTCOPIVLzko.roa
Signing time: Mon 24 Aug 2026 09:59:27 +0000
ROA not before: Mon 24 Aug 2026 09:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219207
IP address blocks: 2a05:1086::/32 maxlen: 48
2a0c:e641::/32 maxlen: 48
2a0d:2681::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:35:ef:49:e8:4d:83:b3:98:bb:d7:9f:51:9b:47:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Aug 24 09:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b1800f5888f04cb186fd5f129308e3c854bce4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e5:8f:5b:3d:31:b4:07:cb:35:bb:fe:9e:5f:
23:6d:b2:4a:77:bb:82:02:4f:8d:57:85:b5:67:af:
e2:ed:46:31:63:f0:2b:19:8f:31:d1:6d:16:50:7a:
9b:ce:17:68:72:dd:52:ff:ba:71:44:6c:33:71:6f:
fe:e2:0d:d5:b3:a6:ee:7a:37:a2:91:16:bb:c0:9d:
e3:71:da:3d:90:67:4a:d0:3c:e9:62:9c:96:0e:c4:
12:9b:f5:a3:bf:c1:b7:fe:03:d5:1e:11:db:70:c4:
bb:ff:0f:eb:56:e3:a0:f8:61:e7:e0:56:39:68:39:
ef:54:45:c8:ca:96:6b:00:04:94:bd:e7:75:c2:b9:
10:62:45:42:26:69:c7:76:88:f7:f2:84:c0:f1:af:
6a:c9:b0:b7:9e:0d:f1:87:fc:fa:e7:2b:0f:0f:29:
85:c2:d0:01:6d:6a:5c:cc:33:50:32:4d:5a:36:c9:
a7:6d:72:ad:f6:5a:70:b7:10:81:c2:ec:59:24:2d:
16:51:a7:66:30:39:09:68:36:01:1a:c1:6a:37:c1:
4c:17:98:11:2d:c0:0a:6a:07:1d:28:e0:18:e9:c7:
66:e1:6a:2d:be:12:67:80:40:00:71:04:d7:f7:d0:
e9:c0:52:b1:a9:f7:a1:9f:f7:48:7f:7b:eb:0e:ee:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:00:F5:88:8F:04:CB:18:6F:D5:F1:29:30:8E:3C:85:4B:CE:4A
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/CxgA9YiPBMsYb9XxKTCOPIVLzko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1086::/32
2a0c:e641::/32
2a0d:2681::/32
Signature Algorithm: sha256WithRSAEncryption
6c:65:bb:32:ba:48:2d:85:a5:41:9b:5d:e9:bf:f5:8c:a8:d1:
91:8c:2a:05:bc:79:33:ee:d2:a0:a4:35:c9:3d:ab:11:c8:59:
e0:a9:d1:7a:7b:b3:12:8d:3f:57:61:de:ee:ee:f8:e0:f9:c1:
99:33:8d:25:6f:31:80:84:ee:dc:c7:da:92:52:d8:8a:d4:db:
22:eb:aa:75:1b:39:1e:c0:54:c3:3f:8a:96:87:3b:0a:fc:3f:
fd:37:84:14:44:92:a1:57:88:5c:be:b3:d2:07:4d:7a:99:e1:
e4:81:2c:a8:d5:d5:01:82:64:64:51:43:14:f0:ec:85:8f:fe:
24:56:a4:0a:83:61:90:91:6f:15:c3:bb:cc:0b:e7:9a:68:74:
07:a7:0a:d3:7d:ac:62:db:61:ee:e7:d6:f0:20:b8:b3:ad:7a:
64:21:ad:81:10:89:91:96:09:bd:e3:a3:60:24:71:b6:89:e7:
44:fb:34:c0:3f:4b:48:a9:1e:9b:3a:8b:82:e7:27:8a:c3:fb:
d3:5f:5a:b9:61:d6:21:d0:bc:27:c3:6d:ac:fb:fd:0d:00:f2:
fe:7c:54:4b:e8:95:d8:79:aa:4b:35:33:cb:39:ce:00:19:24:
1a:40:0c:86:0f:39:d8:e4:a5:50:9e:25:7e:88:3a:16:7f:0d:
13:5d:bf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:06 2026 by rpki-client