Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/Cxh4PhTNcstArwRpLICkDHSAnkE.roa
File: Cxh4PhTNcstArwRpLICkDHSAnkE.roa (raw, json)
Hash identifier: OJ/6l8LcGnGNKOGvKKW53QO+Xacf4TO/xDXAZE6mzXA=
Subject key identifier: 0B:18:78:3E:14:CD:72:CB:40:AF:04:69:2C:80:A4:0C:74:80:9E:41
Certificate issuer: /CN=1a767677a33d3a799f364384296df46a91d3927f
Certificate serial: 01A103F4B319CCFDAF2AAEEDF015D77350E6
Authority key identifier: 1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/Cxh4PhTNcstArwRpLICkDHSAnkE.roa
Signing time: Sat 03 Oct 2026 22:48:50 +0000
ROA not before: Sat 03 Oct 2026 22:48:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219115
IP address blocks: 2a0c:6d87:e9a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:f4:b3:19:cc:fd:af:2a:ae:ed:f0:15:d7:73:50:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767677a33d3a799f364384296df46a91d3927f
Validity
Not Before: Oct 3 22:48:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b18783e14cd72cb40af04692c80a40c74809e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:c8:02:08:fb:3f:a5:97:d6:fa:51:8c:be:
f0:7d:ca:bb:e8:c5:2a:db:72:42:8f:4d:34:db:00:
00:f4:c3:94:4d:40:66:af:90:ca:0b:3c:84:36:f3:
ad:c3:a8:6b:1f:1b:58:80:4e:07:f9:92:83:61:39:
53:26:74:3b:1e:e8:14:f6:e3:e7:0f:29:44:d5:a8:
01:29:17:7e:04:89:f4:13:8a:05:35:fa:03:93:96:
05:fd:8c:5a:61:48:18:a5:61:29:a1:10:c0:62:00:
f0:4d:2a:10:0d:4d:26:49:63:aa:f5:e7:9b:d1:53:
1f:57:aa:8e:07:86:f5:77:48:52:c4:1f:e3:44:09:
01:f1:f1:da:94:6b:93:49:e9:f6:99:77:6f:6d:2e:
94:55:de:f9:66:1f:12:e2:06:e3:56:c3:e3:71:f2:
c2:2e:87:5f:95:60:08:0a:f5:25:79:b0:0d:b1:87:
0b:d2:79:92:68:29:eb:88:86:70:3b:e0:6f:c7:1a:
b6:1e:05:d2:f5:e2:15:f2:f7:2a:fa:11:46:e5:73:
62:01:a7:2a:61:df:ed:d2:77:46:91:c7:48:80:6e:
6d:1f:2b:ed:d5:bb:68:c9:8a:46:90:3a:55:13:7a:
5d:1e:ad:84:fd:48:ef:27:29:23:f4:e8:3d:52:cc:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:78:3E:14:CD:72:CB:40:AF:04:69:2C:80:A4:0C:74:80:9E:41
X509v3 Authority Key Identifier:
keyid:1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/Cxh4PhTNcstArwRpLICkDHSAnkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6d87:e9a0::/44
Signature Algorithm: sha256WithRSAEncryption
69:4b:ba:03:11:a6:23:66:10:d3:52:cd:e7:31:54:e4:2e:99:
4a:43:09:97:fe:bf:86:a8:c4:b8:0f:e1:27:c9:7f:bd:89:1a:
91:89:1e:d1:0f:ef:02:63:5d:d2:8a:73:07:3f:00:e0:92:0b:
fb:33:b0:a0:26:55:d7:c1:f9:8c:d3:00:b4:3a:89:d5:f9:34:
cd:f8:25:2d:ce:2c:91:44:b8:ed:a3:99:8f:9a:e8:87:51:d5:
16:78:2a:9e:c7:cb:8c:9b:23:a0:6b:ba:a6:08:ad:53:76:10:
f6:be:71:3b:96:b8:44:47:35:da:d8:d8:91:92:16:1a:d6:8b:
c6:b7:b2:d8:3d:89:1a:ab:d4:08:1e:d8:37:f7:ee:c0:15:e0:
e7:e0:9c:d3:a0:71:37:c4:4d:7b:0a:72:9b:fd:cd:70:07:18:
54:e1:4d:ca:ff:b4:19:bd:b6:df:73:f9:b0:32:38:b2:97:46:
ee:b0:2f:61:fc:4e:35:43:61:15:60:5c:a6:bf:cc:cc:f5:24:
31:0d:bb:66:2e:a8:83:fe:1f:b5:17:79:f3:99:33:58:31:4a:
79:ab:cf:e0:86:af:5a:2e:05:e9:60:82:c1:29:94:5d:5f:97:
44:f8:2d:86:f0:d8:ae:5e:2b:77:e5:85:5a:9e:0d:ea:a7:a5:
92:6c:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:27 2026 by rpki-client