Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/CpwJHamX3s4jWnYcAa8QCmKY4rg.roa
File: CpwJHamX3s4jWnYcAa8QCmKY4rg.roa (raw, json)
Hash identifier: 89U2iRmH/tQ9pJ58ExZmeppXf1oLInBv/nRgnRGClC8=
Subject key identifier: 0A:9C:09:1D:A9:97:DE:CE:23:5A:76:1C:01:AF:10:0A:62:98:E2:B8
Certificate issuer: /CN=731aff1ad98f5b1a58c0ed7bf5954d46ac69a97d
Certificate serial: 019F2368FCA6422EF00EB10D39484C930034
Authority key identifier: 73:1A:FF:1A:D9:8F:5B:1A:58:C0:ED:7B:F5:95:4D:46:AC:69:A9:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/CpwJHamX3s4jWnYcAa8QCmKY4rg.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397477
IP address blocks: 185.174.144.0/24 maxlen: 24
185.174.146.0/24 maxlen: 24
185.174.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fc:a6:42:2e:f0:0e:b1:0d:39:48:4c:93:00:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731aff1ad98f5b1a58c0ed7bf5954d46ac69a97d
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a9c091da997dece235a761c01af100a6298e2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:93:22:86:af:53:cf:cc:0d:c2:a1:90:a3:
c2:12:72:84:1f:1d:a9:cf:87:3a:cc:a1:ca:a9:7b:
8e:0c:06:86:08:93:da:c0:59:b5:55:1c:f3:15:a0:
58:d0:e1:42:6b:26:07:f0:d7:1d:f5:cc:cb:8c:6a:
3e:c5:54:d1:d5:85:b0:8b:3e:20:3d:de:27:fa:0d:
c3:e2:6f:b9:38:d9:44:9d:2c:2b:a1:ce:4c:9a:2f:
6b:55:d7:d0:fc:46:20:fb:61:c5:b9:98:2e:f8:57:
35:f3:b1:a8:d2:b6:6e:8e:0a:1b:9e:e4:41:8b:a9:
77:10:95:09:e5:bc:2e:64:82:6d:f7:f1:81:3e:f0:
3c:ac:ea:7f:98:2e:38:2c:be:37:44:b9:97:de:89:
dd:67:4c:76:ca:d0:8d:dd:90:f0:98:4f:c6:0b:ff:
14:5e:97:8a:2c:d7:d1:38:25:45:78:94:91:2e:0f:
07:2b:12:1b:6e:dd:3b:7b:3a:33:0a:c0:43:3f:6d:
81:74:31:e5:02:6e:1f:b8:db:a5:5d:1b:71:f7:22:
f0:f9:60:a0:40:f2:eb:3d:82:e5:6f:c6:a1:59:d0:
75:f9:a3:2e:3c:2d:50:45:8e:fc:4f:72:6e:b8:31:
53:b4:2b:a1:c3:e5:97:de:23:20:35:46:47:79:58:
69:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:09:1D:A9:97:DE:CE:23:5A:76:1C:01:AF:10:0A:62:98:E2:B8
X509v3 Authority Key Identifier:
keyid:73:1A:FF:1A:D9:8F:5B:1A:58:C0:ED:7B:F5:95:4D:46:AC:69:A9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/CpwJHamX3s4jWnYcAa8QCmKY4rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.144.0/24
185.174.146.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:dd:5b:29:e9:d1:98:96:a0:90:7b:6f:9d:0f:9d:42:2d:bd:
08:12:f8:ac:54:73:fe:b1:70:93:fa:b9:83:be:63:ee:12:f5:
d0:e9:c0:cd:81:84:fd:3e:e6:19:7b:9d:a9:64:a4:e2:e7:18:
f1:5d:3f:3c:ed:08:f0:6e:10:58:97:ae:03:e5:94:af:24:ec:
c3:1a:f8:f2:a8:13:5f:95:aa:ec:d9:c9:2c:e3:9d:d7:75:2e:
c6:89:ad:25:3f:37:8d:86:76:ac:1c:a1:ac:6d:d7:9b:af:2c:
a2:82:17:26:eb:61:00:7f:09:7e:cc:98:60:f4:e1:b1:5f:47:
0e:9b:1a:d4:ed:ad:94:a7:93:02:79:e2:cb:b3:db:d8:74:b3:
43:ed:22:64:6a:f6:56:51:98:05:29:a5:d2:2b:e0:5e:10:df:
ec:4f:cf:02:69:77:95:e3:45:f1:6a:fc:b4:ff:d6:d9:32:a4:
a0:13:f0:5f:4f:36:75:6e:6b:92:71:74:04:3c:af:9f:03:ec:
0b:1d:83:ad:83:72:b1:88:41:36:8c:12:fa:89:30:c7:bd:20:
a7:b6:66:9c:42:75:1c:75:0a:36:9e:7b:3c:3d:28:64:5d:3c:
06:cd:3c:f7:a6:f5:77:a9:f9:32:12:27:1a:a5:b6:d0:14:0a:
53:c1:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:13:54 2026 by rpki-client