Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/MD01cmZnnlwsixl4zb4iNIv80Do.roa
File: MD01cmZnnlwsixl4zb4iNIv80Do.roa (raw, json)
Hash identifier: xZkexBZwyclrdYp0+CSreOyRAK1MNsO9cG6O13KYEhQ=
Subject key identifier: 30:3D:35:72:66:67:9E:5C:2C:8B:19:78:CD:BE:22:34:8B:FC:D0:3A
Certificate issuer: /CN=731aff1ad98f5b1a58c0ed7bf5954d46ac69a97d
Certificate serial: 019F2368FA846282C6E68F58D23FB58899C5
Authority key identifier: 73:1A:FF:1A:D9:8F:5B:1A:58:C0:ED:7B:F5:95:4D:46:AC:69:A9:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/MD01cmZnnlwsixl4zb4iNIv80Do.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 185.174.144.0/22 maxlen: 22
185.174.145.0/24 maxlen: 24
185.174.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fa:84:62:82:c6:e6:8f:58:d2:3f:b5:88:99:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731aff1ad98f5b1a58c0ed7bf5954d46ac69a97d
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=303d357266679e5c2c8b1978cdbe22348bfcd03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:84:63:93:6b:2a:3f:58:20:d5:16:59:16:
7c:a7:41:8f:81:41:85:5f:10:60:6e:34:6f:6b:2d:
f7:5c:d0:0a:04:c0:f6:14:f7:3e:7a:36:ae:57:3a:
17:57:ab:d8:58:59:e4:d6:4d:e0:7b:c5:2d:40:bb:
f5:9c:58:08:ab:f0:71:d2:93:1b:85:7e:d4:83:9a:
f3:b8:c9:28:24:ca:96:c8:4a:7f:40:2e:9b:c6:a8:
42:ab:08:dc:df:b7:82:d2:ca:e3:ae:91:67:c2:ec:
d7:3e:26:0d:95:b5:32:24:2a:53:91:69:ff:1c:15:
86:1f:de:e0:96:a0:64:08:f4:a9:95:ae:c7:11:44:
21:f6:83:15:00:57:03:3a:00:96:ce:da:f1:cf:85:
55:b9:e8:7f:24:64:a3:13:b4:91:c8:aa:a3:0c:55:
9d:7b:04:3a:b6:a4:98:7d:7e:1c:2c:dc:ff:cc:80:
21:5e:b2:38:c7:28:69:25:44:e4:55:5e:9d:de:f3:
49:82:9a:4b:d9:e6:f4:92:90:d1:4b:3f:00:bb:4a:
5c:6c:88:c0:00:2d:e3:10:17:7f:2f:36:fa:0c:31:
1b:21:52:77:f1:7f:4b:e4:9e:bf:49:5d:c8:36:36:
7e:92:97:55:86:80:6f:5d:22:3b:c9:0c:86:f6:e8:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3D:35:72:66:67:9E:5C:2C:8B:19:78:CD:BE:22:34:8B:FC:D0:3A
X509v3 Authority Key Identifier:
keyid:73:1A:FF:1A:D9:8F:5B:1A:58:C0:ED:7B:F5:95:4D:46:AC:69:A9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/MD01cmZnnlwsixl4zb4iNIv80Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.144.0/22
Signature Algorithm: sha256WithRSAEncryption
26:41:d6:6b:40:fc:d2:af:a2:5f:39:a1:cc:9e:33:db:07:67:
b3:40:83:ea:2a:13:74:78:6b:ef:d1:92:d9:65:1e:c0:06:4b:
48:35:87:3b:2a:ff:89:5e:bb:fd:16:97:c5:65:19:f0:59:d8:
4a:50:7c:db:c5:de:f7:75:33:de:fa:75:21:a0:03:08:da:46:
44:54:f8:3e:75:8b:a6:ad:da:7c:da:ee:e2:8e:d9:77:c8:4d:
a3:3a:6e:7c:e0:62:45:de:70:c5:d9:c3:e5:1e:18:d7:a8:97:
5c:b8:71:bd:d6:2c:de:e9:85:1b:b3:7a:61:ce:ec:33:d6:5b:
22:9a:1c:f0:ba:99:bc:96:20:9e:19:ec:6c:65:d5:b3:9c:a5:
76:5d:0e:ed:f1:8c:b2:2f:11:37:f8:84:ba:8f:db:7f:f8:91:
b9:f3:df:bc:4e:00:c7:47:7f:b5:cb:0f:9a:c3:c6:dd:be:00:
df:90:26:a8:2c:12:3c:b0:23:da:1d:7c:ad:5f:1d:48:53:66:
a6:35:97:e5:81:c8:bc:88:45:84:8f:65:6d:39:11:c1:be:e9:
24:57:c5:1a:60:93:69:bc:ee:68:88:49:2f:ed:7e:74:94:d7:
d9:ad:32:35:1f:f2:3b:52:e4:75:00:ba:24:51:6a:94:8a:d0:
62:31:c6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:00 2026 by rpki-client