Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/CUXMOi0IXV5bW3K4kmJPULsGcio.roa
File: CUXMOi0IXV5bW3K4kmJPULsGcio.roa (raw, json)
Hash identifier: Mv4bPFdiPdimfDYJhuDWjbrxgg1jJvBn2c229x2l9Yw=
Subject key identifier: 09:45:CC:3A:2D:08:5D:5E:5B:5B:72:B8:92:62:4F:50:BB:06:72:2A
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 0198E67A2D953FD89B25C10C548FFC92F898
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/CUXMOi0IXV5bW3K4kmJPULsGcio.roa
Signing time: Tue 26 Aug 2025 13:03:43 +0000
ROA not before: Tue 26 Aug 2025 13:03:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 159.195.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:7a:2d:95:3f:d8:9b:25:c1:0c:54:8f:fc:92:f8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Aug 26 13:03:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0945cc3a2d085d5e5b5b72b892624f50bb06722a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1d:d5:d8:0d:9b:35:4d:36:07:1a:07:d3:0c:
fa:95:d6:44:54:51:b3:df:f4:32:3f:5f:b1:ed:63:
3c:47:93:7d:a9:98:0f:a8:2a:53:e7:0f:0b:88:9c:
87:5d:f0:64:54:4a:59:49:23:27:a1:4c:9f:11:64:
15:51:60:57:55:21:d3:88:42:de:99:47:fb:92:08:
e3:a5:5d:e7:dd:35:60:f9:cc:0d:a0:fa:6e:a6:ba:
cb:97:e4:8d:5e:75:15:1f:31:9e:67:25:06:c3:5c:
50:eb:1d:ac:63:7a:39:d3:28:e5:63:68:bf:49:91:
db:79:7a:c0:8b:b8:e7:8a:0b:f7:cf:e2:5a:02:26:
f1:36:15:a5:95:48:83:fc:d2:e1:04:3e:f9:1c:9a:
8d:b6:84:aa:58:41:fc:72:b7:b9:b7:8a:a1:44:b2:
dd:80:9e:9c:5e:04:d5:c2:a4:15:e5:cc:a4:e4:a4:
26:ab:ea:59:ac:1c:59:36:d6:5e:c8:8a:ca:de:1a:
bd:e3:5e:7a:7b:0b:cd:58:03:14:f6:28:1a:7e:be:
a9:e1:fa:23:2c:4b:9f:21:e1:70:19:49:ec:f6:11:
d7:40:08:fc:6f:77:e9:2f:89:78:12:f0:f3:55:a3:
7a:97:cf:c3:c5:78:37:a4:14:2e:2e:d9:19:8c:9e:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:45:CC:3A:2D:08:5D:5E:5B:5B:72:B8:92:62:4F:50:BB:06:72:2A
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/CUXMOi0IXV5bW3K4kmJPULsGcio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.195.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:ef:4c:86:d4:8d:05:91:4e:4d:de:70:2a:58:fa:78:66:21:
03:e7:be:8f:d4:75:5e:1a:64:8f:1b:3f:4f:83:84:64:99:7e:
44:5d:1b:6a:2a:38:fe:72:dc:0c:19:64:80:5c:28:dc:74:ff:
3f:86:85:71:08:02:2e:7c:5c:12:b7:87:10:4f:91:d3:06:38:
37:ca:8e:75:55:ef:9f:6d:17:41:f3:48:30:03:52:78:08:96:
55:6d:e6:15:21:9a:0b:97:c8:25:3e:e4:46:f2:5d:8f:92:93:
ae:1a:19:ee:da:d7:4b:3b:82:f7:5f:49:99:b6:3d:3a:cf:20:
9a:29:19:05:90:4c:7b:4a:13:68:6f:41:20:c6:c7:79:39:e5:
91:3d:26:b3:43:d8:54:b9:dd:f9:ec:bb:80:b0:b1:75:f0:06:
35:31:4b:23:57:ac:33:21:c8:02:64:3b:62:f7:cb:9c:8a:18:
05:12:14:ac:e6:85:1d:14:92:46:88:6e:e7:f8:fc:75:e1:d5:
f7:85:d6:8f:9b:b8:35:3e:04:e6:ca:90:7a:b7:33:7c:21:bb:
c7:e5:72:f9:78:43:6a:ca:97:01:cf:c8:7c:c6:2e:dc:c9:b0:
b1:4f:eb:31:9e:8c:02:97:4a:57:43:ad:bf:c8:2f:2a:9d:5b:
35:f0:be:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 16:56:15 2025 by rpki-client