Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CWrsrHJw4tEJ3ewrNohRHcqBjHc.roa
File: CWrsrHJw4tEJ3ewrNohRHcqBjHc.roa (raw, json)
Hash identifier: nVx6CyUo3eyvXpG5L8W43+Kyz6uFTfJ9Hu2lPDQTP7I=
Subject key identifier: 09:6A:EC:AC:72:70:E2:D1:09:DD:EC:2B:36:88:51:1D:CA:81:8C:77
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019F6B27A0F4969B124E335F9141F80C7D3C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CWrsrHJw4tEJ3ewrNohRHcqBjHc.roa
Signing time: Thu 16 Jul 2026 13:39:46 +0000
ROA not before: Thu 16 Jul 2026 13:39:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 45.8.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:27:a0:f4:96:9b:12:4e:33:5f:91:41:f8:0c:7d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 16 13:39:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=096aecac7270e2d109ddec2b3688511dca818c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:29:75:09:a3:ca:35:01:59:3c:ab:a1:2f:ab:
8a:82:f5:db:78:c3:dc:72:12:fe:1a:48:37:5e:18:
97:31:df:e1:f7:d2:a0:cd:de:de:ca:ae:d8:23:b0:
0f:3c:4b:5d:d5:83:37:02:dc:e3:56:50:c6:66:21:
a4:2c:27:7f:c1:b2:97:55:82:27:19:e5:b8:ba:88:
39:0d:b4:20:c9:2b:cb:b8:ea:3c:6a:b4:56:8a:57:
ae:38:5f:a8:3f:e5:8a:4d:57:be:45:76:c0:26:5d:
06:aa:16:7c:9d:0e:ee:95:b8:ee:c0:bd:ae:35:f1:
0c:d5:19:99:79:2c:5b:4d:0d:59:3a:72:85:5c:08:
fc:6a:46:56:e2:7f:ec:91:e7:f4:22:af:a0:b2:1a:
07:56:f3:52:36:e2:0d:86:d7:bc:83:3a:10:58:8b:
89:1c:3d:b7:19:1f:05:37:a5:c6:d8:33:b0:3e:eb:
35:ce:73:03:59:08:40:5f:38:44:00:0c:25:b4:ad:
b1:b5:7d:5c:96:d9:2b:f1:c4:72:88:43:d9:6b:61:
2a:31:93:ce:58:d7:5f:3e:68:6c:21:51:56:23:37:
16:0d:71:1d:3b:5c:69:16:ac:20:10:8a:a1:b9:88:
ed:8d:72:46:2d:d9:f5:b3:19:7f:2a:db:e8:0e:72:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6A:EC:AC:72:70:E2:D1:09:DD:EC:2B:36:88:51:1D:CA:81:8C:77
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CWrsrHJw4tEJ3ewrNohRHcqBjHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:bb:88:7c:9a:76:9d:56:ee:58:04:ac:f8:3a:4c:d4:72:c7:
3a:a2:06:8f:15:f7:ca:c1:37:b1:92:b6:ad:74:97:a8:95:0f:
7f:9f:94:4e:63:ca:56:76:e2:32:d3:0f:1a:d1:ec:e3:b1:2d:
d9:3c:49:af:46:df:18:90:9b:ee:8a:bd:a9:32:91:5f:8d:34:
6c:a0:a7:09:d7:f1:43:bc:e7:c1:61:b3:fc:cb:1e:8a:fa:ba:
ce:e1:de:b6:6f:19:18:49:16:ac:b4:59:8c:a1:e2:3d:b2:fb:
82:41:27:70:5a:81:4c:8e:3a:8d:19:78:7f:8e:d3:a9:0c:ab:
34:9d:d9:00:98:41:4c:ad:ec:92:3b:57:f5:73:42:02:fa:40:
ff:93:18:0d:39:09:d0:4b:0f:36:3c:8a:f3:88:6a:0e:37:1f:
b6:de:3f:87:6d:a1:02:d0:6d:28:a4:0e:da:5d:05:e2:ec:51:
a9:5d:d7:ca:46:54:dd:1c:28:5b:74:6b:7e:67:d2:1f:f1:40:
2f:e3:52:2b:b4:69:60:75:32:ea:3d:b2:ed:9b:1f:3d:01:12:
9f:08:47:37:58:8f:9a:fc:31:be:8e:44:47:0f:86:ef:f2:58:
6d:6f:ab:ba:f1:6d:6e:7f:81:4e:4b:15:f2:59:b3:f2:5d:6f:
9c:d4:a1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:34 2026 by rpki-client