Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Cd-EjljNtxmscKdjcZLE96w4ZWw.roa
File: Cd-EjljNtxmscKdjcZLE96w4ZWw.roa (raw, json)
Hash identifier: wPY6iUFF+iI91nSnCNtyxC/izA9try/2MZQcOoA/q54=
Subject key identifier: 09:DF:84:8E:58:CD:B7:19:AC:70:A7:63:71:92:C4:F7:AC:38:65:6C
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A10CAC3BB7EB5CAE58AC434BAEBFBE0E55
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Cd-EjljNtxmscKdjcZLE96w4ZWw.roa
Signing time: Mon 05 Oct 2026 15:26:16 +0000
ROA not before: Mon 05 Oct 2026 15:26:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 45.67.202.0/24 maxlen: 24
193.37.196.0/24 maxlen: 24
194.41.113.0/24 maxlen: 24
217.147.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:ac:3b:b7:eb:5c:ae:58:ac:43:4b:ae:bf:be:0e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Oct 5 15:26:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09df848e58cdb719ac70a7637192c4f7ac38656c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:3e:2d:56:12:ea:93:70:e9:64:bc:b3:b3:
c5:f1:6e:f3:37:00:62:ed:27:5f:56:9e:d3:c3:70:
4e:fc:7c:58:13:ab:18:cb:dc:af:1e:58:bc:16:6c:
b5:7c:3b:fc:25:30:b9:12:24:15:57:ea:4f:a8:72:
2e:1b:97:5e:8f:2b:67:a1:19:59:ad:e1:67:b4:31:
65:5e:7e:86:1c:60:41:34:c8:b2:11:1a:27:a3:03:
47:3e:02:23:e4:4c:45:34:6a:a4:ea:ff:02:0c:73:
89:98:b2:5e:5c:95:2f:0f:6e:94:cc:d5:5a:14:65:
8d:14:81:2d:d3:c8:35:ff:18:58:f1:a3:29:0e:37:
cf:93:87:b7:59:bf:15:d6:9d:1a:bf:4b:b5:34:45:
c8:1d:33:b5:d7:8b:39:01:89:45:e0:18:3a:aa:aa:
ae:9d:9b:e9:91:82:ab:9e:f7:36:ef:46:2f:4d:6d:
94:4b:b3:73:68:9c:65:ee:88:cd:f9:48:1b:cb:58:
2f:a1:40:dd:f4:4d:61:f2:2a:44:66:9c:4f:6f:a9:
73:5a:48:42:0c:8d:21:ee:29:11:f8:a1:80:1f:13:
dc:a8:a4:be:48:28:34:5a:ea:a4:9e:fa:75:dc:58:
ed:44:78:ba:42:9b:eb:dc:bb:22:3d:ee:d5:a6:6a:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DF:84:8E:58:CD:B7:19:AC:70:A7:63:71:92:C4:F7:AC:38:65:6C
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Cd-EjljNtxmscKdjcZLE96w4ZWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.202.0/24
193.37.196.0/24
194.41.113.0/24
217.147.13.0/24
Signature Algorithm: sha256WithRSAEncryption
46:56:98:53:a8:37:4a:65:40:b4:a4:ad:2d:a6:c9:e9:e0:a6:
7d:15:74:e2:cd:01:7d:8e:b9:6c:2b:24:52:b4:16:bb:f3:68:
5e:90:35:27:cc:ac:22:fe:91:93:5a:c5:64:08:1a:18:73:64:
0a:80:8d:64:d3:fa:1b:a9:e1:8b:84:a3:d8:77:e5:4b:d9:e3:
22:9c:ae:1a:9a:ac:94:b1:6b:65:2e:50:a1:d3:a5:d5:23:7a:
ae:0e:74:ed:ff:14:c6:bd:39:f1:68:d9:70:76:fd:e3:f7:21:
27:05:e2:b9:fa:db:c9:1f:29:1a:d0:c0:e6:b8:a7:c4:26:0a:
a7:23:51:43:eb:7e:ba:72:72:12:9d:f0:f5:eb:c3:05:e9:ff:
fc:7c:9b:5a:54:a3:ba:e8:d1:84:f4:75:84:8a:40:b9:f1:88:
3c:34:35:f7:49:d5:4a:e5:88:8e:58:b6:40:c0:8b:7c:a6:1c:
57:16:44:9e:d0:c8:be:e0:17:f2:e1:43:de:29:32:dd:59:e3:
8d:39:72:09:fb:e5:51:0a:4b:71:8e:41:c4:cd:47:96:d1:e1:
9e:65:23:e7:bf:28:1a:f6:97:53:b9:e3:d0:05:2b:aa:80:55:
d1:cf:3b:37:2c:a5:73:69:bf:4b:93:57:e8:cd:cc:36:e6:25:
73:aa:dd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:04:32 2026 by rpki-client