Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/COxwzaAe-R0jbJcmK5ZEQBvI8Bg.roa
File: COxwzaAe-R0jbJcmK5ZEQBvI8Bg.roa (raw, json)
Hash identifier: C8/sSHtf0SbNfSPV69qmG7STbyqxXjDjzdiBxYpNmhk=
Subject key identifier: 08:EC:70:CD:A0:1E:F9:1D:23:6C:97:26:2B:96:44:40:1B:C8:F0:18
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A0E92A8A62E0CD8163A3648E6C0B0BA757
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/COxwzaAe-R0jbJcmK5ZEQBvI8Bg.roa
Signing time: Mon 28 Sep 2026 17:57:54 +0000
ROA not before: Mon 28 Sep 2026 17:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.11.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2a:8a:62:e0:cd:81:63:a3:64:8e:6c:0b:0b:a7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Sep 28 17:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08ec70cda01ef91d236c97262b9644401bc8f018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:43:d5:24:bb:18:29:e2:bd:90:42:b1:b4:
bc:34:a6:07:1b:ec:52:c1:f6:dd:f5:3e:1e:f0:f4:
77:17:09:72:0e:f7:b5:ba:4c:9b:19:fd:8e:8a:91:
dd:51:e5:60:da:5e:04:67:cd:67:18:e8:bf:2f:ac:
20:e2:b8:b5:99:5f:f9:fb:c0:3c:23:18:d0:ee:e8:
a1:ff:9e:d7:e4:1b:a2:46:21:1b:b6:bd:e0:f8:84:
e8:a7:75:0a:c3:d8:7a:bb:bb:82:93:33:07:e8:a5:
ef:1f:da:e4:0d:e7:6a:1c:58:f7:6f:3a:1e:d3:ee:
19:dd:01:0b:29:73:35:f7:07:f3:45:e3:1a:c6:5e:
21:65:b4:3a:9f:f1:b4:18:a2:6f:e6:b6:bc:b1:ee:
02:6d:b5:f2:86:54:23:8a:9f:ff:9f:08:e4:1d:d4:
42:64:61:8c:68:88:a7:67:47:a6:e2:82:02:5d:32:
58:cd:e8:75:b7:04:44:c4:de:1f:19:55:72:0b:82:
f4:bc:be:9f:d3:8c:67:a3:23:45:df:7c:d8:0a:66:
eb:87:70:e2:63:b1:ec:b3:bb:f4:1a:10:c9:3c:c9:
c7:f5:72:3e:f0:3e:00:02:27:94:7c:c9:30:61:cb:
44:46:83:bb:15:e8:ca:bb:a0:1f:82:d7:3f:ec:4d:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EC:70:CD:A0:1E:F9:1D:23:6C:97:26:2B:96:44:40:1B:C8:F0:18
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/COxwzaAe-R0jbJcmK5ZEQBvI8Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:9a:a2:b3:63:b9:7a:9b:7f:2c:5f:a7:25:38:83:24:db:eb:
dc:0c:f0:3a:ad:f7:77:af:2e:22:1b:28:41:b5:68:16:ee:ca:
bc:e1:13:b7:aa:18:cf:8b:42:34:42:f8:f5:24:57:08:20:c9:
3a:56:5d:32:8d:fe:97:5d:23:c4:0e:5e:80:a0:aa:1e:0a:9a:
df:d6:9b:37:dc:8d:fd:70:a9:ed:64:18:c8:c6:24:1e:09:ee:
df:10:cc:28:a1:c6:0c:cc:aa:b4:f9:82:58:d6:80:8c:b6:2b:
ce:c4:79:8f:d8:5c:54:16:ad:d5:ab:b2:90:19:58:3a:ae:59:
ef:b2:34:46:24:2f:99:ef:c1:05:70:82:25:aa:ca:69:c5:c4:
b5:c2:05:00:c7:17:0d:1d:54:15:b1:39:b7:8a:0f:e5:ba:96:
d0:70:69:24:df:e5:39:5b:53:03:c0:65:77:d6:07:51:5d:7e:
08:82:0d:42:f5:ee:3f:9f:7e:32:18:4c:fa:92:61:e8:a5:0c:
3f:28:5b:19:07:5e:73:ef:b1:44:3d:03:a8:5a:0f:ae:66:2e:
00:ee:76:a4:1c:55:7f:65:17:66:85:35:f8:10:ba:c0:90:44:
f3:7e:b9:07:64:6e:ee:6a:b9:32:3a:5c:97:92:4c:86:bb:91:
72:9b:97:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:58:14 2026 by rpki-client