Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/cOH4c9izeDruRM_oCC75dpURBQ0.roa
File: cOH4c9izeDruRM_oCC75dpURBQ0.roa (raw, json)
Hash identifier: BRWXvah06JyjvQjw3gTuP/eCXiDs1cg2J5s+PEM/zAE=
Subject key identifier: 70:E1:F8:73:D8:B3:78:3A:EE:44:CF:E8:08:2E:F9:76:95:11:05:0D
Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial: 01A06CEB54818037BA19CE2478F4A1B28643
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/cOH4c9izeDruRM_oCC75dpURBQ0.roa
Signing time: Fri 04 Sep 2026 14:55:56 +0000
ROA not before: Fri 04 Sep 2026 14:55:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43141
IP address blocks: 31.44.32.0/20 maxlen: 24
31.44.32.0/21 maxlen: 24
31.44.40.0/22 maxlen: 24
31.44.44.0/23 maxlen: 23
31.44.46.0/23 maxlen: 23
46.21.22.0/24 maxlen: 24
185.155.176.0/22 maxlen: 24
193.222.104.0/23 maxlen: 24
2a04:1580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:eb:54:81:80:37:ba:19:ce:24:78:f4:a1:b2:86:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
Validity
Not Before: Sep 4 14:55:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70e1f873d8b3783aee44cfe8082ef9769511050d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:d5:7b:bb:ed:a1:ad:81:6f:ed:8e:a7:bf:
03:9e:b6:26:1b:0d:8b:f0:48:5a:f2:b8:ef:a7:21:
ab:08:7a:eb:a0:15:85:5b:d2:98:ca:e9:34:c1:4b:
d4:4b:19:d2:f7:15:e5:df:18:95:76:3e:08:30:d6:
6f:8b:49:29:c5:28:7c:bd:0a:bf:12:31:1f:30:6d:
1b:67:ba:a4:2c:7c:5a:5e:7c:35:e4:7e:36:f6:cf:
43:93:aa:f7:96:13:f8:4d:24:dc:cf:28:4b:da:9a:
ba:7f:d4:c9:1f:18:d5:ab:43:94:8d:ae:72:d6:07:
24:f4:cb:13:91:38:ed:ac:8d:2a:4b:8d:33:27:59:
99:a8:a4:9a:23:a1:89:ff:9e:16:b6:eb:5c:e7:40:
3e:9d:e4:c8:d6:3e:e6:09:82:59:d7:2a:63:bd:78:
7f:48:b1:50:5e:47:dc:f5:8d:27:aa:9e:c7:c7:f5:
ca:22:71:bc:ea:cb:dd:e9:68:91:f7:65:90:c8:01:
c6:d1:2a:7f:b2:ff:a7:e2:d2:ca:c9:f9:8e:df:6d:
f4:f1:e0:7c:01:56:d2:b5:39:a7:ef:72:cc:80:0f:
2a:39:80:41:f6:a7:89:a6:04:ea:94:83:ef:66:90:
1c:cc:f7:7f:b4:8a:2f:ec:8a:3e:10:26:54:7a:00:
66:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E1:F8:73:D8:B3:78:3A:EE:44:CF:E8:08:2E:F9:76:95:11:05:0D
X509v3 Authority Key Identifier:
keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/cOH4c9izeDruRM_oCC75dpURBQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.32.0/20
46.21.22.0/24
185.155.176.0/22
193.222.104.0/23
IPv6:
2a04:1580::/29
Signature Algorithm: sha256WithRSAEncryption
31:f7:9e:44:0f:09:dc:ff:5d:66:67:59:93:71:04:40:db:85:
32:e4:75:3d:39:9c:38:7d:82:b1:97:eb:ac:6c:eb:22:05:e3:
3a:75:a2:00:be:15:ab:21:9f:01:4e:35:e5:12:c7:bb:cd:2f:
bd:ba:10:ef:74:4a:79:20:4e:d9:c7:6d:28:ae:05:b9:15:43:
38:7d:8a:08:df:a0:6a:7c:ea:bc:9f:7a:cd:84:b2:f3:a3:79:
fa:87:48:ae:2d:14:19:d5:7a:0b:34:22:66:c8:b8:05:ba:7e:
3f:2c:88:2f:79:a7:a2:0f:3d:e9:87:88:59:32:5d:ad:ba:d3:
d4:24:db:08:72:14:fb:ae:01:7a:70:90:64:73:af:ba:71:a9:
b6:f3:b5:33:94:76:ea:6c:5f:77:d5:34:9b:a0:b2:71:84:9d:
a4:5a:9e:d6:9e:5c:fe:fb:4d:01:8c:0e:b3:e3:d9:2c:1b:a8:
a2:4a:2a:38:cb:ca:1b:ea:81:d6:e7:5d:5b:9d:e4:b0:e9:2a:
f2:4d:eb:ef:f9:92:48:fc:82:1d:39:55:c3:a1:d3:5e:0b:c0:
a3:06:38:9b:77:51:10:b4:57:0f:7d:51:08:39:ee:92:71:cd:
a6:a1:62:ac:39:27:e1:fd:c7:12:04:e8:70:2b:cd:4e:15:bc:
26:e6:d5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:10:29 2026 by rpki-client