Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/CDJTXCKddgeS45cto4BDn6LGKXM.roa
File: CDJTXCKddgeS45cto4BDn6LGKXM.roa (raw, json)
Hash identifier: 53bZhsl27b4D4nLfge1Qmnrp5YltP0H1xlBZflfNcSw=
Subject key identifier: 08:32:53:5C:22:9D:76:07:92:E3:97:2D:A3:80:43:9F:A2:C6:29:73
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01A0D30DD6FD84044ACADE4D9C386CE81982
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/CDJTXCKddgeS45cto4BDn6LGKXM.roa
Signing time: Thu 24 Sep 2026 10:54:54 +0000
ROA not before: Thu 24 Sep 2026 10:54:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211422
IP address blocks: 109.160.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:0d:d6:fd:84:04:4a:ca:de:4d:9c:38:6c:e8:19:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Sep 24 10:54:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0832535c229d760792e3972da380439fa2c62973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:5d:79:50:80:85:12:9f:a2:49:63:8c:fc:
e5:81:a5:8f:94:92:aa:0b:9d:4e:30:12:15:d3:1e:
f3:f4:f4:26:7c:7d:99:cb:e9:1c:fe:1d:23:17:2f:
16:70:19:bf:4f:74:4c:0a:f7:c3:b1:8e:bf:9f:3e:
53:99:d2:0a:76:fa:80:e7:c3:58:78:b2:e1:77:17:
06:31:e7:e6:b1:49:d0:5a:15:66:c7:ce:22:a2:68:
6c:ad:79:cd:7f:82:ea:aa:27:7c:a8:6c:f1:f8:33:
82:b8:4b:c6:2d:9f:1a:df:4d:86:51:35:40:8d:01:
22:40:d7:3f:76:01:6e:39:7c:f6:c9:8b:8f:ec:1d:
3f:0e:e1:97:8b:b7:fd:ab:a6:04:9d:d0:1a:dd:c8:
fe:dd:20:87:e1:10:96:bd:e1:e7:e9:95:2e:f5:4c:
82:49:5d:06:36:ec:4f:9b:d8:05:ff:c5:bd:dd:c9:
cd:67:67:81:49:15:82:87:75:42:5b:e5:f4:bf:4d:
89:a7:d0:5f:17:ab:8c:3f:c2:4c:87:64:21:d5:c5:
c8:a0:53:76:68:08:7c:ef:d1:ff:85:2e:ab:2f:27:
9e:13:50:ec:5d:ce:4f:98:e7:9d:1e:e7:dd:ce:a4:
ec:e2:e0:b3:79:77:28:5c:3e:f9:af:cc:d1:68:37:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:32:53:5C:22:9D:76:07:92:E3:97:2D:A3:80:43:9F:A2:C6:29:73
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/CDJTXCKddgeS45cto4BDn6LGKXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.33.0/24
Signature Algorithm: sha256WithRSAEncryption
24:85:cf:93:b9:9f:ec:ee:59:fa:af:ef:69:c2:d7:84:47:68:
cd:23:f2:8c:d7:99:37:91:03:b1:91:3f:8f:9f:2b:85:79:b3:
da:86:24:fb:ee:2c:f4:e0:e6:76:2a:9c:6f:44:1b:e5:12:21:
80:77:d0:41:97:43:65:df:05:07:58:ee:53:0e:ee:9f:71:bb:
0d:c8:21:9e:d9:c5:e0:2a:7f:77:51:25:65:ca:21:48:df:d9:
52:77:c3:0a:46:61:07:67:09:e3:8e:1b:e7:cc:cb:e2:23:c8:
e3:bd:3c:05:c7:f9:32:81:4a:2e:aa:37:7b:e9:db:cd:42:ab:
f3:81:b8:40:e8:de:93:3c:44:61:b4:83:1f:48:06:ff:c2:bc:
0d:8e:4b:5e:8e:f9:f1:12:87:8f:7d:be:3e:ba:4f:ab:32:b3:
ee:4a:3e:02:1f:fd:53:ca:3e:c8:45:4c:1a:5d:ae:ea:8b:3a:
f9:e8:34:3a:22:1c:10:2f:70:6f:d9:10:ed:82:5c:af:b6:5d:
cc:86:24:3f:3d:81:ae:15:16:e8:99:67:5a:fa:e6:19:a7:03:
61:6f:59:76:8d:fa:6e:6f:91:c0:50:16:41:bc:2e:fb:e6:f3:
04:73:41:c3:df:81:f9:f5:a2:e9:90:35:2f:bc:39:8b:b1:96:
37:21:72:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:06:18 2026 by rpki-client