Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/cx-i-vioDiOrCAaf4O-H6J9IkI4.roa
File: cx-i-vioDiOrCAaf4O-H6J9IkI4.roa (raw, json)
Hash identifier: H7gfl8SrS8e2GfxlOJQWxhYqdIi+GK6qhediZVZeGXM=
Subject key identifier: 73:1F:A2:FA:F8:A8:0E:23:AB:08:06:9F:E0:EF:87:E8:9F:48:90:8E
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 0199B94E9BA100D77516F59037F6C0B2EC2F
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/cx-i-vioDiOrCAaf4O-H6J9IkI4.roa
Signing time: Mon 06 Oct 2025 11:36:00 +0000
ROA not before: Mon 06 Oct 2025 11:36:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12703
IP address blocks: 84.45.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b9:4e:9b:a1:00:d7:75:16:f5:90:37:f6:c0:b2:ec:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Oct 6 11:36:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=731fa2faf8a80e23ab08069fe0ef87e89f48908e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:67:65:6c:e3:23:c9:a0:df:b3:91:f9:f6:
11:73:20:e9:55:4b:da:6f:0c:f6:72:ab:3d:1f:27:
5f:81:a2:bf:2a:fc:ab:43:e5:57:16:a3:ae:d0:e3:
dc:b9:96:22:97:3a:1b:20:19:d2:ee:f1:94:71:dc:
06:14:6c:44:ea:4c:1d:a5:c3:cf:9e:78:39:91:9b:
9d:d9:74:0b:3c:1f:37:01:bd:bc:02:d9:f1:50:40:
4e:81:cf:24:68:9c:d0:69:9b:2f:10:b6:bf:96:1b:
37:f1:8a:fd:4e:d6:c8:f9:58:dc:f9:37:df:a4:c8:
73:01:10:14:96:f6:77:f4:d1:5c:ca:11:cb:a4:25:
6d:eb:75:80:03:c0:fd:52:a3:9a:4d:20:44:27:e4:
c2:ad:3d:8b:d6:28:94:df:49:a4:6c:a5:27:0f:37:
37:73:8e:28:25:01:22:65:91:24:de:91:cb:58:f8:
35:e3:3e:f0:9e:6c:41:74:3f:41:25:fc:5e:78:0d:
d1:a3:bc:f2:ab:55:75:df:50:e0:c6:65:df:68:e0:
62:e9:e6:bb:cd:cd:5a:4f:12:70:e7:9f:b4:ba:61:
ff:f9:93:1f:f0:b3:25:86:69:d3:9c:27:bb:8d:34:
02:c9:72:b4:09:a8:f7:96:d7:b6:a2:ac:a5:47:c4:
8d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1F:A2:FA:F8:A8:0E:23:AB:08:06:9F:E0:EF:87:E8:9F:48:90:8E
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/cx-i-vioDiOrCAaf4O-H6J9IkI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.45.44.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:75:59:6a:cb:ef:5e:69:65:6a:f3:02:5c:68:39:8e:8c:0e:
86:ab:83:74:49:25:b2:71:20:d8:06:1f:36:91:84:7f:0b:9e:
bf:cb:bb:a7:e5:92:36:d0:b4:bc:c3:c0:81:7c:74:f2:7b:86:
bf:aa:82:07:46:c3:28:c0:29:58:78:0c:91:df:64:8e:2e:fc:
de:d1:e3:27:6e:8e:82:e0:6b:c5:47:28:9f:1b:20:56:e8:d8:
bf:c5:0d:10:59:4e:7b:44:d8:de:aa:06:d2:84:33:71:e2:62:
75:4d:aa:db:51:b5:29:79:76:a7:10:f5:7c:b0:c4:c8:de:2b:
a6:18:e5:d0:0b:de:e8:d0:4c:43:7b:e0:67:63:f1:b5:e4:6c:
a7:b9:e0:c5:ea:6c:c7:ac:ce:58:af:17:14:28:dc:93:9d:00:
bc:2d:e5:89:54:d5:7d:90:64:e3:c9:37:d7:f5:53:47:a7:9f:
70:6b:86:3c:57:21:86:37:27:07:16:73:49:fd:b0:1f:0c:9e:
00:e3:3f:6d:34:4a:88:32:ed:eb:77:05:1e:73:1a:03:06:35:
05:b6:6a:82:2b:3b:84:c6:44:6c:ff:64:5f:88:16:6d:d1:77:
03:bf:64:b1:28:1b:be:12:d9:4f:15:35:b5:37:f6:84:d6:28:
db:d0:ac:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:18 2025 by rpki-client