Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/CiXCz7OWck5adEg6z95YRceHxmU.roa
File: CiXCz7OWck5adEg6z95YRceHxmU.roa (raw, json)
Hash identifier: EasCRjc+VBWg+tlVvV7czSSDbpGCqgxTM2n5TXY0Ipc=
Subject key identifier: 0A:25:C2:CF:B3:96:72:4E:5A:74:48:3A:CF:DE:58:45:C7:87:C6:65
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 019F40D44FC95680B68ECC38536D7C19176E
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/CiXCz7OWck5adEg6z95YRceHxmU.roa
Signing time: Wed 08 Jul 2026 08:24:43 +0000
ROA not before: Wed 08 Jul 2026 08:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44325
IP address blocks: 91.199.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:d4:4f:c9:56:80:b6:8e:cc:38:53:6d:7c:19:17:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Jul 8 08:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a25c2cfb396724e5a74483acfde5845c787c665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:c6:ae:3e:d1:d5:70:04:37:84:07:c4:3b:
ed:11:27:fd:bf:a2:41:81:f3:76:9a:a0:5b:07:5f:
1d:24:d9:e0:8e:b5:ea:ad:5c:80:54:10:5b:8b:d5:
cf:d5:ba:3d:7f:58:bd:23:56:04:b3:75:f8:fe:cd:
19:36:e0:15:5a:4f:ee:17:9b:8b:71:0c:98:b7:dc:
dc:d5:4a:cf:97:f3:8b:46:aa:82:bb:26:85:a7:8e:
dc:1d:4f:d2:a8:22:86:dc:ac:14:05:da:4d:62:8a:
04:c3:61:44:ae:0c:e3:ae:17:3f:a7:cc:9f:48:ea:
38:08:9b:81:14:8e:13:75:95:24:d8:c2:d3:3d:77:
6e:7d:e8:56:8d:e9:9e:b8:40:59:ea:b4:f3:c9:6a:
ba:fc:74:1c:4f:90:6b:45:1f:bc:e1:e9:f1:0c:70:
86:e2:ba:f8:00:34:fa:e2:34:ec:61:ff:4f:f2:61:
e1:99:b6:de:66:63:66:58:44:86:35:a3:17:8f:1e:
ef:66:2c:63:14:69:8a:d2:61:99:5b:1e:70:16:79:
19:a5:e9:3f:7b:b2:f4:db:04:4e:d2:09:bc:29:22:
ac:8c:cf:4c:e3:10:80:50:95:1a:8b:ea:2b:16:5b:
3d:15:60:b2:db:b0:88:84:7f:73:07:d4:9b:0c:af:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:25:C2:CF:B3:96:72:4E:5A:74:48:3A:CF:DE:58:45:C7:87:C6:65
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/CiXCz7OWck5adEg6z95YRceHxmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.79.0/24
Signature Algorithm: sha256WithRSAEncryption
15:25:ce:08:9a:c1:f9:1c:e9:96:36:8d:d5:4e:76:2d:17:af:
7c:e8:90:02:ee:ca:b0:56:66:66:3f:af:3c:a4:ef:1b:e5:71:
b1:3f:73:50:4f:35:f6:f1:57:d6:b2:dc:99:f1:31:db:64:4f:
65:70:d7:7f:a6:18:0f:67:9a:90:70:01:95:6d:70:da:c4:f0:
7f:18:43:63:6b:ac:19:d5:46:d3:91:64:10:d1:8b:9f:65:b9:
e8:c9:e8:1b:aa:3a:8e:c8:f3:bc:7b:6d:3e:1c:f8:5d:34:d9:
d8:d8:35:a9:d0:de:bf:20:4b:1b:73:1b:3c:f6:44:ef:95:1f:
f2:05:16:90:60:a7:4d:bd:16:e0:43:0b:c6:75:c1:1d:df:4b:
47:34:e8:ce:7b:eb:d7:f8:78:65:56:fa:4a:9d:53:0f:36:5c:
a2:df:6c:24:46:9e:c4:e7:93:cb:2d:d4:a0:26:cd:50:1c:f7:
7a:66:57:31:b4:a4:32:ba:4a:8f:47:26:41:54:6a:d9:69:0e:
49:b8:53:2f:12:1e:23:8c:63:8f:cf:a8:b4:c7:64:45:d3:94:
0c:bb:f6:23:e0:aa:be:fd:49:3e:f0:7b:18:12:91:45:09:bc:
ea:04:b8:86:54:1d:bf:cf:35:6d:77:57:81:6c:29:11:6e:b4:
a9:27:83:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:38 2026 by rpki-client