Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/CXZdBW73P1sigZtPmmClSIVanYo.roa
File: CXZdBW73P1sigZtPmmClSIVanYo.roa (raw, json)
Hash identifier: 4v+9CCQ8FNhXj3JWX6pp/XQ9nrD0wz+4HUXlx805a0k=
Subject key identifier: 09:76:5D:05:6E:F7:3F:5B:22:81:9B:4F:9A:60:A5:48:85:5A:9D:8A
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019F76C3D87B29816F14457890C965DB4214
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/CXZdBW73P1sigZtPmmClSIVanYo.roa
Signing time: Sat 18 Jul 2026 19:46:14 +0000
ROA not before: Sat 18 Jul 2026 19:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 109.122.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:c3:d8:7b:29:81:6f:14:45:78:90:c9:65:db:42:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jul 18 19:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09765d056ef73f5b22819b4f9a60a548855a9d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:20:9d:d1:25:86:fa:c4:08:06:f0:ec:21:
7c:87:7e:75:32:a7:55:3d:d8:a4:ac:fc:5b:0b:4c:
26:b4:c0:c7:07:ea:49:5c:98:51:4a:84:e1:e9:03:
05:60:04:b0:c1:e8:f7:06:14:fc:89:9a:81:a6:c3:
89:ce:5b:f5:5a:4e:78:e6:5b:c3:6c:01:25:85:31:
d7:aa:9f:08:cc:e0:4b:ce:f4:ea:67:80:e6:ed:4a:
fa:2f:4d:6d:77:10:fe:0a:e8:ba:c2:48:e9:71:05:
99:52:17:0c:4f:b1:b6:2c:d3:b1:37:fd:e0:b6:0f:
bb:1d:07:90:34:9a:f7:4b:9b:64:fc:5c:52:b4:00:
6a:23:28:ed:f3:30:2e:b4:ab:fd:85:7e:a8:3f:17:
99:03:d6:5e:1c:79:ae:16:84:cf:9f:12:58:fe:55:
aa:0b:f6:53:d6:36:98:4e:69:6b:ba:9d:f4:20:42:
7c:20:18:ec:b7:f7:b8:ed:e5:3a:16:8a:cb:b2:f3:
03:68:d3:1a:51:b9:6a:b0:3f:ca:7f:3c:3d:46:d3:
bb:e8:49:c5:7f:e5:67:4b:77:f5:c7:fc:ca:cc:e8:
bc:66:5e:3d:50:10:29:a8:2b:18:c2:93:2e:7a:f8:
5a:89:36:34:0c:45:72:ea:6b:f7:21:72:0f:1c:cc:
1b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:76:5D:05:6E:F7:3F:5B:22:81:9B:4F:9A:60:A5:48:85:5A:9D:8A
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/CXZdBW73P1sigZtPmmClSIVanYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.58.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:26:af:22:d6:d4:b9:0b:c4:bf:78:c1:c1:73:79:a5:d0:82:
8a:c7:c7:e5:cb:d6:5f:aa:8c:18:2c:62:91:b4:37:0c:68:bc:
68:2a:38:bd:ad:d6:72:ff:ac:46:5b:3b:e0:0a:2a:28:42:36:
07:c2:32:44:82:db:01:39:12:82:3f:fc:0d:c2:48:2a:49:ae:
19:f5:8b:d1:59:99:80:82:bc:b5:8e:1b:e8:1b:81:b3:9b:57:
cb:f2:22:90:3f:40:b1:46:b8:af:ec:62:d3:17:05:cb:cf:c2:
af:1f:4f:32:f6:c8:45:e7:69:3e:48:d0:e2:a2:a1:4c:66:c8:
54:62:f0:fc:e5:6f:50:17:39:c9:90:f0:e9:dd:c5:ad:a8:00:
b0:df:8a:85:75:a3:a9:3b:25:f6:34:34:1c:63:18:fc:ed:62:
c9:6c:bd:f9:21:cf:13:3c:5b:d7:ee:e1:a2:cb:17:2d:7d:52:
48:1e:26:c0:2e:6d:ed:fc:2d:46:22:60:1d:57:4d:a6:47:96:
4f:c7:ee:d1:95:dd:5f:ba:b1:8e:b7:2f:04:b0:33:3e:a4:c9:
25:59:3e:44:51:36:fe:79:df:fb:80:0f:79:aa:c9:ad:53:e7:
da:cb:61:fa:c6:21:66:ab:4f:44:c7:b5:13:55:07:04:1f:f3:
ee:69:28:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:23 2026 by rpki-client