Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/cxHILCL6jkWDt-se7lKcOKoePGs.roa
File: cxHILCL6jkWDt-se7lKcOKoePGs.roa (raw, json)
Hash identifier: WFqYX1xtK7KAoaWT4XC6ojg4JFK9R7E3vO30qW6jrZg=
Subject key identifier: 73:11:C8:2C:22:FA:8E:45:83:B7:EB:1E:EE:52:9C:38:AA:1E:3C:6B
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A19D1CAC0B80B6872006C858622CED92F3
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/cxHILCL6jkWDt-se7lKcOKoePGs.roa
Signing time: Mon 02 Nov 2026 16:34:24 +0000
ROA not before: Mon 02 Nov 2026 16:34:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209207
IP address blocks: 185.112.59.0/24 maxlen: 24
185.175.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:1c:ac:0b:80:b6:87:20:06:c8:58:62:2c:ed:92:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Nov 2 16:34:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7311c82c22fa8e4583b7eb1eee529c38aa1e3c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:28:08:54:64:91:c4:2d:70:71:8b:a0:2f:
38:c8:79:4d:6c:a9:fb:0e:31:00:79:d6:f8:14:47:
2a:65:5a:86:82:7c:f8:46:1d:cc:66:4e:2d:95:b5:
24:ec:ac:06:99:b7:97:08:6c:5b:30:f8:43:db:3d:
fb:a3:05:da:b2:b8:91:15:b8:b7:61:9d:82:b8:e9:
4c:09:c2:53:ac:b1:ec:92:09:b6:ea:94:ac:04:d0:
0b:ee:ff:9b:2d:d7:89:7a:e1:35:98:a6:9e:33:b8:
6a:d5:9b:d8:83:8c:6c:e5:da:31:c2:6b:01:97:65:
80:92:76:b1:a0:09:8e:3d:d0:f0:73:16:98:0d:37:
9a:d5:b2:e3:5f:2d:15:83:6c:9a:55:b7:49:83:37:
07:9c:ed:a3:49:3e:26:83:ab:fe:f6:d9:64:a5:b6:
cc:01:42:2d:68:fe:a6:9d:dd:1e:7d:c6:36:37:fd:
3f:72:42:6f:58:68:53:27:01:cc:66:c2:56:f1:65:
8b:73:1a:8a:85:54:d5:1a:79:fe:64:41:98:f2:48:
fe:31:7b:63:73:9a:ec:b3:71:fb:8f:f9:95:1f:1b:
c2:8e:e1:c3:4d:69:7d:84:9e:2d:bc:e1:54:50:59:
79:1f:97:27:56:8b:ae:37:d5:53:15:60:56:8a:85:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:11:C8:2C:22:FA:8E:45:83:B7:EB:1E:EE:52:9C:38:AA:1E:3C:6B
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/cxHILCL6jkWDt-se7lKcOKoePGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.59.0/24
185.175.227.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c0:9e:da:5a:b3:f0:6e:e7:87:ca:e5:7a:33:78:1f:16:35:
b4:79:0d:65:27:ae:89:30:83:9f:77:47:af:ec:89:57:e0:54:
a5:f9:f2:a9:1f:e9:e7:b6:18:7d:34:3a:9b:ec:74:0c:e2:8f:
d2:19:b0:9c:c0:15:d4:28:b4:a6:8a:00:c1:97:76:38:d9:ac:
d8:b5:f3:7f:3a:ba:95:cc:30:08:9b:4e:e1:b5:1e:f9:c6:b8:
f7:23:35:dc:76:87:b1:6a:4c:3d:40:89:26:5c:88:d5:42:5f:
3e:57:dc:f0:2a:7d:d7:c1:af:20:7f:5b:59:50:15:4f:f9:29:
18:47:87:ea:d0:8c:82:66:76:d4:94:51:d8:a9:eb:00:63:b6:
7d:17:fa:91:32:70:7f:a2:b8:0d:92:c5:8f:a7:fb:fb:1e:dd:
63:28:7e:e3:69:19:46:b5:9c:35:cb:bb:e4:41:3d:3e:cd:c8:
00:df:9d:c4:59:3a:3b:77:21:dd:47:1e:9e:2c:68:44:20:c5:
05:23:ac:a9:0d:81:74:d8:0b:6f:13:7e:2d:0c:ef:48:c1:b8:
0c:9b:e8:34:3d:f7:fd:b9:07:2b:67:83:77:ad:1d:93:6d:d1:
d7:8e:da:58:50:46:18:a2:12:8e:c8:8d:f3:59:21:75:81:40:
a2:30:0b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:45:24 2026 by rpki-client