Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/CXjoG7tvIWNFCtKSa0QeykOVgjU.roa
File: CXjoG7tvIWNFCtKSa0QeykOVgjU.roa (raw, json)
Hash identifier: bQeAMi9fb7rUFfhAGK5k1fFLZVj6ofPNEt4NLS/erBo=
Subject key identifier: 09:78:E8:1B:BB:6F:21:63:45:0A:D2:92:6B:44:1E:CA:43:95:82:35
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 019F58945391E6FD5987BE3DB9877D669D2F
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/CXjoG7tvIWNFCtKSa0QeykOVgjU.roa
Signing time: Sun 12 Jul 2026 23:05:43 +0000
ROA not before: Sun 12 Jul 2026 23:05:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219278
IP address blocks: 23.252.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:58:94:53:91:e6:fd:59:87:be:3d:b9:87:7d:66:9d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jul 12 23:05:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0978e81bbb6f2163450ad2926b441eca43958235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:b6:d5:1f:17:50:de:4f:14:fa:00:43:81:
40:eb:07:a2:04:06:25:45:88:82:c1:76:7d:ed:7d:
3c:e9:d8:52:ee:77:a8:9b:da:c5:6f:2f:0d:88:fb:
21:d7:33:6d:46:77:7d:12:86:07:5f:a6:5d:d8:c4:
ff:86:1b:2b:85:b7:fb:74:d8:a9:47:4c:86:44:10:
eb:b8:eb:ef:e2:9f:aa:03:66:8b:82:3b:df:7b:00:
eb:08:38:02:0d:4e:65:db:81:91:59:49:f2:7d:92:
c3:e8:7a:94:c3:f1:38:83:fd:54:5b:87:bf:3f:9a:
b5:4c:69:00:2b:cc:31:a9:45:a4:2a:84:5e:2b:ca:
a2:83:47:97:75:03:5b:15:b8:f6:29:08:75:02:36:
12:4e:81:ed:27:41:4d:e4:3c:c9:30:38:07:24:20:
cc:a4:91:1e:04:4b:c3:f3:4c:4c:44:6f:ab:12:c3:
53:33:a5:6a:24:21:cc:44:f6:85:81:61:de:64:10:
76:79:90:82:48:5c:a3:4d:b6:23:f8:4d:c0:84:21:
fd:63:68:24:49:dd:0f:5e:29:e2:52:6e:48:6f:f6:
60:c7:f5:e6:0a:1b:94:7e:a0:f0:b8:d3:b0:3e:ff:
a0:45:a3:3c:94:3e:27:7c:1c:0f:27:e5:99:4c:64:
2b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:E8:1B:BB:6F:21:63:45:0A:D2:92:6B:44:1E:CA:43:95:82:35
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/CXjoG7tvIWNFCtKSa0QeykOVgjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.252.75.0/24
Signature Algorithm: sha256WithRSAEncryption
76:89:98:c6:0d:3f:60:ea:d4:b8:c7:50:35:bb:70:76:0d:90:
c5:eb:7f:a9:a1:54:4a:a2:d5:13:80:30:23:af:3b:5d:fb:cf:
22:ce:72:2e:39:19:27:6b:ff:33:93:c4:a4:d6:3f:aa:94:cb:
e7:0a:36:ad:60:7c:35:96:a8:95:66:80:88:8c:63:d2:7c:fb:
8c:68:38:6f:74:78:c2:cf:16:18:76:76:8d:8e:b6:1c:46:c5:
12:fd:53:e7:5c:ae:c4:05:76:bb:51:fd:40:11:9d:f6:a4:20:
0a:23:47:05:42:e9:45:3a:59:40:57:c6:ca:63:46:a9:5b:b4:
65:20:25:78:6b:41:60:30:22:2a:41:f8:53:10:54:b5:f5:da:
7a:7d:bc:f0:16:df:29:1b:44:d7:ba:ae:f0:5d:a5:d6:10:26:
e7:06:ca:98:63:3d:b2:b2:3f:13:46:3d:7e:2c:25:ab:38:fb:
ab:60:20:87:3b:03:8e:e4:9d:c4:2c:e1:a8:a7:f3:c1:04:ca:
e5:0a:27:da:c5:fc:fb:78:43:bf:6c:1a:31:a6:2d:be:72:c7:
f9:35:00:a4:51:d0:62:78:3b:d4:df:a8:d8:dc:bf:81:f5:91:
eb:f3:9d:51:98:f4:b1:93:7b:b3:55:0b:b3:85:62:b4:35:7e:
8e:7f:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:58 2026 by rpki-client