Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/RduCDzabknqx75Z7msEvHVBFkGM.roa
File: RduCDzabknqx75Z7msEvHVBFkGM.roa (raw, json)
Hash identifier: 6PmmB7OhBUhbkEYJC3o0vaIC4G1noOIy4/skgep5Xfw=
Subject key identifier: 45:DB:82:0F:36:9B:92:7A:B1:EF:96:7B:9A:C1:2F:1D:50:45:90:63
Certificate issuer: /CN=731aff1ad98f5b1a58c0ed7bf5954d46ac69a97d
Certificate serial: 01A0CE9EB8692F5A240AE05FD2C849196C9B
Authority key identifier: 73:1A:FF:1A:D9:8F:5B:1A:58:C0:ED:7B:F5:95:4D:46:AC:69:A9:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/RduCDzabknqx75Z7msEvHVBFkGM.roa
Signing time: Wed 23 Sep 2026 14:15:03 +0000
ROA not before: Wed 23 Sep 2026 14:15:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196851
IP address blocks: 185.174.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:9e:b8:69:2f:5a:24:0a:e0:5f:d2:c8:49:19:6c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731aff1ad98f5b1a58c0ed7bf5954d46ac69a97d
Validity
Not Before: Sep 23 14:15:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45db820f369b927ab1ef967b9ac12f1d50459063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:d9:cf:7e:a7:b4:21:c7:94:4c:83:c6:76:
3f:2a:86:85:47:6a:f9:bf:6e:a6:7b:f5:10:69:a7:
38:f8:9c:52:1b:66:7d:b5:00:be:f7:73:1e:b9:b3:
ab:51:13:16:74:00:6f:6d:d1:57:2e:95:68:ae:47:
09:2a:80:54:17:1f:83:97:32:0b:bd:65:e5:aa:91:
b2:95:a1:46:b2:60:91:52:1b:4b:ef:e0:1e:02:22:
98:8f:1d:07:d5:26:c9:7d:d9:e8:45:bc:b7:6a:b6:
fb:34:33:2c:21:95:f8:de:04:f4:ff:8b:c3:4b:4c:
0c:13:8a:5b:45:fb:83:9f:66:66:c2:51:d5:55:b4:
6e:6d:6f:54:32:a4:e9:7b:95:61:c0:4b:22:e2:77:
1c:a8:4f:17:21:0c:31:de:ce:bc:a0:bc:16:83:fb:
17:8d:d8:68:0f:96:16:10:fa:41:50:d3:80:c1:a7:
f7:2f:69:46:6e:f0:db:b7:67:13:f6:40:d7:ca:fb:
3d:84:16:c8:de:88:3c:67:98:86:9d:e5:ca:c9:bf:
74:ad:41:99:01:d7:6f:f6:b4:9d:89:3f:09:1d:4c:
69:c7:d0:c3:62:1b:66:61:16:85:d9:ae:b3:16:e3:
dc:1b:39:77:c7:07:b7:08:f7:d1:e9:41:42:9e:4f:
62:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DB:82:0F:36:9B:92:7A:B1:EF:96:7B:9A:C1:2F:1D:50:45:90:63
X509v3 Authority Key Identifier:
keyid:73:1A:FF:1A:D9:8F:5B:1A:58:C0:ED:7B:F5:95:4D:46:AC:69:A9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/RduCDzabknqx75Z7msEvHVBFkGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.146.0/24
Signature Algorithm: sha256WithRSAEncryption
28:46:3d:4d:25:15:db:8a:e0:c9:07:25:c3:d9:5d:dc:b9:90:
3c:45:19:38:a7:4e:95:ef:52:ea:b1:ff:54:2e:e3:00:0a:b6:
26:6f:98:08:ac:ac:a3:c2:86:cc:6f:0a:72:6c:de:87:d7:a8:
50:e8:28:41:e7:13:5d:84:da:0e:ea:d7:0b:ec:67:9c:9b:fe:
16:1b:32:fb:8e:c2:e8:19:46:f0:7a:a0:ce:73:60:b0:18:2c:
7e:4b:26:48:7c:2a:ed:94:45:bd:6b:81:ce:62:1d:71:06:8d:
84:a7:14:cd:e4:2c:c1:33:31:fb:af:9a:9d:b2:b5:9b:d2:8d:
99:39:00:f0:33:ea:7a:88:9f:c3:59:66:fa:f3:0a:ea:bf:94:
c8:4c:01:2e:60:bf:0b:c1:ae:4f:ea:13:67:59:c4:81:53:60:
90:b5:0f:19:88:05:7e:ef:6f:f2:4e:a5:1a:b2:46:c8:10:f6:
37:ae:3e:b7:af:b8:7f:fe:b2:37:ca:ae:ce:47:ed:b2:10:55:
49:6e:b4:5f:9b:8f:d4:36:ee:5a:5b:5b:c8:1f:4d:d6:e0:71:
36:57:d5:81:25:e6:94:c9:dc:44:2a:f0:ad:fa:5c:9c:0a:5b:
5d:5e:c8:83:42:07:59:94:ad:33:ab:bd:e0:b2:13:1c:2c:94:
9f:c4:02:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:32 2026 by rpki-client