Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/Cxczu6pG_j9G8YgyCFhNWqwjOHY.roa
File: Cxczu6pG_j9G8YgyCFhNWqwjOHY.roa (raw, json)
Hash identifier: WwxhEZK9JwB3xoHnIPrE7wXjUmLlZC5xHb6l9AOXBgc=
Subject key identifier: 0B:17:33:BB:AA:46:FE:3F:46:F1:88:32:08:58:4D:5A:AC:23:38:76
Certificate issuer: /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial: 019F23683F96863933BA10E9C8F31442BBF3
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/Cxczu6pG_j9G8YgyCFhNWqwjOHY.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62442
IP address blocks: 185.221.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3f:96:86:39:33:ba:10:e9:c8:f3:14:42:bb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b1733bbaa46fe3f46f1883208584d5aac233876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:bc:f3:fd:88:45:bf:bd:bb:bb:9b:74:00:
b1:6a:9c:4d:cd:ca:a7:22:dc:36:10:92:d7:8d:62:
99:3b:18:56:27:2b:f8:59:bc:75:e6:08:0a:e3:e6:
31:e6:1f:2d:fa:a4:01:eb:84:d5:ae:db:bf:3a:fd:
0d:81:af:58:c2:44:99:0a:03:b1:2d:f1:fb:2d:e9:
fa:10:0b:d4:7b:54:ed:20:0c:2d:77:98:83:aa:c3:
7c:29:2d:60:e1:ba:e1:64:30:a7:b8:bb:25:ba:e0:
2a:93:e2:2e:af:b9:4e:9c:08:8f:9e:cc:ca:6d:30:
51:65:15:68:5c:db:c7:0b:a4:12:62:0e:71:1b:4f:
c8:66:ee:cf:cb:ec:86:f1:57:be:96:e8:e2:d4:46:
ef:3f:f1:76:6d:64:d1:57:b7:f0:2e:a8:d1:5d:1b:
e6:90:31:d0:65:60:5f:43:73:b7:27:26:82:8e:8b:
b3:60:6f:d1:6c:40:9b:af:fd:c6:3d:36:14:3d:cf:
ba:ba:1b:c0:35:f8:c7:26:2e:74:30:c2:29:8c:54:
8c:55:ac:45:f3:0f:6e:65:66:be:0b:84:01:56:31:
fc:c6:f5:f1:2e:13:48:64:ba:1b:7c:c4:c7:c5:c1:
a6:3c:93:4f:d8:2a:02:29:fb:4c:48:c6:82:05:96:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:17:33:BB:AA:46:FE:3F:46:F1:88:32:08:58:4D:5A:AC:23:38:76
X509v3 Authority Key Identifier:
keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/Cxczu6pG_j9G8YgyCFhNWqwjOHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.239.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e5:2c:88:de:6f:51:7d:94:49:30:c4:86:c9:1f:90:af:1a:
65:ba:ab:a1:a4:7b:e2:26:f7:9d:a6:2c:9b:70:31:9f:6d:32:
06:19:41:c3:a4:84:99:e6:7a:79:59:25:01:7d:d9:36:3c:7d:
4e:8d:c1:10:ad:da:ba:b3:31:47:4a:e3:19:f5:2d:45:63:7d:
d3:65:38:4a:a8:98:88:c6:d1:e2:21:32:da:0c:91:c2:a5:79:
d1:ea:5c:98:17:36:07:21:8e:b6:16:82:0d:3a:8a:82:4a:07:
af:4c:1b:75:e2:8a:4b:28:b9:12:7f:b3:f7:9d:7c:c4:82:ba:
60:5a:a5:72:b5:a2:68:c8:11:d0:d4:51:2e:b8:2f:43:e4:6f:
e4:c6:33:52:b3:bc:24:82:d5:33:31:6e:3c:4d:97:67:af:ee:
89:19:90:e5:d1:1a:4b:f8:81:fb:20:fd:53:ce:ba:18:cb:51:
86:ba:fb:75:e0:9a:ba:27:c7:af:6c:d0:e5:40:fa:19:12:bd:
74:25:93:62:d7:1a:19:ae:30:4e:d7:07:54:4a:cc:53:ed:b3:
7d:e2:d6:4f:21:80:c9:b0:27:6c:58:6a:c1:4f:c8:7b:85:4f:
16:f5:a1:e7:3c:e0:cf:12:f7:90:17:f1:f1:c2:75:db:c9:53:
ea:0e:e5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:03:19 2026 by rpki-client