Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/cCqdc17ji2M1kOGak_A4zF45rAA.roa
File: cCqdc17ji2M1kOGak_A4zF45rAA.roa (raw, json)
Hash identifier: auodaeobsnLWwDrzWV8MjYZOmLS6kqoqYz3PcxCEus4=
Subject key identifier: 70:2A:9D:73:5E:E3:8B:63:35:90:E1:9A:93:F0:38:CC:5E:39:AC:00
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019D00F80E412CAEF064AD08AD9155E0AB50
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/cCqdc17ji2M1kOGak_A4zF45rAA.roa
Signing time: Wed 18 Mar 2026 12:42:29 +0000
ROA not before: Wed 18 Mar 2026 12:42:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30644
IP address blocks: 185.73.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:f8:0e:41:2c:ae:f0:64:ad:08:ad:91:55:e0:ab:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Mar 18 12:42:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=702a9d735ee38b633590e19a93f038cc5e39ac00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:ad:43:8d:22:0f:bb:96:99:e7:f0:cf:e0:
6b:48:17:b4:90:b6:b1:a8:25:4f:38:94:dc:ca:db:
5f:eb:db:3e:41:ca:8f:99:fb:90:40:aa:91:b9:fa:
8d:de:f3:dd:e4:90:81:43:10:92:83:e7:46:d1:a4:
50:a5:a8:b4:a7:a2:c4:f5:18:e7:87:f8:2f:97:eb:
a1:93:4a:00:71:be:96:84:c6:2c:ce:93:c7:05:c9:
0c:52:f9:8b:e1:91:ba:b8:1e:78:67:ad:22:ae:1b:
61:bc:2c:6c:34:88:d7:20:28:96:23:15:34:be:b9:
33:b9:4f:4b:55:c5:85:ea:b9:df:07:11:ae:90:44:
82:23:0d:7b:f2:44:d5:7b:c3:6d:1a:8a:aa:93:96:
e8:4b:f5:6e:0a:bf:48:32:ed:4a:03:ce:78:27:35:
b1:29:ba:39:29:8f:0e:f9:0f:02:10:47:52:5f:4c:
df:99:10:55:71:29:57:bb:31:3e:ff:61:c8:b7:09:
5f:be:1e:11:e3:00:47:3a:09:fb:b1:86:e8:94:c0:
06:53:43:fb:5d:1a:db:28:e2:d4:dc:ec:0e:07:02:
58:8a:42:a9:7f:9e:54:31:69:1b:12:de:2b:66:b4:
0c:74:21:18:4c:27:3b:5a:49:1f:65:12:b6:53:36:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2A:9D:73:5E:E3:8B:63:35:90:E1:9A:93:F0:38:CC:5E:39:AC:00
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/cCqdc17ji2M1kOGak_A4zF45rAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.125.0/24
Signature Algorithm: sha256WithRSAEncryption
23:65:13:9c:fd:f1:ac:f6:6f:4e:9f:8d:d5:a6:6e:a9:e5:59:
5c:14:58:b1:fa:48:18:eb:b4:4d:60:94:43:7d:91:b6:a7:fe:
9c:6c:ce:9d:bf:79:40:f2:d0:e5:15:60:4e:b7:5f:d6:11:90:
55:95:b1:4a:1a:38:fb:43:fa:d3:d8:b5:e4:5d:33:03:ca:1e:
42:76:ce:a3:d1:fc:26:cb:12:58:37:60:b7:ef:69:ac:2d:60:
e8:7e:01:6b:4d:eb:7b:99:9c:8e:cc:37:2c:80:32:99:62:38:
f5:ad:c0:02:11:09:b3:9c:4e:3b:a6:58:18:5f:99:83:d3:5c:
11:ff:1d:1e:f2:be:18:37:d0:27:f9:90:63:a9:2b:89:63:e4:
63:1d:fd:49:ee:1e:75:75:f3:3e:54:3c:b9:95:37:8f:35:65:
f9:3f:05:20:1d:11:c9:ef:24:0e:35:85:c5:f6:ba:f9:ff:73:
71:62:a8:67:f5:66:96:bf:55:69:c5:70:36:92:e1:8e:74:13:
d6:e1:47:1e:ca:96:ae:75:47:c6:a8:26:8e:7e:ef:c8:e7:21:
a8:c9:39:77:f9:42:3e:fd:6b:cd:f3:7f:81:d9:9d:1a:7f:32:
c5:6e:39:f2:85:21:20:de:99:c9:30:b2:6d:03:e9:80:d0:bd:
97:e5:5f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:19 2026 by rpki-client