Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/CDXPRhDMs-jGAh8wnudClkymVW4.roa
File: CDXPRhDMs-jGAh8wnudClkymVW4.roa (raw, json)
Hash identifier: 1eC46O/rW+KDcEVpgtUlJxI3BjmvvvXUSfceL9Sj9Nc=
Subject key identifier: 08:35:CF:46:10:CC:B3:E8:C6:02:1F:30:9E:E7:42:96:4C:A6:55:6E
Certificate issuer: /CN=9f8700d7cd122fe18af9a9e068d10b91ac3e7f3f
Certificate serial: 019F2368B2D5B40ED2629963939357FB9ED2
Authority key identifier: 9F:87:00:D7:CD:12:2F:E1:8A:F9:A9:E0:68:D1:0B:91:AC:3E:7F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4cA180SL-GK-angaNELkaw-fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/CDXPRhDMs-jGAh8wnudClkymVW4.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198421
IP address blocks: 109.206.96.0/19 maxlen: 24
109.207.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4cA180SL-GK-angaNELkaw-fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b2:d5:b4:0e:d2:62:99:63:93:93:57:fb:9e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8700d7cd122fe18af9a9e068d10b91ac3e7f3f
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0835cf4610ccb3e8c6021f309ee742964ca6556e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f5:8f:e0:01:41:dc:ae:09:22:32:63:13:15:
30:95:44:3b:02:63:94:2d:29:bd:fb:16:1b:0f:ca:
ed:c2:d7:c8:38:6f:73:fc:18:2e:78:ba:32:59:6a:
9a:35:44:a0:54:77:d2:c9:50:d3:10:10:2e:6d:ff:
56:db:8f:f1:d9:77:ac:06:b0:3a:8e:e2:4d:85:02:
58:9b:f1:bb:72:da:1b:b2:c0:d2:f7:7f:d5:c1:df:
eb:41:cb:96:0c:77:a0:97:ef:4e:db:95:ee:f0:86:
d5:cb:f6:3d:43:94:37:02:7e:88:e6:f7:26:b2:e9:
50:5e:3a:27:0a:aa:ad:1f:41:e7:50:54:25:49:12:
6b:35:8a:d1:f3:d4:95:25:3f:27:06:57:cd:92:ba:
2a:2a:ec:fa:a2:fa:e7:34:8a:e9:23:2b:c8:b3:a5:
d6:d0:15:31:3a:b9:3d:50:c2:21:15:13:84:e8:42:
dd:73:17:48:a2:69:ca:d4:e1:1d:16:e1:3c:61:eb:
eb:9f:94:5b:bd:b5:1c:0a:66:42:28:68:44:44:6b:
23:e2:ad:d0:f1:31:7b:5c:34:2f:a1:99:f4:94:ad:
30:2a:b6:78:28:b3:fb:ee:ce:12:53:c3:59:fe:c4:
ef:cb:c2:6d:4a:e3:22:cc:f8:19:73:09:ff:ca:54:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:35:CF:46:10:CC:B3:E8:C6:02:1F:30:9E:E7:42:96:4C:A6:55:6E
X509v3 Authority Key Identifier:
keyid:9F:87:00:D7:CD:12:2F:E1:8A:F9:A9:E0:68:D1:0B:91:AC:3E:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4cA180SL-GK-angaNELkaw-fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/CDXPRhDMs-jGAh8wnudClkymVW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.96.0/19
109.207.32.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:81:f2:d8:d8:6f:9f:0a:15:82:8c:4e:01:ab:4e:cb:17:6b:
92:85:d6:ee:59:64:80:61:da:57:4a:32:cd:1e:bd:2c:e8:b0:
2b:c0:ad:ac:1a:5a:4e:2d:64:ab:8b:19:c7:79:bc:f0:e0:b6:
b8:a7:ee:cd:54:4e:90:20:49:fa:a2:48:34:f9:ce:b0:a4:7e:
03:95:35:2f:e1:e2:bf:e9:c3:c5:50:31:c2:d1:74:d9:e5:a1:
98:6e:ac:05:33:50:65:28:0a:38:0e:67:6c:9a:52:d8:62:9f:
02:a6:c5:c7:95:62:4d:13:0a:32:f8:0a:ee:1a:9e:96:10:cc:
e8:58:39:2c:37:9e:66:2c:b5:ec:10:64:54:3f:3e:76:d6:3f:
3c:43:54:34:1c:aa:0f:0e:1f:ce:4f:cc:26:9b:6c:d2:5d:6a:
ec:1e:50:f7:61:89:ce:7d:1d:14:34:f4:fa:4f:ac:bd:c9:3c:
c2:c1:66:07:e7:b5:35:1f:6f:f2:89:e7:0d:c1:9f:93:f6:2c:
a0:b7:cc:68:0d:e6:e3:34:12:06:79:68:27:9c:9c:0e:c4:f1:
6f:49:36:48:fc:16:64:3f:14:1b:61:ab:2b:df:f8:db:aa:c3:
81:d6:f9:df:0b:27:b7:e8:fd:0d:ca:3e:48:78:ba:c7:d3:5e:
ae:30:f9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:45:29 2026 by rpki-client