Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/XZy9Rg9MZLW88w93deJPs6Mbh1Q.roa
File: XZy9Rg9MZLW88w93deJPs6Mbh1Q.roa (raw, json)
Hash identifier: CTnuJkHuEdvyE2199+HyL39pwCCPv/xCbcizmK9wVZQ=
Subject key identifier: 5D:9C:BD:46:0F:4C:64:B5:BC:F3:0F:77:75:E2:4F:B3:A3:1B:87:54
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 019FC6AE24D389A31D87EA31165A334F7960
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/XZy9Rg9MZLW88w93deJPs6Mbh1Q.roa
Signing time: Mon 03 Aug 2026 08:12:09 +0000
ROA not before: Mon 03 Aug 2026 08:12:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 141.226.109.0/24 maxlen: 24
141.226.110.0/24 maxlen: 24
141.226.252.0/22 maxlen: 24
144.249.128.0/18 maxlen: 24
167.17.128.0/19 maxlen: 24
167.86.54.0/24 maxlen: 24
167.86.55.0/24 maxlen: 24
185.139.240.0/22 maxlen: 24
2a07:1980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:ae:24:d3:89:a3:1d:87:ea:31:16:5a:33:4f:79:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Aug 3 08:12:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d9cbd460f4c64b5bcf30f7775e24fb3a31b8754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:1f:fd:29:21:ed:4e:12:ea:26:ea:73:b8:
e8:2e:e8:c6:52:00:34:39:ed:2a:48:92:07:da:4f:
ed:c1:03:49:68:e3:42:9c:fe:00:43:2a:da:46:2c:
66:83:63:cc:35:01:cc:2d:e5:66:8d:4a:3b:93:52:
6a:c1:c6:73:97:1a:70:e8:17:f9:d6:ef:89:c5:38:
0c:25:79:4a:4c:31:56:97:4a:77:92:05:0c:dc:21:
86:ed:05:9b:0b:3f:03:50:2f:ac:90:9a:bd:3b:e7:
51:26:33:ad:f8:f5:c3:ef:72:32:ea:65:5e:1c:65:
cd:f8:08:38:7b:bf:c4:86:95:d4:78:de:e0:42:fe:
0a:9f:85:77:dd:51:31:14:bc:60:5b:8a:ee:ea:01:
f6:ef:f1:63:13:72:b1:2e:57:b5:6a:0f:13:30:3c:
0f:8b:f0:53:b1:a8:1f:6b:a0:81:ab:c2:a2:e6:ce:
b8:e1:d2:d4:51:2f:7f:8b:08:e2:ab:5d:08:12:d4:
26:51:45:d1:83:7e:9b:3f:ed:57:99:c5:63:61:cb:
1a:c6:46:2e:ae:53:77:29:f3:c3:6b:d5:0f:6e:5e:
e1:25:fa:98:00:0d:6a:0a:27:6a:53:d2:d6:fb:fb:
43:1a:26:f3:60:62:35:43:ed:bf:e8:ea:cb:80:39:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9C:BD:46:0F:4C:64:B5:BC:F3:0F:77:75:E2:4F:B3:A3:1B:87:54
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/XZy9Rg9MZLW88w93deJPs6Mbh1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.109.0-141.226.110.255
141.226.252.0/22
144.249.128.0/18
167.17.128.0/19
167.86.54.0/23
185.139.240.0/22
IPv6:
2a07:1980::/29
Signature Algorithm: sha256WithRSAEncryption
8f:92:ef:00:b3:5b:83:68:d1:3b:bf:db:24:97:0e:21:82:ca:
6c:25:85:84:c4:08:6b:7a:3e:49:22:54:51:8f:22:35:cd:70:
76:57:3f:99:ad:a8:29:fb:36:b1:b3:8e:1a:a3:57:f9:ad:2d:
1e:99:fc:55:95:12:a8:d0:f1:90:b2:0b:2a:e9:cf:ae:22:10:
a3:69:0e:2c:58:d6:f1:f3:31:e8:20:71:26:7d:5d:8f:d2:3e:
76:b0:35:13:24:09:ea:aa:ea:a7:ec:8f:3e:ac:3b:07:71:0c:
da:96:45:87:ae:23:3e:0b:57:84:cc:c2:08:be:ea:d8:cb:3f:
8b:36:88:52:c9:a8:d0:90:4b:27:15:93:09:13:95:17:52:a2:
d9:fb:89:4e:e4:b5:58:58:e9:ac:f7:5d:32:97:80:9a:e6:5f:
78:62:c1:07:b7:27:67:70:a8:e9:da:ac:30:9c:35:7a:2c:c5:
db:30:49:a1:04:05:ff:0e:c3:61:41:f0:65:79:ab:c2:a6:f4:
e4:51:ce:60:47:62:ee:8e:4a:d4:4b:93:92:a1:ee:a4:67:e4:
34:f0:bc:df:e9:72:7e:91:b2:73:91:ad:a6:2d:04:5f:a1:f1:
7c:0b:2f:0b:ac:37:2a:31:26:07:b1:8f:80:ff:2e:fd:fe:a2:
d1:28:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:04:07 2026 by rpki-client