Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/nXeUEOivUjA7kz1X4OYQ31n8dd0.roa
File: nXeUEOivUjA7kz1X4OYQ31n8dd0.roa (raw, json)
Hash identifier: wyPbkGzk/5Raofzogtfr898fWXfnQRNDjtkAo2d0BIo=
Subject key identifier: 9D:77:94:10:E8:AF:52:30:3B:93:3D:57:E0:E6:10:DF:59:FC:75:DD
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 01A11D9FAD9F4CE11C599CFA9C13F5040E75
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/nXeUEOivUjA7kz1X4OYQ31n8dd0.roa
Signing time: Thu 08 Oct 2026 22:26:06 +0000
ROA not before: Thu 08 Oct 2026 22:26:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218910
IP address blocks: 206.245.213.0/24 maxlen: 24
206.245.214.0/24 maxlen: 24
206.245.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:9f:ad:9f:4c:e1:1c:59:9c:fa:9c:13:f5:04:0e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Oct 8 22:26:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d779410e8af52303b933d57e0e610df59fc75dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:82:fd:55:6c:ae:40:09:07:cf:34:b2:b5:
d5:6c:70:d7:4c:fa:fe:16:e8:20:d0:25:97:50:b5:
2d:54:04:c9:6c:17:cc:a1:91:73:3f:1a:bb:e2:04:
b0:83:ef:f0:e3:62:32:fb:e5:ff:18:e5:41:ed:d0:
52:bf:8f:a2:22:a9:2c:28:47:dd:a1:f7:2c:a3:66:
c6:14:eb:ff:ca:c2:d6:82:89:c9:28:00:13:fe:c1:
02:02:5d:f5:f0:a4:89:c6:cc:f7:8a:75:bf:36:09:
f0:72:68:3a:b8:ae:dc:66:72:eb:c1:98:8d:59:8a:
fa:0a:55:61:cb:25:2a:91:b8:06:17:ac:b6:30:a3:
66:08:04:e8:f8:c7:b2:9f:9e:69:8d:9d:29:2d:f7:
7d:e2:4d:2b:b7:d9:12:cf:b9:ff:ce:f6:be:35:17:
69:eb:1e:11:10:03:ff:90:c3:01:ae:9f:b9:c9:96:
ff:5b:19:4a:28:5c:38:c1:03:7a:55:32:d0:2c:cd:
d1:af:ea:6f:6f:c8:53:ca:55:31:fd:3a:30:37:93:
d0:96:bc:d6:11:12:c5:41:76:9c:40:ca:b0:18:8d:
d3:62:93:be:d9:b4:c4:6b:8d:61:10:2e:d6:df:32:
7c:4a:30:d7:a7:f1:7e:4a:e9:6e:f5:7e:90:5b:44:
42:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:77:94:10:E8:AF:52:30:3B:93:3D:57:E0:E6:10:DF:59:FC:75:DD
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/nXeUEOivUjA7kz1X4OYQ31n8dd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.213.0-206.245.215.255
Signature Algorithm: sha256WithRSAEncryption
7e:ba:cf:19:e9:8e:93:36:2e:0b:8a:a9:4e:15:8e:41:b6:82:
ef:9f:3c:1a:99:a7:ce:4a:26:93:f7:f2:a7:83:87:5d:12:54:
94:f5:28:1e:b2:86:b3:02:9b:2c:d3:54:5f:21:c7:41:20:73:
55:d7:dd:dc:d5:1a:00:fb:e2:1c:f1:18:25:fc:7f:3d:31:06:
8e:ee:d7:76:1d:98:aa:51:f2:e1:ff:2f:64:f7:ae:dc:7a:23:
0f:b9:c0:b2:fa:d7:61:5d:cc:1d:a8:95:03:e3:cf:be:05:5a:
ca:8b:21:6f:7e:1c:ac:68:1f:91:b8:37:a4:0c:72:b0:86:ac:
19:89:6a:5c:3f:08:5e:e3:85:9a:75:76:ef:61:8e:30:c9:99:
e8:bd:8f:72:13:ce:be:48:7a:c7:a1:0b:df:53:82:04:39:4c:
27:41:a3:e5:b9:9e:75:91:ae:f0:5e:b2:1d:7b:df:0e:39:44:
17:ba:c7:a9:c0:73:57:cc:c0:4e:0a:ce:99:c6:3e:5c:18:28:
0a:53:68:92:09:68:f1:72:18:a6:35:1b:26:a8:cb:d2:f9:ec:
13:a4:f2:d2:08:5b:a2:c6:2a:10:77:42:a6:6e:a7:4d:ff:e6:
1f:53:42:db:1c:a9:10:fc:0b:95:82:fc:16:b9:d3:5c:8a:7f:
a3:a8:f0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:51:56 2026 by rpki-client