Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/xRkuggtUsWPX1CZItcVFqyWAcxw.roa
File: xRkuggtUsWPX1CZItcVFqyWAcxw.roa (raw, json)
Hash identifier: m7exX/tnvEsWXCcIVUMghbchGT+uUqq23xo4bmK0dao=
Subject key identifier: C5:19:2E:82:0B:54:B1:63:D7:D4:26:48:B5:C5:45:AB:25:80:73:1C
Certificate issuer: /CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Certificate serial: 019F2368A09BCC8CBE561DF67802D25DB425
Authority key identifier: 03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/xRkuggtUsWPX1CZItcVFqyWAcxw.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 137.44.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 21:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a0:9b:cc:8c:be:56:1d:f6:78:02:d2:5d:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5192e820b54b163d7d42648b5c545ab2580731c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:e4:1a:67:fa:23:13:5f:6a:cb:40:6a:1f:
1e:75:f4:8e:ec:0a:6b:47:e0:e7:8b:e6:ea:eb:95:
2e:9a:6e:c0:8f:83:27:05:1a:7e:f2:e9:51:16:50:
2b:73:f9:f4:a3:a5:af:b9:fd:31:6d:62:0a:6e:1a:
36:8f:26:39:95:87:a0:1f:81:5d:00:1a:9d:3d:5c:
b3:3c:19:61:15:cc:f0:bf:d6:30:03:53:fb:2a:b3:
d7:2d:77:31:57:bd:f5:73:05:c7:59:f6:b1:41:d1:
36:8f:9b:04:c6:9a:6e:9f:98:05:b1:f4:0e:11:72:
e0:89:05:d0:bd:fd:a9:90:8c:35:fb:0d:1a:d1:92:
16:5f:1b:1b:d8:50:66:2d:51:23:65:92:12:ef:c1:
3d:e8:5f:96:79:ca:51:f7:0c:87:0d:f6:04:65:a5:
bd:e5:00:8d:d7:d1:60:79:c7:44:5a:de:f5:e8:ce:
8d:27:6b:42:7a:9a:77:60:ad:e0:75:51:60:9a:a1:
f3:b0:d1:bb:39:6c:93:26:d2:16:7e:ed:a4:e9:38:
de:cd:19:4d:d4:1e:77:9d:d8:64:9c:9a:ed:2c:a9:
56:fa:8e:3f:57:c2:a5:3b:86:0f:09:47:76:4c:d4:
e2:5b:18:a5:df:d6:27:19:79:29:6d:72:5e:f0:df:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:19:2E:82:0B:54:B1:63:D7:D4:26:48:B5:C5:45:AB:25:80:73:1C
X509v3 Authority Key Identifier:
keyid:03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/xRkuggtUsWPX1CZItcVFqyWAcxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.44.127.0/24
Signature Algorithm: sha256WithRSAEncryption
26:93:ad:cd:26:74:60:6b:77:c3:64:63:04:55:9e:61:e8:84:
3e:a7:09:f7:0f:54:d3:12:5c:81:30:7f:48:70:59:bf:fd:24:
73:4e:88:ce:9b:4d:f8:95:86:3b:d6:c7:88:26:7b:f7:68:f0:
fd:19:a9:a9:b2:ba:de:8b:66:f6:dd:69:45:91:ee:bb:7a:17:
9c:62:e4:ea:7c:4c:41:f5:c8:cb:ac:1f:17:ff:ad:73:49:ba:
e4:95:f5:cf:b8:91:a2:5c:77:00:ce:a0:25:69:3a:30:dd:d0:
5a:3f:84:68:2c:a7:7e:a8:f9:97:e7:68:a0:3b:04:63:40:f1:
3e:69:3c:4c:bc:51:9a:0c:73:96:b2:34:e8:4b:f7:1d:84:d9:
d3:9f:10:26:97:4c:24:f3:d7:d7:e9:91:94:42:14:34:32:8e:
3d:fb:ff:0e:94:c6:df:dd:91:c8:8d:01:2b:df:48:b5:ca:05:
b2:10:51:b8:51:34:c2:d5:50:ee:59:14:4f:d1:d7:1b:e2:73:
42:83:88:b7:22:f4:8f:dc:e3:be:bb:09:f2:dd:36:bb:ef:42:
d4:a3:b7:bb:49:02:ac:7d:ef:76:ba:bd:f4:c4:34:01:09:a2:
40:8d:f6:18:40:68:c3:28:c8:f9:d8:99:cd:14:70:e5:5e:7b:
02:68:9c:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaKCbzIy+Vh32eALSXbQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOWU5N2UzM2Q2N2M3ZTI5NTAwMjhhOTQxZTViZDBkYjI2
NjU3ZmQwHhcNMjYwNzAyMTUxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTE5MmU4MjBiNTRiMTYzZDdkNDI2NDhiNWM1NDVhYjI1ODA3MzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzobkGmf6IxNfastAah8edfSO7Apr
R+Dni+bq65Uumm7Aj4MnBRp+8ulRFlArc/n0o6Wvuf0xbWIKbho2jyY5lYegH4Fd
ABqdPVyzPBlhFczwv9YwA1P7KrPXLXcxV731cwXHWfaxQdE2j5sExppun5gFsfQO
EXLgiQXQvf2pkIw1+w0a0ZIWXxsb2FBmLVEjZZIS78E96F+WecpR9wyHDfYEZaW9
5QCN19FgecdEWt716M6NJ2tCepp3YK3gdVFgmqHzsNG7OWyTJtIWfu2k6TjezRlN
1B53ndhknJrtLKlW+o4/V8KlO4YPCUd2TNTiWxil39YnGXkpbXJe8N80OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMUZLoILVLFj19QmSLXFRaslgHMcMB8GA1UdIwQY
MBaAFAOel+M9Z8filQAoqUHlvQ2yZlf9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTU2WDR6MW54LUtWQUNpcFFlVzlEYkptVl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wN2Y5MDctZjc5Ni00ZDdiLWIxY2Mt
NzJiOGQ2ZGQzN2IzLzEveFJrdWdndFVzV1BYMUNaSXRjVkZxeVdBY3h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wN2Y5MDctZjc5Ni00ZDdiLWIxY2MtNzJiOGQ2ZGQzN2Iz
LzEvQTU2WDR6MW54LUtWQUNpcFFlVzlEYkptVl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiSx/MA0G
CSqGSIb3DQEBCwUAA4IBAQAmk63NJnRga3fDZGMEVZ5h6IQ+pwn3D1TTElyBMH9I
cFm//SRzTojOm034lYY71seIJnv3aPD9Gampsrrei2b23WlFke67ehecYuTqfExB
9cjLrB8X/61zSbrklfXPuJGiXHcAzqAlaTow3dBaP4RoLKd+qPmX52igOwRjQPE+
aTxMvFGaDHOWsjToS/cdhNnTnxAml0wk89fX6ZGUQhQ0Mo49+/8OlMbf3ZHIjQEr
30i1ygWyEFG4UTTC1VDuWRRP0dcb4nNCg4i3IvSP3OO+uwny3Ta770LUo7e7SQKs
fe92ur30xDQBCaJAjfYYQGjDKMj52JnNFHDlXnsCaJxe
-----END CERTIFICATE-----
Generated at Fri Jul 17 06:06:37 2026 by rpki-client