Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Xi1n82G6gX7UAY2_fbZogWirIn4.roa
File: Xi1n82G6gX7UAY2_fbZogWirIn4.roa (raw, json)
Hash identifier: DgSYKj3HKBtQlWF7ILEGvT4SnZn/5ZATo7Dhfv1URjQ=
Subject key identifier: 5E:2D:67:F3:61:BA:81:7E:D4:01:8D:BF:7D:B6:68:81:68:AB:22:7E
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019F29118CA2FA3ADB60D946C540635E48B2
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Xi1n82G6gX7UAY2_fbZogWirIn4.roa
Signing time: Fri 03 Jul 2026 17:40:43 +0000
ROA not before: Fri 03 Jul 2026 17:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20115
IP address blocks: 9.236.0.0/16 maxlen: 16
36.255.212.0/24 maxlen: 24
94.154.183.0/24 maxlen: 24
103.216.199.0/24 maxlen: 24
161.104.112.0/20 maxlen: 20
162.218.91.0/24 maxlen: 24
185.171.126.0/24 maxlen: 24
212.60.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:11:8c:a2:fa:3a:db:60:d9:46:c5:40:63:5e:48:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jul 3 17:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e2d67f361ba817ed4018dbf7db6688168ab227e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c7:ac:b0:bf:95:8f:c4:29:19:dd:6e:07:d6:
bf:8d:47:1c:12:a1:d0:5d:6f:6c:fd:1b:5e:9c:f6:
d8:fa:34:49:7e:4c:95:2d:4b:50:c4:e0:c3:3d:d2:
8d:06:ad:4f:d0:a6:00:76:b6:54:2d:8e:6b:2a:13:
6e:ef:ca:66:a2:18:bc:65:be:e6:82:5a:ce:cc:8c:
8a:79:7a:07:ea:4b:3c:90:96:49:d5:91:b0:66:98:
a5:4f:23:d5:d3:cc:e8:ea:a2:55:8e:09:6b:80:4b:
26:8a:ce:75:34:5e:9a:00:a5:72:5e:9c:98:e1:97:
5d:55:e9:57:a6:42:7f:67:36:13:b1:3e:68:26:ba:
bb:56:f2:bc:72:a5:6d:05:7d:dc:14:da:bd:8d:55:
82:e2:f4:d0:f4:48:04:3f:4a:a6:69:26:57:6f:5b:
83:c7:b9:03:39:d5:4c:93:b7:60:16:1a:04:da:3b:
5f:d7:c5:13:5a:68:32:64:b8:6f:df:67:01:82:bf:
96:22:81:3d:9e:80:05:71:e1:cd:27:74:c0:fb:17:
0c:63:dc:a8:bf:f5:44:ed:09:ed:70:33:09:8d:a5:
1c:66:9b:91:6b:89:44:91:84:df:ca:78:c3:00:c4:
65:12:56:9f:9f:b7:6d:e2:8a:fc:07:e6:bb:f1:33:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2D:67:F3:61:BA:81:7E:D4:01:8D:BF:7D:B6:68:81:68:AB:22:7E
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Xi1n82G6gX7UAY2_fbZogWirIn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.236.0.0/16
36.255.212.0/24
94.154.183.0/24
103.216.199.0/24
161.104.112.0/20
162.218.91.0/24
185.171.126.0/24
212.60.14.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3a:7e:9f:80:96:86:e9:8d:94:ca:c4:9a:ef:7a:3e:70:7d:
a4:8e:12:8f:d8:e7:02:bf:f1:0c:be:e4:2a:62:09:12:97:6e:
5a:72:f8:ef:b7:85:9e:28:f8:ce:b5:98:d3:1e:2d:90:98:06:
48:3f:ee:a4:12:30:c3:f6:a7:b9:c1:b8:c0:2a:38:c8:3e:2d:
27:80:95:78:30:8f:f1:c4:e4:06:77:7c:cd:08:ab:4f:fe:fa:
62:b1:3e:0e:3d:f7:1a:5c:a3:f9:e3:95:45:bc:41:a5:cf:97:
72:80:f7:91:36:41:79:f6:97:20:33:a7:3d:b0:62:f2:89:33:
8b:2b:d5:4d:40:8f:1d:ab:8c:a5:a5:e3:89:66:c4:6e:90:35:
ba:13:19:9b:5e:56:78:4b:5f:b3:17:41:79:cb:be:3e:43:c7:
18:08:c9:cd:1e:20:33:5c:e4:38:7d:d0:93:ba:49:21:fa:89:
7c:dd:67:16:77:b1:8f:4c:c1:6c:d7:44:57:66:5b:13:f8:cf:
16:16:c4:d8:70:c5:da:70:7d:a1:f3:56:ff:3f:9a:67:89:f0:
b2:6e:b5:e0:db:39:74:42:35:58:9f:85:08:a7:12:68:79:0e:
92:52:50:5b:fa:aa:68:90:80:f4:8e:0c:9a:2b:eb:73:25:dc:
4c:fb:e4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:24 2026 by rpki-client