Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/XGqRnJ4CofJECXJzwAlV7SJh4V8.roa
File: XGqRnJ4CofJECXJzwAlV7SJh4V8.roa (raw, json)
Hash identifier: XEI0xhnT+pV8GiFR8nyVjb+Jp2qqtfyALCvoz0dFIWQ=
Subject key identifier: 5C:6A:91:9C:9E:02:A1:F2:44:09:72:73:C0:09:55:ED:22:61:E1:5F
Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial: 01A00F3467F67F94C9D9176081225DE0150F
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/XGqRnJ4CofJECXJzwAlV7SJh4V8.roa
Signing time: Mon 17 Aug 2026 10:11:27 +0000
ROA not before: Mon 17 Aug 2026 10:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272105
IP address blocks: 31.207.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:34:67:f6:7f:94:c9:d9:17:60:81:22:5d:e0:15:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
Validity
Not Before: Aug 17 10:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c6a919c9e02a1f244097273c00955ed2261e15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e5:ba:80:1b:ac:da:10:a7:7f:7e:4d:50:e9:
9b:83:32:6c:15:86:3d:82:ad:d2:ce:d6:39:f4:fa:
90:00:09:bd:4d:35:3a:31:2d:80:bf:49:2c:d4:84:
f7:6c:5d:c5:01:15:c3:2e:94:3d:ea:f2:1c:99:71:
50:40:60:19:07:dd:f7:a3:be:81:22:bc:48:4d:42:
f7:ef:04:6e:f7:4f:fd:bc:f0:3f:6f:9f:0e:96:a3:
77:3a:6d:5a:a0:4e:9e:bb:ba:1b:7d:3b:ba:23:44:
2b:99:f7:95:00:9e:b4:47:fc:bd:60:b9:56:f1:81:
a1:fa:4c:c0:50:5e:11:04:f8:3e:5e:9c:b6:a1:a4:
6b:31:1c:76:db:ca:20:07:59:dd:8f:a5:81:d7:40:
da:7e:a7:af:13:6c:ff:6a:40:43:5b:f5:87:99:8a:
3a:2a:58:ca:94:b1:86:11:da:5f:80:f2:a9:db:91:
99:55:f0:18:19:36:93:aa:99:66:79:eb:70:c0:e0:
15:14:92:65:86:4f:ad:e9:86:e4:f9:bf:17:e4:37:
50:c7:60:ea:4e:30:c7:e3:c4:db:92:7c:5e:c9:98:
b4:27:c5:fa:d5:4c:71:f5:de:45:54:a7:54:3d:b9:
a0:1c:d4:c3:64:8c:51:43:a7:25:bf:a1:b9:80:0d:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6A:91:9C:9E:02:A1:F2:44:09:72:73:C0:09:55:ED:22:61:E1:5F
X509v3 Authority Key Identifier:
keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/XGqRnJ4CofJECXJzwAlV7SJh4V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:0f:e3:cc:56:b2:2e:a8:37:a9:5e:aa:bf:9a:b8:fd:f6:f0:
04:32:e1:cb:e7:60:14:ec:08:23:02:30:63:15:0b:c8:d1:12:
ef:07:c2:bf:60:4b:70:21:a6:bc:a1:02:50:a9:6a:c2:d1:29:
44:9f:c1:08:a0:e5:f8:44:6d:b9:4c:1c:ad:5b:f9:8b:80:ad:
7d:07:30:82:4f:dd:ca:e7:71:f1:c4:99:37:39:71:b7:44:5d:
2a:ae:19:e3:f1:cb:af:84:0a:69:ff:8e:5a:ab:87:11:aa:f8:
ab:f9:51:1c:2d:f5:30:aa:5a:7b:7b:51:42:95:59:94:8a:9a:
81:be:90:fb:98:74:ee:e0:e7:07:c4:46:1f:ea:26:7a:cb:3a:
93:89:cb:c3:9f:6d:d7:65:53:8f:f4:8c:77:d7:ac:32:3c:12:
f6:e1:6e:f9:a7:b9:f9:e4:b6:d8:c5:bd:53:0a:10:95:e4:8a:
2b:3d:78:3c:e1:d0:96:dc:8f:8e:69:6d:3e:f0:5c:a1:a4:cb:
c1:37:ac:66:17:c0:db:89:45:65:9a:aa:4f:8c:81:84:e7:b0:
44:c4:d0:34:a2:c2:bc:e0:f4:1b:c6:99:3a:4f:8b:0b:5a:71:
cb:93:08:76:42:8f:63:b6:1b:ee:0b:13:ea:54:f3:07:65:e1:
aa:6b:e8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:22:19 2026 by rpki-client