Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/XT0TwWf3saDmUZLJkEZTVoj08Go.roa
File: XT0TwWf3saDmUZLJkEZTVoj08Go.roa (raw, json)
Hash identifier: IK7s2dRYQhCtsnAJ87ZpG0v9gy5QrOO4Jv4XvFQQKxY=
Subject key identifier: 5D:3D:13:C1:67:F7:B1:A0:E6:51:92:C9:90:46:53:56:88:F4:F0:6A
Certificate issuer: /CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Certificate serial: 019EF5021747133675FC149A434A837A27AD
Authority key identifier: AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/XT0TwWf3saDmUZLJkEZTVoj08Go.roa
Signing time: Tue 23 Jun 2026 15:03:35 +0000
ROA not before: Tue 23 Jun 2026 15:03:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211170
IP address blocks: 193.42.22.0/24 maxlen: 24
2a09:3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:02:17:47:13:36:75:fc:14:9a:43:4a:83:7a:27:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Validity
Not Before: Jun 23 15:03:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d3d13c167f7b1a0e65192c99046535688f4f06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:84:a5:c8:1d:3d:d0:9b:0b:b7:ba:fc:ce:
43:ef:f0:79:23:f1:9a:00:0c:c3:75:c4:9c:8b:8c:
48:41:3c:da:69:38:8c:3b:95:05:e6:db:72:f3:d2:
1f:e8:cb:c0:30:93:be:3a:a6:df:6c:20:fd:e4:39:
c5:ab:c3:87:8d:62:0f:39:ab:68:da:0f:aa:2b:af:
19:b5:f1:dc:0d:e7:cc:d9:28:dc:68:3f:6a:ad:8d:
c0:ea:b3:13:79:23:35:87:a8:fc:ab:ab:1a:12:79:
7a:a9:67:0a:0e:bf:86:3b:3c:bf:39:8e:77:e3:c0:
ae:2b:9c:33:07:31:76:8b:e5:e6:e1:29:a0:30:b1:
5f:01:1b:23:57:5d:74:33:dd:de:f7:c1:95:be:d7:
ed:58:97:2f:0b:29:a8:af:17:db:3f:54:1f:11:3e:
2d:a6:bd:47:c9:86:39:f7:81:08:93:cf:8a:7e:2b:
a5:ae:41:40:bb:51:c4:7b:3c:f5:fd:13:9e:a3:d9:
63:f1:fd:15:1f:c6:7f:92:a1:41:db:86:4a:2b:46:
02:13:8f:9e:ed:65:7a:16:a7:f8:a6:3c:f7:26:61:
84:f7:9e:80:e9:9c:66:b7:a8:4f:84:5c:7a:02:87:
61:65:5e:3b:81:75:8c:7f:50:8e:dd:f9:72:d4:f1:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3D:13:C1:67:F7:B1:A0:E6:51:92:C9:90:46:53:56:88:F4:F0:6A
X509v3 Authority Key Identifier:
keyid:AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/XT0TwWf3saDmUZLJkEZTVoj08Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.22.0/24
IPv6:
2a09:3c0::/29
Signature Algorithm: sha256WithRSAEncryption
53:d8:7f:fa:e5:26:11:f8:21:56:81:1e:a3:74:a6:42:19:4f:
22:ab:98:c5:05:12:4d:86:e3:7d:f3:20:92:1f:11:c5:ed:4b:
f9:57:b1:36:f2:cb:e3:56:5e:9e:f1:b5:0d:5d:b0:0f:ce:48:
8a:18:fc:bb:53:0f:e0:45:29:dc:76:fe:a2:42:49:fb:d8:27:
4e:5c:b5:a5:2b:0f:2c:45:c1:21:07:c9:53:1c:5e:c2:4b:53:
d5:03:ef:be:7e:e7:11:a6:23:77:5e:99:30:bd:34:6a:a9:29:
7d:13:61:d0:ba:35:54:29:ba:2a:d8:a9:cd:5d:7f:e1:c4:44:
18:a9:90:da:8d:13:dc:ec:bc:ad:a1:d7:e4:85:33:a5:c1:9e:
91:23:c8:01:62:30:d8:44:41:a3:42:d3:d3:69:9c:bb:5f:a9:
76:80:ee:9e:b3:63:02:df:b5:66:da:a8:0c:32:e0:94:00:93:
cc:28:bb:2e:e7:9e:6f:2d:9f:6b:19:fa:6f:75:e5:53:f3:4e:
65:5b:dd:44:98:20:8c:ab:13:63:79:84:a3:f1:2f:20:ca:a4:
6a:30:94:63:e7:8a:5b:dd:66:33:59:23:88:98:5e:87:2d:0c:
98:54:63:d5:f4:61:d4:81:0c:cb:39:b5:b7:47:4b:09:20:17:
69:37:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:37 2026 by rpki-client