Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xuAyGgjxqgeYHPpCWuoTk8qM2Ps.roa
File: xuAyGgjxqgeYHPpCWuoTk8qM2Ps.roa (raw, json)
Hash identifier: oGj6WhTKq9Gat2+A7dT1bS+Cb6V8DjkyOh23F0VE21U=
Subject key identifier: C6:E0:32:1A:08:F1:AA:07:98:1C:FA:42:5A:EA:13:93:CA:8C:D8:FB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A05A8E58F6D0D6AF4E2F5E5B587DE61DAE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xuAyGgjxqgeYHPpCWuoTk8qM2Ps.roa
Signing time: Tue 01 Sep 2026 01:21:13 +0000
ROA not before: Tue 01 Sep 2026 01:21:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:8e:58:f6:d0:d6:af:4e:2f:5e:5b:58:7d:e6:1d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 1 01:21:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6e0321a08f1aa07981cfa425aea1393ca8cd8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:20:5b:5c:b1:9f:19:86:40:4d:e3:c6:8a:dd:
28:30:fa:5f:87:db:54:f6:71:90:ef:2f:34:b3:db:
07:e8:c3:68:15:d8:ef:c0:2a:b8:8b:9e:c9:5a:61:
4e:ad:c8:50:1d:bb:b5:b5:49:e2:21:11:26:08:80:
7d:a8:39:16:f3:a3:eb:b2:66:58:81:3c:45:24:fa:
32:5e:e0:b8:7e:90:2f:e3:7f:a8:b1:1e:c9:4f:93:
78:86:27:ec:39:c1:db:fc:0f:19:80:1b:a8:b5:1f:
79:1b:79:3a:84:de:71:c8:0c:97:89:fa:ce:76:db:
d1:61:65:fd:d9:31:3b:25:d6:65:76:66:9e:3b:63:
2b:da:52:c3:54:d8:20:ee:80:12:bf:a8:db:5c:7d:
b5:40:d5:94:7a:19:ea:eb:ca:ee:23:f7:ca:3b:51:
a2:40:a8:e4:a1:a7:81:f9:39:54:5a:0a:24:5a:59:
0d:68:a6:7b:12:a1:f1:56:35:94:cc:d3:5a:11:54:
2c:39:29:41:c3:44:cf:6e:2c:5f:19:4b:fe:bf:f7:
cc:cb:88:00:96:95:e1:a6:1d:84:2e:cc:3a:1d:9a:
d1:b5:bc:67:18:31:a2:b2:c1:53:af:27:7e:41:23:
26:97:be:25:57:68:41:dc:67:ae:74:df:07:f9:e5:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E0:32:1A:08:F1:AA:07:98:1C:FA:42:5A:EA:13:93:CA:8C:D8:FB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xuAyGgjxqgeYHPpCWuoTk8qM2Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/24
94.156.14.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
70:83:da:80:09:90:e2:3a:07:7f:bc:50:82:0b:1b:1a:f6:6b:
fb:2e:cb:75:6c:f3:95:0e:f4:70:28:1e:7f:1b:0e:cf:db:dd:
68:3c:44:0b:86:ae:24:99:cb:da:74:66:49:f5:7d:fd:6d:07:
fc:3c:39:d2:b6:2f:c8:38:47:69:ef:be:94:70:5a:62:06:a1:
e7:73:1a:fc:5c:f3:67:65:19:10:86:5e:03:bb:54:01:14:d6:
52:6c:28:60:ee:df:09:ba:a9:c5:06:c3:bb:d2:09:ce:ed:71:
4a:eb:df:cc:3f:fb:7c:8d:72:61:33:1d:e0:c5:c6:1e:2f:dd:
2c:a3:ed:3c:4a:1f:69:63:f3:e7:b6:d3:d4:de:c1:5c:54:e0:
f2:b6:89:15:8f:33:6b:ec:66:7a:ef:a1:96:d3:6f:35:65:a7:
9d:9e:f9:6a:7b:7b:2d:e0:07:bc:b7:3a:23:83:fc:ec:62:73:
62:8b:15:c1:85:c5:b5:75:d0:c3:46:af:f4:a2:93:b8:52:6c:
a4:89:0e:b0:f2:40:ee:8d:57:40:16:5b:25:5f:33:97:be:fc:
31:da:dd:33:b1:e5:3c:0e:bb:a5:86:52:ee:d7:f9:51:ab:a1:
6d:a1:5d:40:0e:35:92:65:f8:7b:8d:e0:bb:d5:4f:8a:59:88:
36:87:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 06:20:09 2026 by rpki-client