Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/pxlXr9sUSjIqFgXbd9sR-GcE580.roa
File: pxlXr9sUSjIqFgXbd9sR-GcE580.roa (raw, json)
Hash identifier: QivBnRPkhkpLbexDZpsfTuH4eBEzkCeooTxQJXFlmDo=
Subject key identifier: A7:19:57:AF:DB:14:4A:32:2A:16:05:DB:77:DB:11:F8:67:04:E7:CD
Certificate issuer: /CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Certificate serial: 019F2368F4A6FEF9A6F51D2C6171140209E8
Authority key identifier: 23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/pxlXr9sUSjIqFgXbd9sR-GcE580.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8839
IP address blocks: 88.151.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f4:a6:fe:f9:a6:f5:1d:2c:61:71:14:02:09:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a71957afdb144a322a1605db77db11f86704e7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:01:09:d5:94:26:9d:13:b0:96:59:45:ff:
47:40:16:5b:81:cf:88:35:b7:c7:33:1b:c2:ae:1e:
51:f9:70:4e:83:a3:4d:6e:93:f8:f0:64:30:dc:91:
b0:20:b8:59:83:3e:e0:62:10:f9:73:9a:03:e7:af:
66:75:1b:b5:2f:86:11:21:b2:04:54:ed:b2:b0:89:
69:e4:78:7d:08:66:dd:a7:c2:38:14:96:56:76:37:
a6:7c:19:a1:26:ad:9d:48:59:d4:4f:1a:31:a6:ae:
af:01:d3:5f:44:5d:a9:a3:dd:ad:bf:9b:c7:48:ff:
02:cd:b6:12:da:a7:7e:05:54:b6:0d:69:b3:8d:ca:
29:bc:f2:02:04:f0:e2:1d:55:22:ca:7a:e0:74:d3:
ef:1b:b7:2c:7b:18:1f:e7:aa:d8:fe:bf:63:66:98:
55:b9:50:dd:ba:76:79:73:d6:da:8c:88:10:d6:a7:
0a:95:b9:fe:55:1a:00:69:92:69:d7:09:3a:72:80:
cc:af:40:22:30:c1:04:0d:ed:20:ea:e2:ed:ea:25:
1b:25:2f:4b:34:e2:2e:0a:27:f8:73:b2:8a:3f:b4:
82:37:d6:a1:7c:5a:6c:6f:3f:47:34:29:d5:d4:6b:
cb:28:22:59:c6:59:89:72:2a:28:d6:67:20:e0:b3:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:19:57:AF:DB:14:4A:32:2A:16:05:DB:77:DB:11:F8:67:04:E7:CD
X509v3 Authority Key Identifier:
keyid:23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/pxlXr9sUSjIqFgXbd9sR-GcE580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.14.0/24
Signature Algorithm: sha256WithRSAEncryption
16:55:d5:23:95:0d:01:ca:37:67:65:2f:13:30:b2:e1:a3:da:
84:d6:46:91:94:b4:dd:c5:23:f1:0f:68:10:d3:1e:5e:96:d8:
16:a0:db:3a:6e:2c:8e:71:30:41:50:21:00:68:22:50:26:23:
9a:44:14:e6:9e:70:db:c6:0b:64:b6:a8:6b:b5:1b:1d:7c:c2:
ac:25:cf:13:1f:b9:2f:68:f0:e7:6b:91:b7:3b:41:87:bb:fb:
27:d2:f6:6e:ba:fd:94:3e:0e:81:a6:73:21:e8:92:e4:72:b3:
7b:1f:1e:fd:ef:f8:52:dd:01:a6:f1:ab:49:68:8e:8c:54:c4:
72:ef:2f:f0:bb:77:3d:b4:cb:89:4f:01:3d:b2:60:99:36:c6:
1f:4f:e8:20:eb:97:b0:d6:49:51:16:cb:79:34:1f:0e:20:6e:
32:9a:39:63:93:89:0e:98:64:09:27:f6:86:d2:77:12:58:8c:
83:8d:c5:d9:da:75:9b:0f:28:0f:e0:56:17:ca:58:70:e4:4c:
96:8c:18:fd:6c:b1:cd:d7:fd:cd:c1:4c:6b:32:e9:a9:e8:17:
5d:94:45:6b:36:60:d4:12:e6:da:c2:cc:18:a7:8a:ee:32:b9:
3d:af:d7:4f:f3:06:83:4b:07:42:31:1f:38:8b:f1:b0:90:88:
af:14:7d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:03:15 2026 by rpki-client