Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/xGjt7iMzYkkciUQsunaukPqNj7U.roa
File: xGjt7iMzYkkciUQsunaukPqNj7U.roa (raw, json)
Hash identifier: CL0wtduWT/RDFc/f6weH+qdu0mspwAcw/W1JKae1F0E=
Subject key identifier: C4:68:ED:EE:23:33:62:49:1C:89:44:2C:BA:76:AE:90:FA:8D:8F:B5
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 01A155A6375840C91E1D94D658596D19DB70
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/xGjt7iMzYkkciUQsunaukPqNj7U.roa
Signing time: Mon 19 Oct 2026 19:31:58 +0000
ROA not before: Mon 19 Oct 2026 19:31:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218624
IP address blocks: 193.188.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:a6:37:58:40:c9:1e:1d:94:d6:58:59:6d:19:db:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Oct 19 19:31:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c468edee233362491c89442cba76ae90fa8d8fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:6c:a9:85:67:e7:a2:45:7a:1c:71:d9:6f:
06:f2:cb:cf:8b:48:01:f6:83:a6:85:06:6d:a5:98:
1c:90:fe:b9:82:6e:be:66:b0:f9:32:36:ef:d7:3d:
b8:dd:9e:df:2b:ef:55:0c:95:c8:62:59:ba:68:0e:
2b:8e:19:4f:b8:0f:05:72:33:2b:04:83:72:36:fa:
a4:5b:cd:29:43:ee:98:8b:aa:2d:f5:8a:f1:26:f0:
1a:f8:99:34:a1:c0:bd:da:ad:3b:6f:62:16:2e:0b:
67:cc:a1:36:4f:41:96:14:34:e8:c3:47:55:32:ca:
73:99:75:dc:70:bb:41:96:89:d1:ef:52:a4:8b:71:
b2:57:9e:2a:0f:d5:29:2c:1a:d2:56:7c:87:fb:37:
7b:80:21:ae:4d:ad:3b:1a:60:69:38:3c:5f:83:98:
63:b2:6d:ea:b9:b4:d9:da:1e:78:92:36:ff:4a:81:
61:21:a8:e5:92:16:09:80:c0:77:2b:d3:81:13:74:
6f:82:ba:56:7d:e7:ec:2e:29:e1:3e:7b:0e:32:1c:
33:c4:f6:83:d6:84:12:b2:a3:18:8b:96:68:30:21:
77:b6:02:b6:6c:76:8c:77:17:26:cc:9d:55:42:2f:
0d:83:b8:e8:01:98:0f:18:6b:e7:7d:c2:79:c0:81:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:68:ED:EE:23:33:62:49:1C:89:44:2C:BA:76:AE:90:FA:8D:8F:B5
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/xGjt7iMzYkkciUQsunaukPqNj7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.193.0/24
Signature Algorithm: sha256WithRSAEncryption
46:0c:38:0b:d8:51:cd:a4:10:e2:15:36:be:4a:a1:59:2d:b3:
d4:e1:e3:88:fa:a3:03:cb:33:af:c3:9c:c0:65:84:5f:63:17:
58:25:29:0a:3a:22:15:79:69:b8:8b:e5:73:43:5a:6e:e2:83:
ab:ce:98:96:19:c1:97:54:90:47:63:af:c4:a2:5b:c7:6f:16:
05:48:1d:13:15:5e:a2:f7:f4:37:4b:78:5f:25:cd:0e:1f:a8:
76:f9:db:d0:69:58:25:c4:14:73:d7:c3:c0:1c:16:23:93:74:
c7:f6:a8:f6:31:03:54:70:26:52:12:ec:3b:0c:05:f2:af:88:
0e:27:e1:c5:1b:3a:ea:d0:7d:6b:20:21:0c:3b:7b:4b:67:45:
36:3c:e4:d1:2f:24:dc:98:db:68:02:e9:f0:03:71:1c:e1:37:
69:e0:bf:9e:9a:4b:f1:38:9c:5d:3d:49:f9:d6:b0:c2:59:55:
5b:f7:7a:9c:0d:6b:b2:c6:75:70:76:c0:f9:4d:66:0a:20:96:
b0:84:8d:b6:24:2a:ea:c1:7d:c2:4e:d4:33:29:28:a5:36:9e:
b1:47:54:6a:d1:4d:c2:43:cf:bf:b6:fb:6a:9a:34:fa:5b:1c:
66:c1:26:af:aa:dc:9b:69:92:fc:8a:ef:39:a8:65:9c:57:77:
c0:1d:7a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:54:04 2026 by rpki-client