Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/XzZtnxp3XWeuQ2MSlh2AXKU4Zrk.roa
File: XzZtnxp3XWeuQ2MSlh2AXKU4Zrk.roa (raw, json)
Hash identifier: 6IrVpGhhVoGHetHKYtusGAzQo9WE7gJRizVJxG0dJrw=
Subject key identifier: 5F:36:6D:9F:1A:77:5D:67:AE:43:63:12:96:1D:80:5C:A5:38:66:B9
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019FEADADC3701828C04C986B86FEAB8C9F6
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/XzZtnxp3XWeuQ2MSlh2AXKU4Zrk.roa
Signing time: Mon 10 Aug 2026 08:47:19 +0000
ROA not before: Mon 10 Aug 2026 08:47:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62387
IP address blocks: 79.132.92.0/22 maxlen: 22
85.234.161.0/24 maxlen: 24
85.234.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:da:dc:37:01:82:8c:04:c9:86:b8:6f:ea:b8:c9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 10 08:47:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f366d9f1a775d67ae436312961d805ca53866b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:f9:77:f4:c2:f2:3b:3f:9e:ca:20:3a:f1:
af:66:7f:a5:e0:04:96:7f:e9:6b:55:6e:1d:d4:d9:
57:7d:de:dc:fc:29:ea:0e:49:11:8b:29:4a:94:83:
64:e3:86:2b:30:3f:25:f7:0f:39:af:e8:9b:61:c6:
33:b6:24:78:84:97:16:c9:be:33:31:bd:f6:a0:a9:
fe:b9:a3:64:ad:0b:34:51:2c:d9:bd:6d:c2:da:c2:
47:e9:b7:54:12:a0:58:d6:79:4e:6a:e1:d3:f4:1a:
72:d5:07:54:98:00:d7:89:44:9c:06:d1:8b:49:22:
ec:41:4c:cb:79:f2:18:b9:01:35:ef:61:cd:a9:d1:
64:e1:91:89:fc:dd:d8:0e:50:9b:f5:a2:0a:36:fa:
13:b4:39:11:65:4b:5a:ec:36:c7:94:1f:b8:06:71:
fd:22:29:a0:7a:83:13:d7:19:d1:58:1d:92:9c:1e:
53:34:1d:d0:02:20:2d:ff:76:ce:b3:8f:28:5f:e6:
60:1d:f2:ad:c9:e3:0c:38:5a:88:ea:cb:c0:95:f4:
9c:b8:99:b0:0b:38:06:37:61:a9:6a:be:94:9e:22:
59:ed:f6:28:37:f9:7e:af:1c:67:a1:c0:39:74:07:
0d:82:6c:97:50:b1:66:8a:c8:c0:fe:56:9a:64:54:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:36:6D:9F:1A:77:5D:67:AE:43:63:12:96:1D:80:5C:A5:38:66:B9
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/XzZtnxp3XWeuQ2MSlh2AXKU4Zrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.92.0/22
85.234.161.0-85.234.162.255
Signature Algorithm: sha256WithRSAEncryption
47:13:a8:dc:bb:96:5f:7e:b6:30:8f:41:a0:81:77:6c:c7:ca:
90:ef:98:ce:f8:e5:9f:2f:4e:31:e0:57:32:b4:ee:ee:6e:57:
3f:66:80:e9:92:74:04:02:89:e9:ad:ab:39:d7:e2:68:83:11:
78:2a:c8:90:51:d6:70:1c:eb:cf:0a:67:a2:e7:16:c3:da:7e:
53:e1:ec:51:e0:cc:e1:5d:d5:91:31:a9:f8:b3:da:5e:8a:43:
b4:a1:c3:99:b8:a1:ab:c1:60:d1:4d:bd:67:4b:6c:91:cb:3c:
9e:0e:37:68:40:2f:d8:61:17:87:69:82:d6:80:b0:94:b8:18:
b7:e4:55:0d:5a:64:5e:1e:8a:14:63:a0:df:98:bc:b7:0e:e0:
dd:bf:e6:06:ae:39:e6:77:bb:00:31:18:69:54:09:39:d0:2e:
dc:71:4a:76:58:dd:9e:be:74:ea:ee:93:3f:ed:9c:a4:04:77:
b5:69:9e:c9:fc:37:a4:a4:47:44:4c:5a:96:02:0c:9a:e2:25:
ab:78:84:0b:1c:5c:db:ec:96:40:e6:a6:f5:59:21:2c:19:86:
4a:b3:f8:d8:5a:43:76:2b:7f:77:d2:cf:03:2e:80:f5:2a:1e:
5e:9d:09:6e:f7:a9:d5:88:f2:34:d6:fd:c2:54:b7:f0:bc:1e:
cc:d9:8e:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:07 2026 by rpki-client