Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/XGU20dvPzEFLqBGtUHgnqD1uNvc.roa
File: XGU20dvPzEFLqBGtUHgnqD1uNvc.roa (raw, json)
Hash identifier: 0V5jjdVeq5pbW8veVvISrROlp96kJcnyw85WkEAIovA=
Subject key identifier: 5C:65:36:D1:DB:CF:CC:41:4B:A8:11:AD:50:78:27:A8:3D:6E:36:F7
Certificate issuer: /CN=a887bbe8b05ead0e2e4484f81cc8d3cd34d524c5
Certificate serial: 01A014A7AA7E4522AECC04F8DE1C5C19672A
Authority key identifier: A8:87:BB:E8:B0:5E:AD:0E:2E:44:84:F8:1C:C8:D3:CD:34:D5:24:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/XGU20dvPzEFLqBGtUHgnqD1uNvc.roa
Signing time: Tue 18 Aug 2026 11:35:27 +0000
ROA not before: Tue 18 Aug 2026 11:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 217.180.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:a7:aa:7e:45:22:ae:cc:04:f8:de:1c:5c:19:67:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a887bbe8b05ead0e2e4484f81cc8d3cd34d524c5
Validity
Not Before: Aug 18 11:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c6536d1dbcfcc414ba811ad507827a83d6e36f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:00:39:b2:f2:d1:96:0c:70:e6:2f:39:21:
f7:d4:ad:d4:e2:b7:4f:c0:90:12:0f:de:99:b0:eb:
5e:11:15:c6:8b:bc:c7:9c:d9:52:2d:35:64:88:66:
58:09:ec:95:39:f4:98:3d:93:97:db:39:a1:ce:37:
1d:b3:66:51:8e:36:1e:1a:df:85:47:13:ae:b6:ce:
32:a0:f7:68:36:fa:35:77:a1:bd:cd:a0:2d:fc:b5:
ce:b4:b0:8f:c8:37:32:f7:1a:d4:b0:ee:37:51:a9:
ff:75:6f:9d:96:f6:3c:77:13:df:c1:5b:2c:1c:49:
d3:47:0e:ec:d5:9c:db:a8:e8:98:be:e1:41:72:5d:
b3:03:8d:d6:67:14:37:81:64:b4:e3:c4:65:cd:87:
b9:11:2a:bf:3a:36:fb:17:28:b4:97:e2:1e:39:04:
f8:34:8b:4b:96:63:af:3f:79:c7:ba:69:28:4e:0d:
28:96:9c:23:38:1f:8c:a6:8c:93:9e:54:2b:d2:de:
74:16:5d:76:b4:41:73:f5:68:fe:bd:7e:1e:9d:ea:
d5:b2:a6:62:0a:78:b6:e7:29:39:a0:49:2b:70:51:
0a:43:ed:33:44:0c:e8:e3:4b:c0:27:00:62:9c:3d:
06:d7:5b:00:e5:13:92:c8:4e:2a:bf:55:bd:61:66:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:65:36:D1:DB:CF:CC:41:4B:A8:11:AD:50:78:27:A8:3D:6E:36:F7
X509v3 Authority Key Identifier:
keyid:A8:87:BB:E8:B0:5E:AD:0E:2E:44:84:F8:1C:C8:D3:CD:34:D5:24:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/XGU20dvPzEFLqBGtUHgnqD1uNvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:63:e0:2f:82:79:fb:35:0e:2c:15:c0:e3:80:d2:80:c6:82:
ee:e9:37:76:89:60:7a:a3:cd:79:ac:22:78:08:8b:59:a1:b3:
5f:7b:48:19:10:5d:57:cd:da:35:5f:9a:4f:d3:b9:6a:a4:e0:
00:44:78:87:46:12:8e:a2:72:01:fd:b6:a8:89:a7:24:b2:99:
60:c0:ed:f3:fa:4e:99:13:49:fa:0b:19:5b:f1:1a:d2:26:7d:
65:08:d8:be:ba:c6:68:9f:4d:50:00:b5:ea:a0:7f:ec:88:72:
6b:73:3a:6d:ab:18:d2:5d:9b:7b:c3:eb:b5:71:37:9e:86:fd:
c9:1c:aa:56:87:5a:5e:e9:44:bb:1f:47:78:1f:85:af:89:cf:
4b:0d:45:d7:ab:82:de:31:e0:1b:35:21:fd:7c:e8:fc:da:b9:
f2:9e:27:fc:0d:29:79:17:26:06:1c:e7:7b:53:e2:71:aa:85:
48:6d:69:c2:03:f3:2c:c9:2f:0c:11:a2:8f:e4:db:99:16:ce:
dd:8f:39:52:27:43:09:78:d3:7f:a3:88:bc:14:e9:82:eb:da:
8e:11:0e:3c:94:24:e7:fb:59:8f:a7:a5:ab:16:97:ce:dd:b2:
86:7f:a9:7e:39:5f:a3:ad:3d:c6:10:36:e1:6e:e2:8a:d8:1b:
69:01:a8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:05:53 2026 by rpki-client