Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/xKcBipuMvKp84RN5Ey0HBKtsVPo.roa
File: xKcBipuMvKp84RN5Ey0HBKtsVPo.roa (raw, json)
Hash identifier: /eh2S8GsbWcqnju6ljXJ0HQ5aHuof6/dHBl/9C9TCw0=
Subject key identifier: C4:A7:01:8A:9B:8C:BC:AA:7C:E1:13:79:13:2D:07:04:AB:6C:54:FA
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 019F02E7D793D2AEA48AA28631B7AC057569
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/xKcBipuMvKp84RN5Ey0HBKtsVPo.roa
Signing time: Fri 26 Jun 2026 07:49:36 +0000
ROA not before: Fri 26 Jun 2026 07:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2612
IP address blocks: 2001:67c:264c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:e7:d7:93:d2:ae:a4:8a:a2:86:31:b7:ac:05:75:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Jun 26 07:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4a7018a9b8cbcaa7ce11379132d0704ab6c54fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:1e:7f:b3:ea:35:da:92:a0:c9:4a:39:db:
4e:19:fc:aa:23:ba:f2:00:3e:9a:f1:b8:ca:a5:b0:
b0:cd:9f:f5:ca:df:e1:ee:a5:50:f0:b5:04:71:ab:
dc:76:84:6e:c0:9e:d5:b7:3c:e4:65:1b:62:ac:2f:
b5:72:37:8b:4a:b9:49:89:47:1a:64:b5:6a:72:10:
d8:67:a4:db:37:c7:01:b9:da:8e:b0:a1:a0:41:14:
12:6f:c3:7d:59:9b:72:6d:65:16:5d:62:c1:07:b2:
6a:70:cf:70:39:20:67:64:78:2f:e9:14:83:18:97:
91:11:93:f8:0a:98:75:66:e6:30:ca:03:65:d2:9b:
f0:76:f6:5c:99:ce:6f:ab:c5:a0:2f:b6:bc:30:ab:
3e:90:58:f6:f0:c4:be:54:a7:0c:f0:9c:01:8a:77:
2e:22:46:c6:66:3c:d4:8f:22:8c:d3:c3:29:f4:e2:
f4:b3:3f:b3:b5:98:92:23:78:0e:7d:2d:fe:46:a9:
1f:60:a0:6b:ac:f8:44:77:8f:dd:9d:dd:77:eb:20:
ff:a3:e3:98:a2:6d:6d:b1:a6:12:ef:53:15:56:56:
e0:d7:b4:b3:c5:cd:ec:17:34:06:74:ff:0b:e1:4e:
71:ce:0f:fd:c8:aa:97:48:bb:a1:d3:9e:eb:d8:8a:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A7:01:8A:9B:8C:BC:AA:7C:E1:13:79:13:2D:07:04:AB:6C:54:FA
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/xKcBipuMvKp84RN5Ey0HBKtsVPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:264c::/48
Signature Algorithm: sha256WithRSAEncryption
58:50:af:6e:f9:da:1a:50:b2:b9:6b:43:ce:19:22:bc:a6:7a:
e8:1e:de:ab:a7:b1:d2:59:c5:98:a0:2f:96:4b:8b:bb:f8:98:
ef:d0:7a:b6:2c:85:3e:d3:b1:2d:8c:96:77:e7:3d:6a:14:6b:
29:f4:c2:8d:57:1d:4b:35:25:16:05:fd:d6:16:c8:2f:dc:c5:
67:ce:81:7f:4c:f3:65:6a:4e:2c:98:25:14:95:e2:d2:d8:e8:
33:22:5b:94:54:50:ae:e8:34:58:c4:de:49:a9:e8:b3:5b:a7:
90:ed:db:c8:9a:af:26:b2:77:f5:1b:ea:32:93:6d:4e:bf:0c:
fc:9d:7f:0d:5e:15:86:ce:c3:48:d4:25:68:dc:41:bd:76:4f:
5c:f4:d3:59:6a:09:88:ac:60:05:30:fb:f8:27:d1:0c:9b:45:
03:88:2f:db:23:83:d1:e7:93:6d:a5:ce:89:22:78:c8:21:cd:
76:29:66:e9:47:c4:b3:16:ef:7b:49:58:a2:95:ea:77:f5:54:
f3:c0:68:91:80:0b:a2:73:9a:42:0a:ac:6c:ca:9d:40:f0:73:
17:f1:7f:9f:ee:41:bd:a2:89:32:88:1c:44:0a:81:be:12:e8:
cb:89:78:cb:40:f1:24:4f:a8:c2:03:04:9a:ba:10:72:cc:1f:
3f:5b:a3:e8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8C59eT0q6kiqKGMbesBXVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZGNjNzc2YjJiZjU5NWJmNGIzZTYwYmJhNDI0NWYwMTIw
YTIxNzYwHhcNMjYwNjI2MDc0OTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGE3MDE4YTliOGNiY2FhN2NlMTEzNzkxMzJkMDcwNGFiNmM1NGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOwef7PqNdqSoMlKOdtOGfyqI7ry
AD6a8bjKpbCwzZ/1yt/h7qVQ8LUEcavcdoRuwJ7VtzzkZRtirC+1cjeLSrlJiUca
ZLVqchDYZ6TbN8cBudqOsKGgQRQSb8N9WZtybWUWXWLBB7JqcM9wOSBnZHgv6RSD
GJeREZP4Cph1ZuYwygNl0pvwdvZcmc5vq8WgL7a8MKs+kFj28MS+VKcM8JwBincu
IkbGZjzUjyKM08Mp9OL0sz+ztZiSI3gOfS3+RqkfYKBrrPhEd4/dnd136yD/o+OY
om1tsaYS71MVVlbg17Szxc3sFzQGdP8L4U5xzg/9yKqXSLuh057r2Ip9rQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMSnAYqbjLyqfOETeRMtBwSrbFT6MB8GA1UdIwQY
MBaAFHXcx3ayv1lb9LPmC7pCRfASCiF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQt
NjQ1NDAyMDVlY2Y0LzEveEtjQmlwdU12S3A4NFJONUV5MEhCS3RzVlBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQtNjQ1NDAyMDVlY2Y0
LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCZM
MA0GCSqGSIb3DQEBCwUAA4IBAQBYUK9u+doaULK5a0POGSK8pnroHt6rp7HSWcWY
oC+WS4u7+Jjv0Hq2LIU+07EtjJZ35z1qFGsp9MKNVx1LNSUWBf3WFsgv3MVnzoF/
TPNlak4smCUUleLS2OgzIluUVFCu6DRYxN5JqeizW6eQ7dvImq8msnf1G+oyk21O
vwz8nX8NXhWGzsNI1CVo3EG9dk9c9NNZagmIrGAFMPv4J9EMm0UDiC/bI4PR55Nt
pc6JInjIIc12KWbpR8SzFu97SViilep39VTzwGiRgAuic5pCCqxsyp1A8HMX8X+f
7kG9ookyiBxECoG+EujLiXjLQPEkT6jCAwSauhByzB8/W6Po
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:08:36 2026 by rpki-client