Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/XKwbgCRt39xf-ucRzd4m1YlT77U.roa
File: XKwbgCRt39xf-ucRzd4m1YlT77U.roa (raw, json)
Hash identifier: Gig9/Xc/hBqodZHjGszTaZgsvQyq9DUaulQG1yPjjaQ=
Subject key identifier: 5C:AC:1B:80:24:6D:DF:DC:5F:FA:E7:11:CD:DE:26:D5:89:53:EF:B5
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019FEBB7BF43D41639BCC12925B68D0D20A9
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/XKwbgCRt39xf-ucRzd4m1YlT77U.roa
Signing time: Mon 10 Aug 2026 12:48:35 +0000
ROA not before: Mon 10 Aug 2026 12:48:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3292
IP address blocks: 92.43.176.0/21 maxlen: 21
193.32.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:b7:bf:43:d4:16:39:bc:c1:29:25:b6:8d:0d:20:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Aug 10 12:48:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cac1b80246ddfdc5ffae711cdde26d58953efb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:8f:cf:39:1a:9f:7d:98:56:bc:8d:53:0e:
9d:c4:01:a5:cd:94:3c:16:12:0e:ea:9b:59:0b:8c:
4c:ef:54:ef:f4:3a:9e:33:9f:00:ce:18:f6:ec:91:
aa:53:4c:13:8f:83:06:12:a2:41:ae:66:82:9e:de:
0c:3f:a3:79:df:ca:d0:5d:54:de:79:74:c8:66:73:
1c:93:22:be:22:ce:d7:9b:a9:ec:5b:e9:1d:2d:eb:
95:3b:f9:23:3f:6a:17:35:32:d0:95:cc:04:35:eb:
64:90:d9:2a:a1:be:41:70:cb:39:11:75:38:0c:bc:
9c:ec:e7:14:8c:c3:66:fa:cb:e6:7b:e8:b1:5d:de:
8f:af:42:a9:f0:19:65:fb:f5:fc:5e:2d:b8:14:40:
9b:c0:d8:9a:2e:09:24:bf:31:da:d3:c1:88:50:8c:
f0:24:91:71:5a:03:7d:16:81:63:28:7f:45:6e:21:
55:17:a6:f7:70:ed:c8:21:d1:a3:f8:b2:54:59:33:
5b:b9:33:ec:ec:a4:93:39:8e:80:d5:0a:1c:18:b7:
f1:09:57:1f:eb:a8:c4:28:63:27:37:6d:21:72:bc:
69:ac:d1:87:73:49:a2:82:3a:fd:67:fb:f4:7e:65:
6f:b8:23:fa:c8:26:bb:f4:7e:cd:63:10:bf:ca:9f:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AC:1B:80:24:6D:DF:DC:5F:FA:E7:11:CD:DE:26:D5:89:53:EF:B5
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/XKwbgCRt39xf-ucRzd4m1YlT77U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.176.0/21
193.32.65.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bd:1f:66:e0:e6:31:d5:47:b2:48:6c:c8:03:a3:29:d4:23:
42:1e:47:7b:98:49:66:20:42:c5:93:fa:74:e0:d7:20:47:0c:
c9:f8:b8:e8:10:c4:77:dc:56:96:f4:3c:3e:31:1f:95:f5:b7:
b9:ff:6d:fa:3f:cd:b6:7d:0f:aa:69:b9:ca:96:0e:ca:fb:38:
c4:29:22:43:b4:e8:a4:e0:33:bb:82:77:82:20:fd:f8:33:18:
46:8a:7b:dd:81:1a:cd:90:b3:bf:b7:a3:85:dd:5a:e8:db:43:
4d:57:03:35:5a:68:c1:e9:1e:bf:23:da:34:31:ef:b3:f9:03:
b9:92:e3:8f:d2:aa:22:c9:c2:9e:4b:49:f1:f9:fa:7f:4f:1c:
d6:4a:92:15:e0:1b:5a:cb:9d:0b:d1:85:0c:dd:97:7f:73:f1:
8b:5f:0f:ec:68:d6:ef:30:93:9f:ab:73:d2:a3:11:02:71:22:
26:6d:3c:fa:0f:30:e9:77:57:46:12:cc:e6:69:29:17:e8:97:
6f:98:f7:a7:28:5c:46:10:ec:89:36:a6:ad:59:eb:a0:59:8c:
11:bc:e1:58:94:04:10:5e:20:2e:3f:28:de:1d:8e:a4:b7:cd:
15:56:09:f5:9f:6b:6a:d6:74:25:36:c6:fa:15:5a:6f:ba:81:
44:8a:46:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 22:58:15 2026 by rpki-client