Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/x1q-7IFMkbxZCpMQK8KJeDU57oM.roa
File: x1q-7IFMkbxZCpMQK8KJeDU57oM.roa (raw, json)
Hash identifier: 9B9d/Oex92JILgKGlo5Sf4tajGQpOAweMi8RPE5WeNQ=
Subject key identifier: C7:5A:BE:EC:81:4C:91:BC:59:0A:93:10:2B:C2:89:78:35:39:EE:83
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823080F9616B347F2450830A3CBEDA
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/x1q-7IFMkbxZCpMQK8KJeDU57oM.roa
Signing time: Tue 25 Aug 2026 15:20:28 +0000
ROA not before: Tue 25 Aug 2026 15:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 188.119.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:30:80:f9:61:6b:34:7f:24:50:83:0a:3c:be:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c75abeec814c91bc590a93102bc289783539ee83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:be:d1:3b:28:9d:16:be:10:dd:84:eb:68:
fd:e4:87:a1:2c:3a:21:97:1e:55:3d:82:95:63:cf:
76:7e:21:be:2c:37:64:88:4d:92:b9:c0:4d:cd:85:
89:e0:cb:f7:9a:1d:6d:ec:84:03:bf:18:48:c3:21:
1f:2e:c8:01:7b:8d:a6:db:e0:7c:fe:33:0b:73:d3:
13:4b:17:ea:bd:31:6c:62:a6:17:19:df:37:84:61:
8b:ba:c0:a5:ec:d5:58:ce:5e:01:33:a7:64:11:c9:
00:32:cb:ef:9a:68:69:70:31:b4:a5:d1:e5:bf:d4:
0f:c1:62:ec:c1:3b:e1:d7:cb:25:19:69:6c:8d:1d:
fa:40:0e:d4:1b:52:f9:8a:d5:4c:e8:74:72:10:b4:
b8:17:21:34:ba:6a:55:5a:c8:c9:ea:15:27:9e:5e:
9d:72:54:b0:63:b7:c6:e9:62:a8:7e:77:14:e3:6a:
54:12:2f:09:5b:5e:d5:b4:c4:a8:72:e2:6b:59:3c:
bb:2d:06:7e:8a:c0:c2:07:74:20:d2:5d:f5:c8:29:
52:f6:79:bd:6b:94:f7:03:dc:29:ff:86:e1:4d:23:
72:17:32:36:81:cc:c3:43:25:fb:12:03:51:60:ce:
67:79:c6:67:19:8d:0a:c5:4e:33:c9:c0:a4:1a:c5:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5A:BE:EC:81:4C:91:BC:59:0A:93:10:2B:C2:89:78:35:39:EE:83
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/x1q-7IFMkbxZCpMQK8KJeDU57oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.71.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d5:df:57:62:d6:98:aa:1f:14:49:19:f8:15:31:a1:83:fb:
e1:17:b5:00:3d:26:ec:71:87:9b:9a:fe:0a:dd:27:d7:cf:39:
6d:54:a0:d3:6f:0c:ff:4a:9d:64:bc:cd:be:d4:7a:94:46:46:
ed:46:d0:9f:22:1a:8f:6b:60:a1:7e:ec:e8:10:9d:44:d9:21:
3f:7a:bd:23:c1:77:96:22:e6:a1:ed:e1:b2:49:f8:c2:34:aa:
51:b9:40:f7:86:43:24:18:4e:7d:33:a4:82:e2:19:4f:9e:b7:
72:43:c6:8d:05:25:9a:4c:cf:52:1d:44:30:e9:90:c3:62:cf:
e9:39:d5:81:04:bd:f5:8f:ab:e6:14:31:af:00:b8:b3:99:ae:
95:ef:bc:f4:bc:99:04:3c:52:8c:09:6e:f0:c3:e6:58:ab:ce:
ff:ad:a1:7f:e5:74:89:e8:b4:9e:fc:a6:a9:d9:2a:db:aa:87:
d4:b9:0f:69:b9:1b:c7:b5:5e:5f:4b:ff:10:12:8c:f9:d1:87:
e6:61:d9:0f:bc:09:ba:42:7b:d8:7f:27:1f:2e:bd:45:8a:2d:
93:bf:2a:da:b2:14:54:ff:f1:31:50:3a:86:e7:62:f8:75:f7:
05:7f:4d:ea:e3:87:69:91:c0:ec:39:32:08:64:a9:49:be:04:
58:d8:68:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:13 2026 by rpki-client