Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/x0DX-qmkwY2ne6U5848Xz_X8Z1c.roa
File: x0DX-qmkwY2ne6U5848Xz_X8Z1c.roa (raw, json)
Hash identifier: qGhVJO7Y1ztL0vvui8XefBJrh+30U6XCKNMNRbueVD4=
Subject key identifier: C7:40:D7:FA:A9:A4:C1:8D:A7:7B:A5:39:F3:8F:17:CF:F5:FC:67:57
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019E5F52B6813519327958DC4EDCE8488772
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/x0DX-qmkwY2ne6U5848Xz_X8Z1c.roa
Signing time: Mon 25 May 2026 13:28:36 +0000
ROA not before: Mon 25 May 2026 13:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206750
IP address blocks: 189.13.122.0/24 maxlen: 24
189.13.123.0/24 maxlen: 24
189.13.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:52:b6:81:35:19:32:79:58:dc:4e:dc:e8:48:87:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: May 25 13:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c740d7faa9a4c18da77ba539f38f17cff5fc6757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e6:1c:b8:ee:63:f3:d4:1b:3b:a5:a6:9e:56:
61:cb:87:59:4e:83:c0:56:a2:d2:42:a9:0b:5b:80:
fd:cb:a7:42:ac:55:ed:71:d8:8c:31:a4:90:6c:08:
90:24:a2:4c:b6:bc:e3:64:96:64:8a:a7:e3:8e:90:
2b:f2:23:10:1f:5e:c3:e6:9d:72:b2:03:f0:c6:12:
aa:8e:4e:dc:df:ba:8b:5e:9f:c2:71:0f:54:4f:42:
16:6a:b7:ab:d5:11:1a:71:da:6d:04:c7:81:5a:ab:
74:11:87:8d:1c:12:05:e6:72:75:44:87:8b:19:18:
89:ff:4f:de:8c:b0:b1:e2:65:c1:b8:b9:66:e2:7b:
22:8d:9c:4d:55:a4:a6:32:4f:48:16:5c:99:e8:02:
16:18:7c:3d:1d:2f:03:83:d6:21:14:86:b4:22:1e:
a0:55:4c:c0:b5:9f:de:7f:ae:ac:85:46:8a:9c:b9:
5f:c7:14:e5:4a:ed:60:bb:ae:d1:cf:fe:5b:20:a6:
f2:1f:f7:69:94:f1:1f:ec:6b:10:80:c8:17:f5:b8:
28:a1:b2:ba:cc:0e:92:7f:88:fb:fa:5c:b0:34:83:
84:89:6d:64:3b:37:5d:58:f6:9f:c3:8b:ce:e6:67:
2f:18:0d:96:5d:a5:90:91:10:e9:85:e6:9b:18:55:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:40:D7:FA:A9:A4:C1:8D:A7:7B:A5:39:F3:8F:17:CF:F5:FC:67:57
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/x0DX-qmkwY2ne6U5848Xz_X8Z1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.122.0-189.13.124.255
Signature Algorithm: sha256WithRSAEncryption
b5:39:e3:d6:73:09:99:d6:2e:8d:ad:af:09:a1:e4:c8:0d:f0:
6f:dd:54:64:ae:a2:79:53:07:c4:8a:25:2d:29:0f:f1:a8:76:
df:37:d3:a6:b7:8e:b6:f4:3f:38:c6:10:3e:47:cd:79:df:47:
76:ce:65:bf:69:73:e9:63:57:02:a9:90:6c:50:87:6a:43:0f:
e1:3a:29:45:02:82:4e:2c:2e:0a:5f:23:1c:94:ee:3c:10:3a:
d8:e3:27:9c:90:79:2d:4f:5c:50:17:da:ce:78:60:bb:cc:4a:
22:cb:65:56:e6:f1:f5:d2:a1:60:5f:62:14:bb:51:0e:c9:6d:
20:d1:5c:3c:9e:85:2c:51:11:37:80:c6:ed:fa:9f:9a:8d:08:
39:01:65:a4:e7:8a:f0:0c:e6:d1:8d:c1:88:62:1c:91:c5:94:
44:40:55:f9:04:cf:bb:d4:c5:21:37:33:82:2c:2a:2e:0f:a2:
dc:39:5c:08:fe:da:7d:6d:7e:86:f1:18:1d:4c:42:27:79:5a:
6c:97:28:b6:76:9b:75:b0:21:dc:8c:e3:1a:ea:bd:70:27:78:
69:e1:78:01:db:c6:3a:41:0e:25:9c:c4:a5:b9:02:64:e1:ad:
d8:18:fd:d8:b6:0f:d8:b3:67:1e:66:63:55:31:9f:55:4d:e7:
a0:f7:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 09:00:52 2026 by rpki-client