Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/xkOjBQQmnRM7wGsI3bxYUlzAZbE.roa
File: xkOjBQQmnRM7wGsI3bxYUlzAZbE.roa (raw, json)
Hash identifier: eCK450RJgJyBdGmpyTMZoH4wm4stUV8ppgjNpt+6t5o=
Subject key identifier: C6:43:A3:05:04:26:9D:13:3B:C0:6B:08:DD:BC:58:52:5C:C0:65:B1
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F09E3DEB7B1485B18A254EC3C075C1A7E
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/xkOjBQQmnRM7wGsI3bxYUlzAZbE.roa
Signing time: Sat 27 Jun 2026 16:22:36 +0000
ROA not before: Sat 27 Jun 2026 16:22:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199393
IP address blocks: 109.66.0.0/22 maxlen: 24
109.66.0.0/24 maxlen: 24
109.66.1.0/24 maxlen: 24
109.66.2.0/24 maxlen: 24
109.66.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:e3:de:b7:b1:48:5b:18:a2:54:ec:3c:07:5c:1a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jun 27 16:22:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c643a30504269d133bc06b08ddbc58525cc065b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:ad:09:09:3e:f9:9b:38:0f:3b:01:cc:30:
75:c9:7c:e2:45:bb:89:a9:a0:9e:16:49:7b:53:a4:
24:44:c4:cd:a2:21:6f:06:c2:78:c1:1a:cd:4a:2c:
cd:6c:10:2a:27:26:b9:e8:83:03:8c:0d:eb:52:f4:
9b:aa:89:5f:71:91:9d:7e:89:04:27:e5:9d:45:f6:
b5:dd:4d:4e:58:82:5c:1e:b3:9f:05:66:3c:13:6c:
64:e2:5e:88:20:4d:fd:78:8d:44:34:d0:3c:a5:09:
25:82:46:4d:1e:91:36:10:b8:e6:dc:4a:35:f1:d5:
38:36:ba:14:18:7d:25:20:b3:c2:26:81:8a:7a:da:
2b:7d:d3:61:4a:5f:51:f6:8a:d3:c3:f3:24:10:32:
10:a0:65:31:75:32:35:86:80:e3:8b:45:57:1f:76:
21:01:12:94:5a:8b:31:95:a8:cd:4c:ad:bd:f0:89:
50:0c:43:a8:a7:6b:7b:47:1e:a4:2e:a6:88:9d:67:
e7:01:06:24:e7:d1:ce:bd:ea:be:57:a5:0b:72:ca:
18:82:ae:ec:61:61:7d:63:c1:84:02:dd:1d:22:3c:
5f:30:4d:b3:3d:25:df:ad:f3:fd:c5:41:df:be:3c:
83:62:67:98:fb:0a:3b:84:1d:f3:a7:60:33:0b:be:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:43:A3:05:04:26:9D:13:3B:C0:6B:08:DD:BC:58:52:5C:C0:65:B1
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/xkOjBQQmnRM7wGsI3bxYUlzAZbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:51:f5:63:6b:8b:41:25:d3:73:28:53:38:27:90:a9:05:44:
fe:83:04:1a:7b:74:04:61:7f:36:3a:7b:29:90:bb:a8:20:66:
9f:f2:7e:f4:5a:5a:a6:2d:ad:44:2a:52:d2:39:6a:b5:d1:f8:
dd:cd:60:b8:08:ae:93:b0:34:35:80:86:25:93:89:25:5a:46:
e4:7f:16:31:2c:10:03:bc:84:de:9f:da:fb:85:bb:d1:b5:c7:
92:3f:30:f0:da:aa:e7:49:24:5b:08:2e:20:fb:3d:f9:85:4d:
9a:29:a9:4f:fc:25:b7:82:58:be:c0:b1:45:13:bd:17:a7:e6:
a4:c8:5f:3b:39:6c:8a:82:6d:94:73:62:42:8e:36:b1:ed:bc:
34:12:3a:de:ee:70:5d:e8:9b:c1:e4:da:11:19:af:dc:7b:c4:
78:a2:b6:4f:2e:89:f8:19:c3:48:58:7d:5d:0e:6a:7b:d0:5f:
8b:fa:16:1f:ff:f8:1e:09:6c:04:7b:a7:89:f0:6e:b2:d6:74:
58:e9:31:e0:80:12:12:e9:14:cd:29:8c:31:72:9a:56:80:45:
97:9a:71:60:9c:7d:c6:ce:51:1a:70:35:ea:09:4c:77:45:1f:
3f:4e:c9:52:7a:fe:e9:b6:8e:40:4f:52:6b:c0:0d:fd:7d:72:
46:eb:5e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:00 2026 by rpki-client