Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xsHxJ-7wUlo1y_EJsdEfrZ7sg2E.roa
File: xsHxJ-7wUlo1y_EJsdEfrZ7sg2E.roa (raw, json)
Hash identifier: o0kkWj4JlXnwgbFhyjg9DQY1WcFta2gzAr5kNVObWwc=
Subject key identifier: C6:C1:F1:27:EE:F0:52:5A:35:CB:F1:09:B1:D1:1F:AD:9E:EC:83:61
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F5EA9A5A994E05A99254D3536EB69E353
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xsHxJ-7wUlo1y_EJsdEfrZ7sg2E.roa
Signing time: Tue 14 Jul 2026 03:26:44 +0000
ROA not before: Tue 14 Jul 2026 03:26:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 77.67.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5e:a9:a5:a9:94:e0:5a:99:25:4d:35:36:eb:69:e3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 14 03:26:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6c1f127eef0525a35cbf109b1d11fad9eec8361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:a5:42:2f:a2:55:b7:38:d9:cb:de:8d:c3:
0e:f0:a1:d1:46:e9:56:7c:2f:43:a8:c6:e3:22:16:
84:59:5c:fa:ce:38:07:82:95:c9:d9:36:72:62:b3:
39:3e:de:eb:97:e7:28:b5:0a:3f:68:a2:10:16:8e:
67:b6:d2:62:b1:8b:d1:55:56:52:27:4d:22:e9:cb:
5a:d5:c1:71:17:6e:69:0d:35:fb:dc:06:f4:bd:a0:
a6:95:1c:9c:31:15:bb:39:c0:62:e3:a2:0b:a6:5f:
19:6c:c6:a6:c7:4f:3f:ff:3a:ae:7b:8b:38:91:4f:
28:6a:46:e1:11:ab:4e:b1:73:34:2e:e7:6c:a3:ab:
84:18:c4:f6:14:b6:6b:1e:01:0b:f6:ae:4e:d5:0a:
bc:13:bb:4d:10:ef:ee:c6:d6:73:58:4f:c9:6c:9d:
55:85:84:46:d8:4e:0e:e7:25:3d:86:11:a7:c5:d9:
c5:3f:a9:c2:f7:82:74:c6:ef:0a:53:eb:a2:9f:84:
7f:ab:f4:7c:d9:ac:28:0a:32:36:fc:b6:93:a4:56:
34:16:fa:0d:33:48:be:13:66:4b:b1:57:4e:89:29:
48:62:08:4a:89:1c:2c:ea:d1:19:b7:b1:4e:08:c2:
e7:f2:d1:f2:c1:63:53:0a:53:8c:c1:57:ac:83:10:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C1:F1:27:EE:F0:52:5A:35:CB:F1:09:B1:D1:1F:AD:9E:EC:83:61
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xsHxJ-7wUlo1y_EJsdEfrZ7sg2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.16.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a5:1e:43:a8:ba:2e:a9:17:d2:ea:c1:33:2d:1f:91:46:05:
8d:12:d8:25:ab:00:0c:e6:ec:62:fe:3e:ee:a1:c2:95:5d:5f:
a9:fe:36:ed:66:93:ca:a4:67:e9:55:00:e6:66:0f:8b:07:7c:
15:53:00:0a:c4:d7:4f:6f:54:03:47:09:2e:6c:b8:5d:71:6c:
33:a6:a8:eb:37:95:92:7b:31:e9:3a:3a:06:79:e9:43:9d:2d:
a4:47:3c:58:45:13:d7:ac:38:c5:5d:1d:b9:f2:03:cf:58:47:
78:84:4c:fe:45:7d:c7:7d:2e:bd:87:c0:f6:2a:0e:92:eb:e6:
1f:5e:b2:69:7d:dc:1b:bf:68:20:82:e1:dc:de:29:63:e2:d4:
34:8a:14:d6:d3:03:2a:92:14:25:e9:1c:1e:07:e0:3f:5c:03:
a7:64:d1:fb:88:59:7e:80:79:ef:32:10:1a:66:c8:5c:45:b0:
6f:41:db:75:a4:b6:74:32:e5:01:e4:e2:da:d8:92:e5:95:99:
10:22:2a:d5:76:10:7e:a5:0a:70:dc:b8:44:f1:1f:83:fd:e5:
ae:e5:a4:5a:c5:f5:48:0e:7e:3b:d7:6b:c3:b6:6b:30:83:31:
d0:36:3b:81:4e:3b:c4:6c:4d:71:8c:9c:4d:dc:df:fc:9f:15:
cc:48:f2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:57 2026 by rpki-client