Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/xEz93NHfqwGn_fMxSE5Ih9PWlqo.roa
File: xEz93NHfqwGn_fMxSE5Ih9PWlqo.roa (raw, json)
Hash identifier: jiLVzZN8tDJN0WGRU4SoHiqOhPAJ15uV1gf5zwz/HNE=
Subject key identifier: C4:4C:FD:DC:D1:DF:AB:01:A7:FD:F3:31:48:4E:48:87:D3:D6:96:AA
Certificate issuer: /CN=776974277056ebddbfbdb4f808f9a86e824603af
Certificate serial: 019F2369086B806D4468BB0E44F65E67DA71
Authority key identifier: 77:69:74:27:70:56:EB:DD:BF:BD:B4:F8:08:F9:A8:6E:82:46:03:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2l0J3BW692_vbT4CPmoboJGA68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/xEz93NHfqwGn_fMxSE5Ih9PWlqo.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15966
IP address blocks: 95.128.0.0/21 maxlen: 21
2a01:a640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2l0J3BW692_vbT4CPmoboJGA68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:08:6b:80:6d:44:68:bb:0e:44:f6:5e:67:da:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776974277056ebddbfbdb4f808f9a86e824603af
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c44cfddcd1dfab01a7fdf331484e4887d3d696aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:a9:0d:f6:30:ed:7d:d5:79:03:ec:3e:3b:
35:96:70:94:8a:17:67:cf:f7:42:4d:fc:fb:67:e2:
8a:22:29:ef:f4:5d:e7:4d:89:a8:a7:09:11:e7:b7:
7e:fd:78:51:ab:7a:24:2d:25:a0:f5:b5:3d:a1:08:
24:27:08:7b:54:d9:67:f7:23:c5:c3:70:ad:f9:32:
a0:0c:a4:d6:22:08:ef:b5:24:02:9c:6d:b1:b0:92:
8d:45:d8:a0:ad:4f:1d:71:70:a9:a6:d4:5a:15:8f:
12:18:a2:90:02:81:14:11:3d:14:94:9e:0d:f1:fe:
1c:46:9f:ed:03:ec:df:63:87:1a:88:f4:64:88:a2:
33:e8:5d:bd:16:75:02:d4:05:b9:13:85:50:cf:98:
f5:43:34:69:8a:59:73:35:ca:a1:cf:af:c0:d0:ff:
48:5b:82:d6:56:29:5b:a8:38:9d:ac:35:be:04:2d:
72:64:53:b3:f5:eb:3d:c3:7b:c4:14:5b:6f:08:ca:
eb:20:d5:c7:bc:5a:bb:3a:4d:a5:1e:a3:b0:4e:29:
76:20:32:18:f4:1c:9b:33:83:b4:81:59:17:60:4d:
47:44:c5:13:0e:b6:a8:2f:a6:64:20:cd:82:cb:1a:
3a:81:1d:57:43:91:5a:26:1a:9d:9e:de:81:44:18:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4C:FD:DC:D1:DF:AB:01:A7:FD:F3:31:48:4E:48:87:D3:D6:96:AA
X509v3 Authority Key Identifier:
keyid:77:69:74:27:70:56:EB:DD:BF:BD:B4:F8:08:F9:A8:6E:82:46:03:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2l0J3BW692_vbT4CPmoboJGA68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/xEz93NHfqwGn_fMxSE5Ih9PWlqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.0.0/21
IPv6:
2a01:a640::/32
Signature Algorithm: sha256WithRSAEncryption
ae:8e:f9:a3:cb:26:9a:49:f5:43:82:86:dd:71:ab:c6:47:d8:
a3:aa:85:17:95:6a:5b:f5:c7:8a:f3:e3:0c:9a:ea:0a:85:54:
dd:40:10:53:2e:03:51:77:10:ae:23:35:98:29:c9:10:9a:ad:
45:94:e6:55:1d:84:f5:33:f0:6f:df:f8:45:c0:a7:4b:7d:14:
cf:d7:6b:60:55:d7:1e:23:8b:84:e3:d0:a8:4a:e8:a6:d2:14:
a4:57:e2:f2:3a:ed:dc:94:0d:c7:da:13:a2:97:d9:81:d0:80:
57:8d:6f:18:ff:0c:d4:af:42:7b:20:5e:b6:9d:05:11:1b:28:
12:b1:18:ed:16:53:d9:7f:20:e3:2c:73:bf:5a:54:79:07:fc:
6e:1d:d9:a6:58:17:20:fc:b4:ff:cb:c8:7e:ae:f5:0d:39:a1:
5e:1a:14:c8:99:b3:0a:65:b5:a4:8f:75:e5:d7:b4:54:db:d7:
7d:0f:ca:0b:19:56:ca:cf:47:eb:f8:c7:9e:0b:62:5b:23:a1:
26:f3:ad:94:93:16:ee:08:0c:15:87:33:e2:8d:4e:8b:ee:0a:
6e:ec:d1:c1:ef:1d:7c:4a:e6:d8:20:04:29:5f:6c:19:05:ee:
87:18:8a:cf:9e:6b:fe:f1:3c:af:aa:c1:70:6d:4c:17:0a:09:
a7:40:61:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:24:09 2026 by rpki-client