Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/xzJgkqexmrKiW3161RGreW4Yvmw.roa
File: xzJgkqexmrKiW3161RGreW4Yvmw.roa (raw, json)
Hash identifier: Ixb4E23nlI63koXp8PbfNUHATe/IdWU5HQKtH+LhKDA=
Subject key identifier: C7:32:60:92:A7:B1:9A:B2:A2:5B:7D:7A:D5:11:AB:79:6E:18:BE:6C
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FEC0310603729B3ACB105AC3464C2E466
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/xzJgkqexmrKiW3161RGreW4Yvmw.roa
Signing time: Mon 10 Aug 2026 14:10:51 +0000
ROA not before: Mon 10 Aug 2026 14:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153622
IP address blocks: 160.238.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:03:10:60:37:29:b3:ac:b1:05:ac:34:64:c2:e4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 10 14:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7326092a7b19ab2a25b7d7ad511ab796e18be6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:32:5c:29:4c:93:ae:4b:0b:1b:45:4a:29:
e7:5d:7f:b9:97:f4:72:5a:e8:bd:59:4c:a7:cd:8a:
c9:e3:28:32:31:f6:36:c7:f4:55:c2:b7:cc:27:27:
ee:65:a1:d6:21:d2:b9:a2:ed:c8:cb:b6:d7:29:46:
03:1d:5d:1e:9a:14:f7:53:73:ca:7c:45:45:80:bb:
2a:4f:e5:6f:87:6e:57:a6:57:38:53:11:67:c7:37:
01:62:2b:a8:4c:e2:3d:e5:2b:7b:74:59:f7:1e:11:
af:fa:fe:21:ae:d0:88:22:42:f5:84:51:b3:df:fe:
ed:76:f1:2c:66:28:e7:b2:b5:20:8b:7b:fe:38:11:
27:65:51:cb:61:ae:6f:fd:cd:76:27:00:ec:d5:34:
36:51:de:bc:23:88:75:df:6f:73:cc:fe:9f:ca:16:
03:f6:72:98:e6:6c:aa:51:ad:41:fc:25:5f:5e:ae:
8f:7c:68:92:8c:27:67:91:da:d6:dc:49:8a:26:17:
c8:dc:01:04:f4:d7:36:3d:02:4d:36:b4:a2:f8:7b:
ad:e2:65:ea:9f:75:57:45:a2:1a:cb:e8:43:a3:d2:
e0:4c:3c:cb:32:64:fe:3c:b9:c1:55:76:e3:14:9a:
83:b4:b7:a2:a7:6c:ef:05:86:03:77:3d:dd:c4:af:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:32:60:92:A7:B1:9A:B2:A2:5B:7D:7A:D5:11:AB:79:6E:18:BE:6C
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/xzJgkqexmrKiW3161RGreW4Yvmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.98.0/24
Signature Algorithm: sha256WithRSAEncryption
35:70:6a:05:a7:c4:70:df:bd:84:a5:31:46:f8:da:60:63:e7:
cb:b6:f6:8b:07:84:db:d8:05:be:d4:d6:a8:b3:de:97:b6:aa:
c8:4c:6c:93:61:01:13:ac:6a:0a:97:83:1a:20:1e:28:9c:bd:
f8:97:1e:ea:1d:11:64:ae:15:79:49:38:dd:d5:82:ad:e2:21:
e1:96:b7:44:6f:ab:10:35:a9:93:61:cf:a0:af:d5:09:8e:82:
a8:19:7a:de:b8:b6:94:cd:4a:51:5c:13:97:2a:c0:da:02:9a:
49:c7:51:11:9d:44:87:99:80:b3:1e:25:bb:3e:67:5b:f3:8e:
eb:4e:54:bc:8c:35:02:83:d9:33:c5:20:6f:eb:c2:a5:c0:9d:
af:d3:79:ce:1f:e6:ab:66:bc:36:68:84:79:b8:b4:d2:0b:01:
d5:c1:ba:45:3c:7c:f2:af:6a:7d:50:e8:34:43:3c:6e:7a:35:
43:f3:f9:86:50:a7:0b:b8:49:18:53:54:fd:82:9e:a4:04:56:
23:08:1d:27:68:c5:6b:b3:d7:4e:9a:55:f2:71:82:8a:80:43:
32:b0:7c:ec:92:ab:50:f5:ad:21:1e:3e:b3:61:c4:5c:87:13:
df:44:22:a3:d7:69:fa:97:6f:64:c6:d2:f5:29:8f:68:67:9b:
8e:94:bd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 02:26:32 2026 by rpki-client