Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/x2QeoV9YjEnvngKa8MC3rROtI0s.roa
File: x2QeoV9YjEnvngKa8MC3rROtI0s.roa (raw, json)
Hash identifier: TLUO3bCDce91dJPd3p+jeNSpDA+KWUjSTGFeGUMfFFo=
Subject key identifier: C7:64:1E:A1:5F:58:8C:49:EF:9E:02:9A:F0:C0:B7:AD:13:AD:23:4B
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019FD1E3910CBBAAAAEC28E5EF25B184171B
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/x2QeoV9YjEnvngKa8MC3rROtI0s.roa
Signing time: Wed 05 Aug 2026 12:26:19 +0000
ROA not before: Wed 05 Aug 2026 12:26:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 348624
IP address blocks: 176.56.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:e3:91:0c:bb:aa:aa:ec:28:e5:ef:25:b1:84:17:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 5 12:26:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7641ea15f588c49ef9e029af0c0b7ad13ad234b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:81:c5:0b:b4:22:37:5d:24:3f:dc:60:0e:
a3:fb:08:79:4a:15:a2:65:ba:64:31:91:f7:c2:73:
30:8f:f9:27:4d:bb:d2:e7:3f:ba:58:4e:75:4e:00:
b5:79:64:5d:da:19:6a:ae:99:7e:6e:e9:cb:c3:68:
36:6f:6b:07:da:78:36:a4:ec:a3:df:48:8c:4b:58:
24:81:d7:6a:a5:b4:0e:6a:7f:c6:a0:38:66:01:1f:
ae:2d:4e:9f:e9:ff:92:09:7a:a2:5c:7c:d6:0d:ad:
a8:61:75:f2:fb:30:9b:14:00:40:fa:41:25:21:9d:
35:56:44:76:58:97:3c:43:d2:9d:06:db:b7:2f:14:
b1:9e:18:f6:ad:ce:b9:92:c0:88:33:92:2d:62:65:
52:e0:04:da:47:67:b7:c8:5e:80:b9:f8:34:32:f7:
63:8b:59:de:80:10:57:e9:d0:64:97:5b:eb:ca:07:
5a:06:ea:fd:dd:f7:59:a9:69:7b:79:36:a5:ed:e6:
a1:a0:3e:3b:46:aa:88:81:3f:f3:65:eb:48:8c:a5:
6c:1f:e8:47:16:6d:6e:8a:c9:70:fc:24:3c:ec:27:
b8:9a:cb:b7:1c:16:5c:c1:97:a5:61:90:77:56:74:
7d:23:aa:d2:c1:3f:09:b8:62:89:88:a3:d6:29:bd:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:64:1E:A1:5F:58:8C:49:EF:9E:02:9A:F0:C0:B7:AD:13:AD:23:4B
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/x2QeoV9YjEnvngKa8MC3rROtI0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.80.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:f2:52:01:c4:eb:06:31:29:67:ab:89:4a:4f:4e:73:51:3e:
48:17:d2:46:f8:90:33:a1:a5:ff:05:04:04:95:d1:db:a8:88:
06:41:41:86:f0:a6:e5:ef:a4:1e:54:16:a2:ef:e6:60:c3:17:
d5:b1:84:db:e5:b4:59:d3:1a:09:8f:a9:e9:6a:95:76:f8:34:
e7:49:3a:be:f6:5c:ed:2e:8f:0c:c7:58:2a:86:69:ee:df:96:
88:7a:dc:3d:fc:eb:02:da:07:30:f4:b3:96:62:22:d2:d5:80:
1f:c6:68:74:e7:71:9e:14:29:89:35:d1:2c:20:c1:fa:64:d4:
3f:24:56:8a:09:4c:e2:b9:29:95:83:e4:00:70:21:0e:3c:17:
87:c7:86:aa:0d:92:34:ac:d1:ac:65:07:0d:23:2e:1b:39:37:
a1:5e:c2:48:56:20:12:1d:ef:8c:99:96:6b:a3:ea:ad:1d:92:
84:4e:6b:ca:ec:90:12:d1:f9:da:87:38:10:55:39:e5:70:62:
50:f5:a5:b5:d1:0c:16:b0:1e:23:dc:62:39:b5:91:25:b3:78:
99:82:b3:ab:a2:e3:06:56:c0:dc:ec:e3:8b:bd:c3:4d:70:d7:
e9:2a:15:4e:db:08:0c:f2:d8:f7:cd:5b:34:b9:c4:70:03:29:
f1:cd:a1:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/R45EMu6qq7Cjl7yWxhBcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjYwODA1MTIyNjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzY0MWVhMTVmNTg4YzQ5ZWY5ZTAyOWFmMGMwYjdhZDEzYWQyMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s+BxQu0IjddJD/cYA6j+wh5ShWi
ZbpkMZH3wnMwj/knTbvS5z+6WE51TgC1eWRd2hlqrpl+bunLw2g2b2sH2ng2pOyj
30iMS1gkgddqpbQOan/GoDhmAR+uLU6f6f+SCXqiXHzWDa2oYXXy+zCbFABA+kEl
IZ01VkR2WJc8Q9KdBtu3LxSxnhj2rc65ksCIM5ItYmVS4ATaR2e3yF6Aufg0Mvdj
i1negBBX6dBkl1vrygdaBur93fdZqWl7eTal7eahoD47RqqIgT/zZetIjKVsH+hH
Fm1uislw/CQ87Ce4msu3HBZcwZelYZB3VnR9I6rSwT8JuGKJiKPWKb2QkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMdkHqFfWIxJ754CmvDAt60TrSNLMB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEveDJRZW9WOVlqRW52bmdLYThNQzNyUk90STBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsDhQMA0G
CSqGSIb3DQEBCwUAA4IBAQCz8lIBxOsGMSlnq4lKT05zUT5IF9JG+JAzoaX/BQQE
ldHbqIgGQUGG8Kbl76QeVBai7+ZgwxfVsYTb5bRZ0xoJj6npapV2+DTnSTq+9lzt
Lo8Mx1gqhmnu35aIetw9/OsC2gcw9LOWYiLS1YAfxmh053GeFCmJNdEsIMH6ZNQ/
JFaKCUziuSmVg+QAcCEOPBeHx4aqDZI0rNGsZQcNIy4bOTehXsJIViASHe+MmZZr
o+qtHZKETmvK7JAS0fnahzgQVTnlcGJQ9aW10QwWsB4j3GI5tZEls3iZgrOrouMG
VsDc7OOLvcNNcNfpKhVO2wgM8tj3zVs0ucRwAynxzaE2
-----END CERTIFICATE-----
Generated at Sat Aug 15 14:43:12 2026 by rpki-client