Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1xuCdoLIoX42EUu4FaoKYwCmeno.roa
File: 1xuCdoLIoX42EUu4FaoKYwCmeno.roa (raw, json)
Hash identifier: jsxI8ERtcZ2tYarMtHoMqJgQNNv57kVJupwWMikcH9M=
Subject key identifier: D7:1B:82:76:82:C8:A1:7E:36:11:4B:B8:15:AA:0A:63:00:A6:7A:7A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019F79D1EF3DE62B3B4D488A6D1A949C0195
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1xuCdoLIoX42EUu4FaoKYwCmeno.roa
Signing time: Sun 19 Jul 2026 10:00:29 +0000
ROA not before: Sun 19 Jul 2026 10:00:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 185.232.117.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:d1:ef:3d:e6:2b:3b:4d:48:8a:6d:1a:94:9c:01:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 19 10:00:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d71b827682c8a17e36114bb815aa0a6300a67a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:0d:e8:aa:24:87:20:01:a8:42:0d:45:f3:
d2:93:b4:6b:48:00:f8:e4:6f:68:78:5d:4f:87:f0:
18:45:e9:ea:c3:ee:40:b1:b0:d7:2b:68:50:63:68:
55:63:1c:1f:87:29:66:19:67:a3:81:b0:3f:7d:16:
7e:6e:12:41:18:af:1c:c7:fa:d1:ed:7c:42:f4:3d:
ef:a8:9b:64:ed:7a:29:47:49:14:10:ee:bf:a9:7d:
87:9c:86:b4:94:18:fe:ea:3c:75:51:bb:78:8b:2f:
3f:68:f8:85:e0:31:ee:ce:a6:3d:fa:0f:91:c8:9a:
06:55:51:38:f7:53:0a:49:d6:82:b2:f1:e7:20:df:
07:24:79:0a:0a:b4:15:58:c3:21:8f:82:75:95:42:
be:f2:0c:72:92:2b:89:32:fd:2b:fa:87:0c:95:76:
c5:5c:bc:c3:c4:30:9c:b1:7e:55:95:95:b4:f4:05:
ac:ad:56:86:b3:b2:97:ef:44:fe:ed:33:f7:c2:81:
d8:0b:b7:67:01:00:d0:40:b6:71:de:bb:7c:c1:82:
6f:f3:08:8c:bd:e2:92:d6:88:cf:86:d0:74:e7:ae:
ed:49:5d:84:26:46:84:49:22:06:cc:d4:bd:6c:e0:
f3:30:1e:c6:a8:5e:ae:20:6b:f5:54:23:1e:c3:be:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1B:82:76:82:C8:A1:7E:36:11:4B:B8:15:AA:0A:63:00:A6:7A:7A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1xuCdoLIoX42EUu4FaoKYwCmeno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.117.0/24
194.50.94.0/24
Signature Algorithm: sha256WithRSAEncryption
91:40:f0:83:70:cf:27:96:5c:74:d4:c1:46:4f:9d:67:4a:19:
71:b5:14:12:83:86:10:04:0c:7b:3f:80:fd:eb:91:fc:72:91:
71:7d:ca:04:a3:b7:4f:4a:74:05:fb:1e:65:4e:66:eb:9d:13:
ef:44:20:0c:be:c9:5a:b8:9e:1e:c9:77:35:08:02:9a:1e:6c:
c2:07:de:a3:43:28:8a:8a:ad:00:8f:d7:4b:7f:f3:49:b8:3f:
81:a6:13:41:ed:31:1f:26:1b:f8:37:ce:4e:db:aa:a3:64:96:
10:c1:9b:7c:ed:4d:f6:24:25:9d:b9:fb:91:55:f7:2d:19:b1:
20:ea:e6:b7:73:59:c2:c0:23:bc:2c:1f:b5:95:ec:67:ce:ac:
94:40:8f:f0:5a:cd:3b:f0:13:e7:f2:7a:bc:e7:80:ee:9f:75:
93:d3:ed:15:40:6c:b1:8f:e9:43:45:0c:53:ed:09:d8:36:c5:
55:4c:8b:1f:3e:a1:65:5a:3c:d1:b8:1b:19:a6:f4:1e:38:46:
0c:b6:94:c3:40:bb:07:f8:87:3d:c2:c7:0a:14:46:ac:3c:66:
b0:76:00:79:2d:0c:81:ad:24:70:32:d1:3f:7c:7f:7a:3b:c7:
4c:b7:47:e9:f3:2d:59:39:ee:10:1e:15:6d:2b:cd:7f:be:4a:
ed:3a:2a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 06:47:55 2026 by rpki-client