Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xQcLBDwmriRpcAbUXWIMx59vG2o.roa
File: xQcLBDwmriRpcAbUXWIMx59vG2o.roa (raw, json)
Hash identifier: RaBbZwOXj8PrWs4KZ5nlL3alGIyYd8jWh0UrvY7tOBg=
Subject key identifier: C5:07:0B:04:3C:26:AE:24:69:70:06:D4:5D:62:0C:C7:9F:6F:1B:6A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECC48B940F0A51808889E8CBB259607
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xQcLBDwmriRpcAbUXWIMx59vG2o.roa
Signing time: Mon 14 Sep 2026 07:23:03 +0000
ROA not before: Mon 14 Sep 2026 07:23:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34800
IP address blocks: 194.50.99.0/24 maxlen: 24
2a04:ccc2::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:cc:48:b9:40:f0:a5:18:08:88:9e:8c:bb:25:96:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:23:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5070b043c26ae24697006d45d620cc79f6f1b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:53:2e:eb:12:ca:0c:ee:9f:6c:52:bf:51:96:
a3:8a:39:10:01:f8:d5:49:7c:fe:e7:ee:96:62:6e:
c0:62:22:c9:05:19:4f:02:24:42:c7:3e:05:31:e6:
74:e5:bd:b0:3d:09:bc:95:31:d2:d5:c4:2b:4c:bd:
a4:33:01:a6:c9:db:41:f2:b6:2d:55:87:a3:76:d2:
86:65:79:2a:ca:5f:b9:53:b5:9d:81:35:a3:bf:a4:
00:83:6f:6b:1c:46:de:aa:46:2f:59:a7:ac:54:57:
99:f7:0c:d1:28:a7:e6:f7:1e:96:9f:84:8d:19:c9:
59:1c:a4:9e:b3:5a:d5:92:0a:3e:8a:b2:ad:14:9b:
28:6d:45:44:49:3e:2b:8b:00:d4:7d:13:a2:36:20:
95:10:dc:a7:cf:a3:31:af:8f:94:6c:19:99:21:c2:
ec:13:f0:cd:4a:35:79:d0:bc:cc:47:4c:7c:57:13:
5d:ae:5a:1d:c1:63:b6:09:8c:65:93:fb:27:6e:65:
b1:17:fd:3d:4a:97:e5:1a:cd:c8:54:d0:10:ed:c9:
a7:e6:26:b1:48:20:c5:ea:ef:05:e1:5f:28:98:d5:
a4:c4:83:2d:ce:b5:4b:e1:46:db:f9:c1:2a:d6:d9:
3b:34:f1:2d:f9:b9:ca:d4:ec:4e:58:ce:db:91:08:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:07:0B:04:3C:26:AE:24:69:70:06:D4:5D:62:0C:C7:9F:6F:1B:6A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xQcLBDwmriRpcAbUXWIMx59vG2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.99.0/24
IPv6:
2a04:ccc2::/32
Signature Algorithm: sha256WithRSAEncryption
63:e9:f9:5a:5e:47:5c:09:e0:16:76:40:c2:51:a8:07:23:31:
0b:ad:4c:f7:fa:68:e6:86:c1:df:c8:88:74:82:71:70:72:82:
ca:02:79:38:02:b6:c9:00:7a:ba:87:29:1a:61:83:93:b0:34:
62:cb:30:d2:c3:91:cf:57:9b:29:15:c3:db:6c:63:db:73:89:
0a:fe:39:98:4b:8e:6e:cf:c7:8a:00:1d:8a:3c:02:99:62:b0:
71:2b:09:a0:4f:17:4c:fa:3f:1e:54:9a:58:27:82:d5:d1:97:
89:ab:bd:12:f7:99:8a:c3:e3:f2:ab:91:f3:09:0d:86:7c:56:
cb:46:18:c6:39:b6:58:06:69:d5:71:ec:1a:c3:45:b2:9b:cc:
bb:f0:d6:e7:ba:43:1a:a9:11:ac:4a:91:13:5d:92:e2:04:e8:
8c:5b:fd:e6:76:d9:10:33:77:7f:c9:cf:cb:a4:33:3d:de:59:
30:34:0a:94:72:a1:36:04:0a:37:3e:61:61:df:30:3c:e5:44:
a5:8b:1f:1b:b4:3d:6b:fc:1d:1c:77:b3:0f:61:18:a4:e3:6e:
f0:9e:76:94:2c:dc:b9:6a:81:34:af:61:a2:32:21:f5:54:a8:
53:15:19:88:4a:14:f2:5c:90:85:eb:38:1a:b6:bb:ce:70:04:
52:18:2f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:18 2026 by rpki-client