Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/xvcT2jLtAzVYixuwBP4M7QqoOu4.roa
File: xvcT2jLtAzVYixuwBP4M7QqoOu4.roa (raw, json)
Hash identifier: WbREmVo8myXACGak1iWM/XhaKesSqUO612aeuA/5mZI=
Subject key identifier: C6:F7:13:DA:32:ED:03:35:58:8B:1B:B0:04:FE:0C:ED:0A:A8:3A:EE
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368CAA935B22C473C03C68ADC649BB2
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/xvcT2jLtAzVYixuwBP4M7QqoOu4.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201752
IP address blocks: 45.8.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ca:a9:35:b2:2c:47:3c:03:c6:8a:dc:64:9b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6f713da32ed0335588b1bb004fe0ced0aa83aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:9c:d8:89:c6:aa:e5:d8:ff:10:bb:09:a2:
b5:cc:e7:d3:87:38:aa:7a:6d:26:f8:c3:63:dd:ef:
57:83:8a:bf:f6:1f:4a:4b:70:b3:c1:58:82:af:d3:
02:89:78:24:07:ad:40:80:59:c8:cd:00:e4:6a:ba:
21:0d:0f:ec:a0:df:dd:38:8a:af:21:54:54:84:de:
6d:0b:7b:5d:fa:74:61:df:85:63:b1:85:4d:7e:26:
71:33:39:83:6f:05:ac:be:d9:7e:af:a5:9a:aa:89:
5f:f5:63:66:f4:c0:6e:0c:41:48:a7:68:d0:29:16:
dc:89:64:98:97:45:9d:59:1a:6a:43:70:13:f2:61:
b6:e2:10:09:69:20:19:44:7c:ae:38:ca:c2:f6:98:
23:ed:14:36:db:6b:84:94:bb:95:68:03:b2:2e:45:
ed:cd:a7:4b:aa:e3:58:db:a7:1f:79:e9:1b:09:79:
0d:69:35:76:e0:d9:0e:66:e2:41:a7:b8:5c:c0:ef:
26:31:7a:a7:b3:3f:f5:ed:54:e2:41:e1:04:5d:86:
45:e0:19:f8:96:fd:69:49:24:1b:07:85:bb:6d:75:
5e:07:7e:bb:23:b1:6b:23:66:64:7f:87:b4:3f:64:
02:84:3b:63:04:77:2b:95:62:ef:b2:3d:5d:fe:33:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F7:13:DA:32:ED:03:35:58:8B:1B:B0:04:FE:0C:ED:0A:A8:3A:EE
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/xvcT2jLtAzVYixuwBP4M7QqoOu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.210.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0b:c5:56:7f:d3:bd:d3:a4:ed:bc:93:d1:98:3d:c5:6a:15:
ff:9c:30:db:d2:d4:fc:13:4a:82:70:3c:a3:28:d6:11:4d:ac:
bb:3a:2e:61:73:00:46:7f:a5:4b:2e:af:53:71:96:d6:82:c3:
25:35:21:17:15:0f:53:51:db:94:ec:37:b6:d2:84:0a:21:85:
c4:58:d5:2e:1c:17:72:89:35:ce:8c:67:67:fe:bb:c1:20:3b:
99:5b:e3:9e:e5:42:2d:48:b0:4a:4b:93:13:54:59:27:57:a7:
4d:d4:3c:92:02:0e:58:39:fc:8a:79:8d:a8:57:00:c6:23:93:
08:a6:52:58:3f:a3:97:f9:78:00:51:2f:2a:43:80:af:b5:fd:
35:0d:ee:aa:9f:3b:9a:f0:32:4b:a2:d8:a5:ee:3f:8d:5a:48:
fe:54:c3:20:8e:0d:42:66:c3:e1:7f:6a:15:79:e5:27:83:98:
4c:4b:6b:b3:df:f4:47:b5:2f:64:8b:0f:e4:6f:b5:44:8e:50:
a2:0b:8b:ec:ec:72:81:e2:7c:6d:d5:31:9c:e2:c0:35:04:af:
aa:c1:b6:1d:53:9b:8b:ed:1e:c0:18:cc:4e:44:cf:87:0f:68:
c9:41:68:7c:bd:68:a6:bc:b8:50:77:ce:c2:85:15:9c:00:fc:
f1:df:36:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:41 2026 by rpki-client