Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/xyENgpvbGtOGC8Ar-zX1q-3IKMo.roa
File: xyENgpvbGtOGC8Ar-zX1q-3IKMo.roa (raw, json)
Hash identifier: lG/pzisfb6yT7Z4xq9PzV/3tEgDL71dcnhc0dQ60Vqs=
Subject key identifier: C7:21:0D:82:9B:DB:1A:D3:86:0B:C0:2B:FB:35:F5:AB:ED:C8:28:CA
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019DBB7D574A70ED9DCEE2585D2F20E2866B
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/xyENgpvbGtOGC8Ar-zX1q-3IKMo.roa
Signing time: Thu 23 Apr 2026 17:57:26 +0000
ROA not before: Thu 23 Apr 2026 17:57:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35594
IP address blocks: 186.246.54.0/23 maxlen: 23
212.60.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bb:7d:57:4a:70:ed:9d:ce:e2:58:5d:2f:20:e2:86:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 23 17:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7210d829bdb1ad3860bc02bfb35f5abedc828ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:ed:7c:d2:ff:a8:b6:4f:9d:24:e7:d6:6e:
8d:ed:b8:45:2c:cf:72:2f:70:86:70:3e:55:e5:34:
02:98:5a:71:27:fa:f8:30:4b:d1:78:36:d7:dd:7f:
b2:e4:e3:73:af:6d:1a:70:ec:2d:a1:21:b7:05:5a:
18:fb:fe:3e:55:83:e1:3c:53:fa:39:bb:b2:8b:f0:
de:ba:dc:b4:c9:f7:09:9f:ab:44:8e:f9:6c:6d:0f:
1b:af:fc:aa:c0:30:6c:9f:d7:32:38:f7:0d:73:cb:
c6:c6:57:b4:c9:31:9d:70:5e:db:f1:33:cb:30:d4:
16:29:bc:a8:7e:21:ab:2c:f2:11:53:7a:cd:5d:85:
a6:bd:f7:9a:f5:00:1b:a3:26:25:3c:68:96:b8:df:
a6:5b:c5:2e:57:b2:11:8c:9c:e8:96:61:3d:22:78:
9f:87:69:af:07:a0:d6:68:68:b3:4f:85:fe:e0:3a:
f4:dd:03:c2:3b:66:e1:96:fa:1d:29:2a:cd:1f:1d:
fb:0d:38:5e:f6:d5:5a:1c:6b:61:e8:78:d6:c0:3f:
72:6e:99:39:6a:e6:9a:f7:c1:b2:13:c6:d1:09:2a:
c3:00:72:ec:c5:2b:32:ce:85:5c:56:3a:2a:9c:f8:
bf:f1:cc:94:72:47:d0:bb:24:ef:c4:fb:5a:36:df:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:21:0D:82:9B:DB:1A:D3:86:0B:C0:2B:FB:35:F5:AB:ED:C8:28:CA
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/xyENgpvbGtOGC8Ar-zX1q-3IKMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.246.54.0/23
212.60.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c5:6e:c2:c0:02:a9:7c:0a:60:83:3e:f9:10:eb:b3:43:d1:
54:b9:ea:ec:4b:8c:ba:3a:42:8e:bc:b6:24:14:ef:99:b7:97:
e2:ee:ea:cf:f0:a2:c0:23:d4:b1:f0:e0:4b:f5:6a:bb:4c:27:
ed:c4:9a:3c:5c:d6:ba:65:61:1a:fe:60:d8:e0:7b:09:74:2c:
c2:5c:06:58:de:e9:10:3e:d8:03:3f:38:8f:cc:06:fa:23:18:
b9:e3:3b:8e:57:89:37:47:79:50:66:2b:c0:6c:e8:c8:94:a4:
84:5e:51:16:e2:d9:00:1f:bc:01:9b:ad:7a:c3:d7:80:15:bb:
7a:61:cb:a4:e4:8e:a9:ed:36:6a:6f:3e:f2:01:b6:bc:22:1d:
d9:f2:92:25:c1:0a:78:ba:70:d5:ba:17:bc:2a:64:bf:49:12:
da:48:a4:eb:f3:87:97:d8:4b:3a:9f:55:41:fe:87:8a:29:53:
fd:57:01:ea:03:3f:0a:5c:37:c3:e0:9e:24:80:d2:cd:68:eb:
f2:0b:0f:99:05:52:8c:ab:a3:1b:b0:e6:83:1e:26:77:22:d2:
e4:cd:10:17:b2:75:0f:29:c6:2c:ce:92:83:82:07:0a:b9:c4:
4a:48:27:be:64:3e:70:d5:aa:d1:80:74:ba:23:d7:b1:6c:3b:
6f:d6:c3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:57:26 2026 by rpki-client