Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/xKKgMBYggYrOzddWnjoXfABzYtI.roa
File: xKKgMBYggYrOzddWnjoXfABzYtI.roa (raw, json)
Hash identifier: CRfn67QEd4oVTEk3kHUBSolPZ3Du9hm6IXw4Z34egdI=
Subject key identifier: C4:A2:A0:30:16:20:81:8A:CE:CD:D7:56:9E:3A:17:7C:00:73:62:D2
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A067683FD41795459DA5796C7BB86507C4
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/xKKgMBYggYrOzddWnjoXfABzYtI.roa
Signing time: Thu 03 Sep 2026 13:14:40 +0000
ROA not before: Thu 03 Sep 2026 13:14:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207474
IP address blocks: 131.222.229.0/24 maxlen: 24
153.56.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:68:3f:d4:17:95:45:9d:a5:79:6c:7b:b8:65:07:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 3 13:14:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4a2a0301620818acecdd7569e3a177c007362d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:f4:22:9a:d1:cc:9c:9d:36:df:bf:e3:3e:
f5:f9:52:ee:3a:22:d3:c8:8b:02:14:85:02:3f:e7:
38:c1:a9:52:5c:86:db:8c:83:5a:70:8e:de:6c:9f:
89:55:4d:f0:46:44:09:5a:9c:b7:af:4c:37:6a:5f:
d1:cd:09:b4:ff:af:3f:74:dd:e5:dd:91:93:94:38:
6d:16:eb:21:c0:29:82:bc:e0:2b:ff:45:6a:28:f4:
b1:80:13:08:ab:95:ad:0b:84:49:51:3d:6b:e5:7e:
be:03:63:78:ee:94:81:6e:cd:43:10:6c:e1:bf:00:
bb:cc:32:91:63:a9:ca:54:49:37:2e:a4:9e:40:00:
0c:6d:e5:09:f2:5f:5c:4a:9f:1b:31:4d:47:0d:1b:
d4:09:74:8f:e9:5c:d4:55:62:8e:06:fa:d4:f8:f5:
28:d8:22:a8:d5:51:b0:1e:69:72:c2:54:7c:e6:48:
5b:bd:65:b7:f0:eb:37:7f:e5:6f:3b:aa:01:d8:b4:
69:fd:2b:da:1f:39:d0:5a:d3:4a:70:e8:00:82:c0:
b8:0b:a0:54:8b:c9:65:7e:56:a8:4e:e2:80:c7:73:
41:e5:cb:07:51:9b:4c:32:ff:4b:4d:97:2c:95:bc:
2e:4c:42:b5:87:e6:b6:25:f9:8d:bb:16:e0:73:9e:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A2:A0:30:16:20:81:8A:CE:CD:D7:56:9E:3A:17:7C:00:73:62:D2
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/xKKgMBYggYrOzddWnjoXfABzYtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.229.0/24
153.56.169.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7b:b1:6f:f7:78:94:06:08:a6:58:a0:fb:89:e1:a6:77:a5:
3e:0e:ed:c8:ab:5b:d1:0f:87:58:51:ed:ca:9b:1d:b9:52:eb:
4a:7d:cc:d1:b9:e4:fb:ca:ad:63:7c:c1:ab:84:a8:20:7a:f9:
35:7d:18:5d:a9:c1:91:cc:02:68:32:1a:98:34:51:a7:c6:35:
e2:62:30:25:98:75:df:11:4b:f4:4d:17:d0:5b:e1:2e:70:9b:
f2:e4:e8:a0:f3:f0:ef:e8:db:0c:5c:3f:79:e9:f0:b2:56:22:
7a:b1:79:a2:9c:87:82:d8:e2:d8:fd:07:a4:40:db:b4:5e:39:
c2:4b:13:07:76:83:f0:8c:cd:46:ba:c8:5f:08:1d:cb:ca:a7:
f2:e8:dd:62:a1:7e:9e:91:54:2b:82:18:69:ad:64:98:a7:9e:
15:39:f8:da:f6:28:78:f9:b8:a9:9b:46:ff:8f:60:72:d4:50:
6d:05:a4:67:73:6c:0f:57:79:78:0c:74:08:c1:42:b2:ea:4a:
90:b2:d6:bc:fb:d5:b9:00:b6:0f:53:f2:88:29:7d:6e:9c:5b:
bf:8e:cd:45:6f:80:8c:8d:a6:ad:54:3c:a1:13:20:4d:55:06:
c7:00:97:8b:e9:9d:ab:ae:17:a5:f4:c5:93:68:95:0b:cb:0d:
23:19:20:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:11:44 2026 by rpki-client