Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/xKV3kgxBf7UUVRr84bCErhDrc4c.roa
File: xKV3kgxBf7UUVRr84bCErhDrc4c.roa (raw, json)
Hash identifier: ZYiZ6jRe3+R5IVfA5CRR8v3ck5ek+jMsdDXIYsxQY8o=
Subject key identifier: C4:A5:77:92:0C:41:7F:B5:14:55:1A:FC:E1:B0:84:AE:10:EB:73:87
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A061D5DD0CDFEE35B2D93EADC1A31F4F62
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/xKV3kgxBf7UUVRr84bCErhDrc4c.roa
Signing time: Wed 02 Sep 2026 11:16:40 +0000
ROA not before: Wed 02 Sep 2026 11:16:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219283
IP address blocks: 2a0f:2380::/30 maxlen: 30
2a0f:2384::/30 maxlen: 30
2a0f:4680::/30 maxlen: 30
2a0f:4684::/30 maxlen: 30
2a0f:5580::/29 maxlen: 32
2a0f:9fc0::/29 maxlen: 32
2a0f:a140::/29 maxlen: 32
2a14:4380::/29 maxlen: 32
2a14:4980::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:d5:dd:0c:df:ee:35:b2:d9:3e:ad:c1:a3:1f:4f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 2 11:16:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4a577920c417fb514551afce1b084ae10eb7387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0c:16:37:c5:b6:91:f4:d0:54:2a:c2:26:45:
19:cf:51:7a:52:f2:37:b6:02:ff:35:e4:fb:0c:ff:
1b:4d:4a:75:6d:5d:3e:c1:0b:cb:f4:cf:bf:ce:e9:
f9:da:0a:0b:bf:f0:c4:2b:7e:f8:61:85:4e:f9:31:
25:5d:35:09:f2:dc:c6:ca:c1:e4:5e:51:f2:6c:d7:
6c:d3:37:4f:27:c0:ff:f2:b1:71:d2:14:3f:40:56:
82:b1:3a:1a:af:02:5d:7e:67:22:06:78:cc:b4:08:
6c:cb:14:d5:67:30:98:a8:1a:26:f3:27:e0:5e:71:
fb:1e:d5:79:30:f2:e1:8e:76:b8:69:a0:86:4e:6c:
9b:e3:ef:6d:ad:29:12:bc:b5:86:42:b3:da:9c:9f:
9a:f1:9c:60:2a:1e:20:94:3e:32:00:d3:16:68:6f:
c9:a7:82:7f:ae:e3:4b:95:c4:a7:b1:fa:c0:04:7d:
eb:0c:6c:a1:e2:dd:be:ee:9e:2b:97:9a:cb:dd:d5:
d6:ad:13:d2:c2:b9:ea:e6:b5:27:af:36:66:0d:ac:
81:05:76:12:67:6a:c4:72:f1:94:81:eb:70:ff:0b:
42:5e:43:1f:6f:88:e6:65:b7:c5:8a:df:d9:b1:22:
57:d6:68:aa:d3:69:40:8f:92:f2:a7:f2:59:09:41:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A5:77:92:0C:41:7F:B5:14:55:1A:FC:E1:B0:84:AE:10:EB:73:87
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/xKV3kgxBf7UUVRr84bCErhDrc4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2380::/29
2a0f:4680::/29
2a0f:5580::/29
2a0f:9fc0::/29
2a0f:a140::/29
2a14:4380::/29
2a14:4980::/29
Signature Algorithm: sha256WithRSAEncryption
63:8d:13:48:0f:ec:19:ba:4a:28:d5:3c:6d:a9:f1:79:81:0b:
f9:04:17:3b:6a:94:55:60:58:ff:2e:f1:da:fd:e2:33:da:4e:
e9:d8:2a:8a:76:fc:6a:1c:e5:77:a1:38:37:65:28:45:8a:33:
62:9a:a9:d4:1d:49:07:17:9f:96:f2:dd:0c:75:be:98:10:9b:
79:d9:ea:86:c9:07:bd:47:59:4e:7e:30:bc:c2:e8:84:28:9c:
ed:21:1e:c2:ee:bc:49:e5:e9:bf:5f:62:d0:90:11:90:60:c2:
d6:5c:d8:a7:e4:f8:62:67:d1:75:7d:82:8e:26:58:69:5d:60:
38:07:42:9f:b6:a8:8b:61:bf:4d:7f:52:67:44:f9:98:4c:f5:
6e:16:30:df:bc:a7:6c:c2:0c:6a:99:ef:09:67:96:6c:92:ed:
fa:da:d4:a4:81:df:13:47:61:92:4e:95:eb:1a:73:dd:19:45:
d8:26:a8:40:06:b7:89:06:a7:00:a4:9f:61:52:89:67:fe:76:
23:b4:3d:57:bd:32:dd:c2:04:78:c4:c0:96:c9:5c:aa:a1:99:
9e:3a:26:53:91:14:0e:20:bd:d2:3e:ab:56:36:7d:1c:57:f6:
73:6c:cc:c8:16:24:8b:8f:96:fc:b1:92:0c:0b:f8:4d:b5:0e:
ad:8d:f1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:39:25 2026 by rpki-client