Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/_XxZYQCwM4oEZbzvN74ReVgY3RU.roa
File: _XxZYQCwM4oEZbzvN74ReVgY3RU.roa (raw, json)
Hash identifier: CNIMvXW+wfUBQdnHoy+ACUFq0TTl3g6wulbKVc7yLro=
Subject key identifier: FD:7C:59:61:00:B0:33:8A:04:65:BC:EF:37:BE:11:79:58:18:DD:15
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A1377FE66CB5404CB7FFE8B88765488CF6
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/_XxZYQCwM4oEZbzvN74ReVgY3RU.roa
Signing time: Tue 13 Oct 2026 23:01:31 +0000
ROA not before: Tue 13 Oct 2026 23:01:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.243.0/24 maxlen: 24
193.28.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:7f:e6:6c:b5:40:4c:b7:ff:e8:b8:87:65:48:8c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Oct 13 23:01:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd7c596100b0338a0465bcef37be11795818dd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:8d:08:ae:78:ce:f1:4b:a3:e0:f8:0c:1e:
2b:cf:d6:b6:33:6c:77:26:8b:3f:35:47:b2:47:58:
2b:42:84:3e:7b:4b:49:2d:dc:36:90:cb:99:aa:6a:
2f:89:be:37:a0:c3:7c:73:57:39:fa:cd:64:fa:3e:
07:9f:75:32:47:24:2b:43:d2:0e:1c:d1:df:c6:34:
a0:1f:97:9f:2d:3a:99:fb:f6:25:fc:5b:e1:8a:b3:
de:3e:ac:51:d2:da:47:fa:91:8a:1e:e2:7e:c6:d9:
5b:9f:22:bd:87:1b:94:6d:a3:ab:35:e7:6e:85:81:
46:00:ba:8e:3a:89:fc:d1:22:4f:af:89:80:bf:e2:
ea:04:9c:ac:4e:25:2a:93:2e:e7:ea:32:50:0f:7b:
70:92:87:ee:2c:06:2d:f9:9e:2a:56:80:bc:cc:a6:
27:b0:44:c2:a3:ba:f9:7b:e8:09:ec:d3:dc:88:ec:
1e:39:20:7f:24:fa:f4:9f:ca:4c:7b:cf:c4:d5:d8:
a7:92:60:72:9e:5c:a9:be:24:ec:cc:04:c2:e1:f2:
91:f6:cd:7f:ae:fa:87:cb:68:20:b3:d3:2f:5f:22:
45:cd:df:86:93:a1:a6:8b:6f:c4:0c:b3:09:fc:ba:
ea:b9:27:a2:72:35:bb:e6:e1:31:08:11:7a:20:c4:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7C:59:61:00:B0:33:8A:04:65:BC:EF:37:BE:11:79:58:18:DD:15
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/_XxZYQCwM4oEZbzvN74ReVgY3RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.243.0/24
193.28.183.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b2:7b:0c:9b:eb:22:b4:33:d4:60:55:0b:82:46:ca:cf:56:
91:b5:98:8c:78:57:a5:cf:d0:ac:ee:fc:bb:83:41:6f:b4:09:
ee:41:82:50:91:aa:e5:70:15:53:07:20:57:d0:23:74:29:a2:
e4:d5:36:56:b6:2e:87:56:f7:b8:fe:51:ec:22:dd:ae:43:0a:
e9:90:e2:a3:f9:7f:df:a0:34:dc:4a:b6:e6:14:af:0c:1f:49:
de:d4:b8:f4:4b:6c:82:d5:53:11:4c:b4:27:f3:b4:b7:b2:16:
9a:0d:64:28:fe:8a:08:a9:e4:b1:fd:8c:48:da:b4:8a:2a:9c:
4e:f5:d0:e2:16:89:0a:d4:52:dc:4e:fb:ad:5d:a1:92:97:c1:
7d:cb:21:23:49:ac:d1:c3:85:62:0b:35:d3:b8:01:d1:ad:e6:
e1:a0:53:34:a0:ad:31:83:50:49:23:8f:9b:fc:96:fd:4e:a5:
40:a5:f7:dc:2b:60:73:ed:3e:6c:78:a5:34:67:0f:74:f9:c7:
82:e6:2f:6c:77:77:58:7a:61:db:9d:2c:f0:91:b9:25:18:36:
0c:c5:37:d7:20:79:7c:86:f1:27:b5:a7:e7:2b:30:60:e0:11:
58:13:48:a6:d3:e8:80:49:b1:a7:d8:e7:81:78:20:02:4b:f9:
93:e7:32:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:47:35 2026 by rpki-client