Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/XEre2CpfjXwiAfzm1eXF2HA09h8.roa
File: XEre2CpfjXwiAfzm1eXF2HA09h8.roa (raw, json)
Hash identifier: YD2qi1wTFcGD4Ho1FOHn4snQozDzFHDlJsAwoPgJanc=
Subject key identifier: 5C:4A:DE:D8:2A:5F:8D:7C:22:01:FC:E6:D5:E5:C5:D8:70:34:F6:1F
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A03CF868FFC5ECE01B31907D9DC764C88E
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/XEre2CpfjXwiAfzm1eXF2HA09h8.roa
Signing time: Wed 26 Aug 2026 07:28:27 +0000
ROA not before: Wed 26 Aug 2026 07:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214311
IP address blocks: 201.7.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:f8:68:ff:c5:ec:e0:1b:31:90:7d:9d:c7:64:c8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 26 07:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c4aded82a5f8d7c2201fce6d5e5c5d87034f61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b5:a6:cd:b2:97:da:0b:f4:f6:74:5d:69:c6:
8e:2c:ed:5e:96:a7:42:db:d2:ab:4e:2a:12:a1:46:
07:b7:26:51:58:0e:13:b4:6b:c0:8f:ee:6b:1f:d6:
ef:e9:8a:69:1a:08:7d:90:b8:05:46:fa:41:f3:42:
24:2d:40:6b:0a:48:a2:80:af:df:61:80:18:b3:7c:
31:7c:fc:05:49:d3:be:71:27:32:fb:9f:1f:0b:ed:
bb:a9:82:6b:d9:b9:68:a7:70:87:64:0f:19:25:eb:
ff:4e:6d:dd:bb:a8:22:86:5b:bb:d2:5b:88:e9:ef:
59:8a:22:3d:b6:44:c8:aa:f8:ae:a6:bc:ef:93:78:
cc:fd:81:3d:d0:27:f7:63:02:e7:87:2b:d8:86:69:
f7:4d:19:a6:df:ac:97:19:2b:44:4b:17:da:64:94:
35:60:7b:26:6d:21:b0:47:d5:f7:8e:fb:f7:86:6a:
80:21:fb:11:c6:b7:96:f1:45:c9:d8:9d:bc:3c:fc:
b0:c7:6d:06:7b:fc:ee:76:ce:7f:d7:a0:26:79:ee:
ed:22:23:f3:30:90:1e:b2:ce:cb:f8:65:a0:ff:b5:
66:5a:5e:91:c6:4d:83:23:c6:d1:56:45:63:2a:02:
81:b2:d9:02:17:50:e8:11:0e:31:b5:d5:5b:4f:16:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:DE:D8:2A:5F:8D:7C:22:01:FC:E6:D5:E5:C5:D8:70:34:F6:1F
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/XEre2CpfjXwiAfzm1eXF2HA09h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.7.30.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f8:e8:08:62:b7:5a:cb:bc:33:64:f4:26:08:6a:54:a2:f9:
f9:8a:ca:f7:4b:9c:35:98:c5:a7:dd:e3:65:a1:34:68:02:53:
ad:6d:05:00:54:42:b8:b9:79:62:85:11:a1:0b:0d:0b:ab:37:
e2:6d:aa:b8:e8:52:56:6f:ee:1a:d3:1e:d4:73:56:ef:29:0b:
a4:a6:4e:6a:84:e1:12:11:20:c7:1f:15:79:a7:6c:2f:db:be:
80:4a:19:08:f3:fa:0d:c1:af:57:b8:66:ab:5f:c3:b6:ad:3e:
14:56:c6:ec:08:6c:de:42:d5:fd:82:0d:ba:18:c4:75:93:c9:
9d:64:42:60:98:d4:f6:32:22:1a:19:ec:0d:85:c6:4e:bd:93:
13:24:af:e0:54:84:80:73:7f:a9:8e:cb:8a:86:c4:ce:79:a5:
7a:49:b9:2b:fb:35:01:64:40:7c:48:15:3f:cd:f3:19:f4:69:
64:4d:c2:a0:41:82:22:e9:16:1a:6f:ee:f9:61:76:db:72:ab:
53:e8:57:e0:a1:fd:7e:c1:70:23:ff:fa:a2:af:93:04:eb:bc:
55:48:68:38:7d:e7:d9:6f:3e:96:d1:bb:07:43:57:43:e6:06:
54:30:c8:09:84:a6:c8:f1:03:b2:27:1d:24:54:9b:8a:02:75:
f7:2c:07:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:58 2026 by rpki-client