Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/xG4ON5piTWUrbJZW0C8M9TTrCbE.roa
File: xG4ON5piTWUrbJZW0C8M9TTrCbE.roa (raw, json)
Hash identifier: y3hHFlvGg9uUU6GoSQ7UbNdISjixgkkmewwYg4y2R38=
Subject key identifier: C4:6E:0E:37:9A:62:4D:65:2B:6C:96:56:D0:2F:0C:F5:34:EB:09:B1
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368F3379491A74A8699C1F54E991619
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/xG4ON5piTWUrbJZW0C8M9TTrCbE.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207806
IP address blocks: 2a00:7180:8004::/46 maxlen: 46
2a04:800:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f3:37:94:91:a7:4a:86:99:c1:f5:4e:99:16:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c46e0e379a624d652b6c9656d02f0cf534eb09b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b5:58:71:3c:9a:07:51:ed:1c:ff:88:6c:e6:
fc:78:03:df:eb:67:17:df:02:3f:e0:6b:57:84:ef:
30:5e:23:4e:da:5d:f4:75:a6:7c:b2:40:9d:1c:02:
a9:69:e2:14:33:cc:35:1d:94:73:e9:ea:68:8e:e1:
f1:c4:0e:f8:ee:4f:01:08:e1:6b:f8:4d:a6:2d:53:
b4:30:00:0f:f3:59:a2:16:31:0e:5e:14:49:8f:fd:
2a:30:71:3f:d4:d9:08:cd:c4:15:90:a0:02:13:43:
6e:35:7e:a9:55:6a:3c:df:c9:fa:94:55:3c:7b:44:
e9:e6:f2:b5:d0:14:75:e5:11:b7:46:0c:aa:59:67:
3a:5e:80:90:5d:a4:a0:4d:07:ac:22:ab:77:64:c3:
f8:e5:10:7a:d3:93:9a:cd:cd:db:5a:da:0c:39:8a:
c5:95:10:4a:bf:96:77:b4:6f:36:e2:6a:ec:f5:99:
82:16:a3:17:39:3a:eb:17:c1:ac:87:b9:0e:75:30:
1a:ee:1d:e8:d3:09:90:8c:9d:40:01:33:52:73:09:
1b:70:a0:c6:d2:be:d3:74:b7:c6:40:17:2b:ba:40:
58:97:82:6c:44:85:0f:ec:97:f7:a6:e2:60:ab:f8:
05:fd:6e:63:08:8f:fb:b7:41:76:af:7a:ae:f7:07:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6E:0E:37:9A:62:4D:65:2B:6C:96:56:D0:2F:0C:F5:34:EB:09:B1
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/xG4ON5piTWUrbJZW0C8M9TTrCbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8004::/46
2a04:800:1000::/36
Signature Algorithm: sha256WithRSAEncryption
1b:a0:82:88:8c:57:ec:e4:f7:e8:9d:ca:c2:22:79:a3:1a:e7:
9c:68:10:23:c6:f5:97:af:ce:ef:00:2b:f8:ae:dc:bc:a7:80:
5e:03:a8:e3:5a:84:1d:d8:9d:ce:31:72:32:1b:1d:26:24:10:
ee:da:91:43:e3:10:27:93:01:e4:54:9f:f7:38:f4:49:13:0d:
d0:b0:67:a8:d3:f5:dd:c1:24:58:ec:81:86:c0:52:af:8d:ac:
00:10:4f:b1:bc:99:bc:be:ba:ab:bc:e8:b8:2d:dd:a8:15:e3:
2b:ba:20:8f:9e:d4:95:f6:09:bf:2a:8d:21:b0:13:43:50:b7:
92:13:48:e3:b2:fb:88:ca:ff:36:2f:bd:88:89:c7:42:96:0f:
bb:e0:9d:de:43:89:79:f7:8f:f4:9a:e5:70:0a:c5:32:69:43:
d4:2c:01:61:15:0f:b5:c9:6d:33:d1:26:c5:94:56:8b:f9:a8:
ea:2c:13:a7:03:c5:4c:86:10:9c:62:9f:0a:bd:27:4f:99:df:
64:ea:ef:3f:63:55:0a:d5:bb:cf:e3:10:42:b7:53:c8:c7:c5:
e4:96:b3:e8:e2:a8:0c:1c:71:c1:46:cc:72:d7:fd:85:2a:36:
35:1a:1f:2c:51:b0:37:6e:a2:78:7a:c0:46:f7:b1:21:64:a4:
a4:d8:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:53 2026 by rpki-client