Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/Rxxwpcxvls8zs8535IZHXRKb8m0.roa
File: Rxxwpcxvls8zs8535IZHXRKb8m0.roa (raw, json)
Hash identifier: yZE26IiqgT+xbjqM1qO6+eG13lkByw3rPwmmdAx3lE0=
Subject key identifier: 47:1C:70:A5:CC:6F:96:CF:33:B3:CE:77:E4:86:47:5D:12:9B:F2:6D
Certificate issuer: /CN=56445a0ddca46d6436775912516ab21d48b3c610
Certificate serial: 019F236849AB291DC099069211ED577BB679
Authority key identifier: 56:44:5A:0D:DC:A4:6D:64:36:77:59:12:51:6A:B2:1D:48:B3:C6:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/Rxxwpcxvls8zs8535IZHXRKb8m0.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 138.21.37.0/24 maxlen: 24
138.21.47.0/24 maxlen: 24
138.21.71.0/24 maxlen: 24
193.194.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:49:ab:29:1d:c0:99:06:92:11:ed:57:7b:b6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56445a0ddca46d6436775912516ab21d48b3c610
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=471c70a5cc6f96cf33b3ce77e486475d129bf26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:2a:0c:11:a4:fe:97:12:c6:17:03:b3:3e:
25:43:d7:c1:a5:09:74:a9:7d:f6:f2:64:b5:81:cd:
c5:13:8e:27:5b:d6:d6:09:23:80:14:13:38:41:ec:
98:d6:c9:37:05:84:cd:b6:0a:94:e9:d3:e4:c9:39:
f8:44:f2:71:3c:7d:7f:7f:f8:d3:8c:f6:bc:7a:59:
52:15:2a:6d:63:07:02:6c:f5:ae:2a:82:59:d3:76:
ad:5b:cd:16:a9:03:b1:14:a4:6e:89:d7:3f:69:26:
47:ac:0f:61:b1:24:fa:35:e3:53:b6:15:a4:2f:eb:
ec:28:39:e2:c6:0a:34:4c:a9:2a:81:1e:7b:7d:ec:
e1:c5:2b:42:a8:dc:97:a0:63:8f:05:f3:3c:8c:f1:
46:55:4a:cf:ab:42:52:80:c5:03:dd:62:27:f8:15:
7b:57:0d:5f:61:b5:c1:70:f5:7c:89:08:9a:ae:de:
93:92:7a:79:cd:28:60:95:6f:b5:9d:3f:0c:0d:ee:
a0:6a:72:0e:a0:5c:11:12:ed:e5:4e:6b:95:18:34:
53:5a:b1:ef:a2:d1:ea:47:ac:bf:f7:d6:9d:3f:9e:
b5:08:d5:7e:20:15:b6:a7:ba:40:08:f6:0a:a6:0d:
11:94:14:73:96:d9:85:fc:df:60:d3:06:66:25:28:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1C:70:A5:CC:6F:96:CF:33:B3:CE:77:E4:86:47:5D:12:9B:F2:6D
X509v3 Authority Key Identifier:
keyid:56:44:5A:0D:DC:A4:6D:64:36:77:59:12:51:6A:B2:1D:48:B3:C6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/Rxxwpcxvls8zs8535IZHXRKb8m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.21.37.0/24
138.21.47.0/24
138.21.71.0/24
193.194.134.0/24
Signature Algorithm: sha256WithRSAEncryption
25:81:4a:8d:7f:45:f2:da:f9:ee:1d:e8:40:0d:ea:6d:c7:17:
e3:4f:cb:02:fd:ed:e9:15:96:28:fe:b1:52:71:35:a2:d2:41:
da:e5:cf:d4:2a:48:50:76:97:a4:00:19:93:6a:e1:c1:99:16:
11:f7:8a:0c:0a:8d:56:a4:bf:e5:af:be:ba:39:2a:3a:ea:be:
1d:4e:3e:bc:1a:b1:c1:60:6f:71:80:f1:20:7e:12:9f:9d:83:
48:76:ce:65:ea:39:85:df:86:a2:5f:e3:79:b2:70:74:d2:5d:
09:1c:91:09:e4:4e:82:03:d7:45:34:45:61:b1:3d:3d:5d:cb:
6d:8a:04:a3:28:96:27:d6:44:ec:d0:38:6f:83:b3:d4:74:3f:
ab:db:8c:67:c3:e5:89:1e:f1:48:74:56:4d:27:69:61:ff:62:
71:04:1b:dd:1f:83:17:c2:f7:7e:e9:af:e4:32:b5:c9:d9:d7:
c5:1b:36:38:1e:cc:aa:be:c0:0f:9a:61:19:78:f5:e0:73:b5:
83:5c:b9:83:c2:97:b2:65:72:b5:40:95:67:d2:6d:b0:b2:7a:
f0:72:55:a6:8d:10:c3:c0:6e:d6:c5:bf:55:34:50:b5:27:3f:
78:44:d4:10:25:bd:69:bc:e7:01:57:c5:ec:c8:d0:bb:2c:d2:
27:76:f1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:33:36 2026 by rpki-client