Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/xTRu_tyayD9TCcxsinHLfOj03pc.roa
File: xTRu_tyayD9TCcxsinHLfOj03pc.roa (raw, json)
Hash identifier: +uoJZ25NPRo6h6sjEmam2SV9RmTRqXG+rOsQfHYwAF0=
Subject key identifier: C5:34:6E:FE:DC:9A:C8:3F:53:09:CC:6C:8A:71:CB:7C:E8:F4:DE:97
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019C75A2DB02656F066E5394340F0C19862F
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/xTRu_tyayD9TCcxsinHLfOj03pc.roa
Signing time: Thu 19 Feb 2026 11:22:13 +0000
ROA not before: Thu 19 Feb 2026 11:22:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201497
IP address blocks: 91.194.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:a2:db:02:65:6f:06:6e:53:94:34:0f:0c:19:86:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Feb 19 11:22:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5346efedc9ac83f5309cc6c8a71cb7ce8f4de97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:b0:51:32:55:31:55:a0:47:94:4c:52:a8:
06:29:5b:a5:05:c5:80:30:b4:d6:1a:92:f1:d3:c5:
e4:30:b2:58:05:1a:42:ce:f9:f2:bc:3f:1a:c9:18:
c9:84:43:24:95:68:66:d5:f4:33:35:9e:ad:2f:94:
08:67:fc:7b:f5:84:af:0f:37:cd:3c:0d:9e:bd:38:
27:b7:1b:51:24:5f:93:d8:b2:52:f8:24:20:41:c2:
3f:72:e3:ae:da:25:d1:16:de:22:19:69:da:59:52:
cd:b0:73:f0:0f:fb:52:93:6e:5d:98:88:ea:dd:6b:
e0:16:64:12:72:89:52:8e:4f:94:53:00:50:1f:56:
2a:a1:12:0c:ee:26:9e:af:20:b6:cd:80:16:38:23:
0d:d2:4e:bb:be:57:ff:d7:8e:c6:3c:23:f8:30:d7:
67:72:fe:cb:20:a6:eb:31:0d:b2:9b:41:a1:56:4d:
5c:42:8a:9a:96:8b:8b:ee:16:88:c4:d1:79:bf:18:
a0:33:26:41:57:81:fe:69:42:8f:1e:6b:f3:24:d1:
c4:3c:f8:bf:e2:cc:d1:30:b8:2b:46:67:56:64:b4:
42:45:db:84:aa:44:07:01:f9:dc:75:96:b5:b6:82:
cc:30:a7:e8:3e:84:29:e5:a0:bf:97:c2:a5:d1:6d:
ba:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:34:6E:FE:DC:9A:C8:3F:53:09:CC:6C:8A:71:CB:7C:E8:F4:DE:97
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/xTRu_tyayD9TCcxsinHLfOj03pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.194.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:e3:3b:d6:a5:68:74:ef:3a:48:c8:49:a3:cd:3f:26:db:9f:
02:89:d0:fa:20:c9:71:a6:98:cf:b0:97:1e:61:5a:9d:1f:95:
07:37:4c:33:6e:6e:c4:55:f4:86:26:e7:c7:fe:86:b0:ea:bb:
f2:d1:b0:a7:37:2a:cd:c9:49:8d:09:0d:97:8a:9c:3e:ef:ed:
bd:cf:d9:8a:0e:ed:42:b2:57:3c:cc:d6:e7:1d:cc:b4:f2:d8:
51:52:03:7e:91:72:5d:e6:72:20:ab:5c:36:d9:41:f3:35:a1:
e9:5a:49:a0:a7:db:97:54:44:9e:16:c3:ea:c5:8a:07:9b:00:
79:49:fb:a8:d8:49:60:e6:4f:d1:3b:63:06:34:f7:50:77:bb:
2e:2d:e3:f3:cc:5f:17:a2:b1:17:bc:e5:d7:cd:c1:8c:78:bc:
82:e6:80:78:7c:2e:47:5a:df:aa:17:dc:ee:70:dd:91:a2:7a:
d3:80:13:d1:15:6a:fa:70:25:fb:0b:68:f7:fc:bd:d8:05:9b:
38:1b:d6:f9:d7:55:8e:84:49:13:cf:f1:06:57:c6:e1:d4:69:
ee:c8:da:db:ad:9b:d0:7b:cc:b1:91:32:58:8c:b4:de:ba:54:
a9:62:86:10:76:b0:7d:e7:2d:ba:90:ad:cd:ad:f0:f5:b5:5b:
ff:15:1c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:10:56 2026 by rpki-client