Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/XPBmD8Gtnws4nIHrF49jMceOosg.roa
File: XPBmD8Gtnws4nIHrF49jMceOosg.roa (raw, json)
Hash identifier: O2+V+IZD88cCJbaxnDGHuAzNsGo6UPNKZgTbgUxV0l0=
Subject key identifier: 5C:F0:66:0F:C1:AD:9F:0B:38:9C:81:EB:17:8F:63:31:C7:8E:A2:C8
Certificate issuer: /CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Certificate serial: 019F23690CDA3B5C87E2DF9483F2B8A63177
Authority key identifier: 77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/XPBmD8Gtnws4nIHrF49jMceOosg.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215137
IP address blocks: 194.238.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0c:da:3b:5c:87:e2:df:94:83:f2:b8:a6:31:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cf0660fc1ad9f0b389c81eb178f6331c78ea2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:c4:b8:ac:fa:f7:c8:e0:4c:d6:65:59:8c:
1f:49:7f:2d:6e:b7:55:2f:1e:7b:2c:f2:2c:e0:ff:
0e:99:f3:54:c2:ba:d6:2d:cd:ca:e4:b9:f6:f5:0c:
d3:da:e8:01:2c:ca:fa:23:39:af:6b:3b:42:a4:21:
77:c3:ab:98:42:3a:ef:31:b5:dd:9a:67:12:a9:b9:
28:ef:d3:15:b1:24:12:44:46:e2:8b:05:f2:7b:41:
f9:20:4b:02:90:e1:fc:b6:92:87:10:3c:74:57:23:
61:2f:d9:07:75:d3:66:42:1c:67:a1:70:0e:f6:7c:
cf:4c:07:d9:02:1a:4d:69:ab:fb:a4:5f:d8:41:b4:
5c:ac:53:82:11:94:f8:57:7b:08:9b:12:21:a4:56:
93:d1:e4:67:3a:f4:a2:f9:63:f8:69:73:68:86:ee:
16:f2:97:30:c7:aa:c8:a0:12:dd:8b:9d:27:fe:24:
23:8b:77:9f:93:3f:86:34:5a:02:a2:c9:6e:49:55:
82:dd:bd:c9:f6:5d:7e:1f:1a:0f:44:fa:7d:29:b9:
6a:f8:66:b8:a0:30:d3:8a:4d:1a:2a:1f:0d:0f:ba:
e5:2d:53:4d:ef:05:fd:d2:19:33:55:43:87:f1:49:
97:52:0b:1a:3a:58:51:f0:1e:db:36:8e:26:22:77:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F0:66:0F:C1:AD:9F:0B:38:9C:81:EB:17:8F:63:31:C7:8E:A2:C8
X509v3 Authority Key Identifier:
keyid:77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/XPBmD8Gtnws4nIHrF49jMceOosg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.59.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b9:b5:8a:c0:05:70:c3:82:37:db:7e:ea:3b:db:cc:83:30:
4d:6e:49:bf:3e:50:cd:e4:b3:ec:af:3a:7a:04:1a:6c:ee:85:
06:2b:dd:d4:2f:18:df:d3:30:93:16:4e:cb:9b:39:00:64:e6:
2b:97:da:8c:48:ab:91:81:95:fa:66:11:07:13:5d:bc:07:18:
f9:0f:22:43:3f:22:91:14:33:38:47:3e:ad:a8:d4:7b:4b:67:
51:d0:17:9e:ec:ad:4c:14:8a:36:04:eb:d5:97:a3:38:60:30:
8d:13:a6:3e:10:b6:3c:c9:93:6e:ca:a1:09:4a:c4:38:9b:da:
29:8f:bb:8c:83:28:b9:d1:1b:29:08:cf:88:71:3c:3b:85:a1:
00:c7:aa:a1:1d:30:3a:60:94:a1:49:9b:96:67:5e:d5:01:cf:
6e:8d:4f:07:0d:c8:a7:4f:a8:c8:6c:ea:74:c4:9a:2b:24:51:
2f:c5:a6:f2:b1:05:6d:cc:2c:05:93:93:78:c5:36:bc:bb:ed:
13:32:63:27:93:26:c5:c4:1c:36:19:7f:29:d1:27:dd:98:a2:
cd:8e:4c:bc:ce:cf:06:3a:29:8f:d2:eb:08:42:28:d9:c2:0a:
65:c7:3a:68:0c:61:8e:48:8a:5d:85:f3:60:07:48:63:ef:3d:
96:1b:e7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:09 2026 by rpki-client