Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/xJPTTp5K8VAilWrMTnS2jp6tHnk.roa
File: xJPTTp5K8VAilWrMTnS2jp6tHnk.roa (raw, json)
Hash identifier: KMPOdyDiNO1wmzY0MhqQ4kgJJIERiU41QBcjjv60rmU=
Subject key identifier: C4:93:D3:4E:9E:4A:F1:50:22:95:6A:CC:4E:74:B6:8E:9E:AD:1E:79
Certificate issuer: /CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Certificate serial: 019F23690AA497CDBE3E15CDA52E66C880A3
Authority key identifier: 77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/xJPTTp5K8VAilWrMTnS2jp6tHnk.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 194.238.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0a:a4:97:cd:be:3e:15:cd:a5:2e:66:c8:80:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c493d34e9e4af15022956acc4e74b68e9ead1e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:ac:c5:da:7d:ff:03:e6:89:f1:a0:f2:c3:
ef:82:80:08:70:5e:11:0e:3d:36:f8:76:39:a1:9c:
7d:b0:6e:ab:ae:e7:71:d4:a0:75:6f:7f:a8:97:19:
83:1a:4b:91:26:8e:37:3d:73:0d:6a:e6:b0:b3:00:
49:6b:e4:9a:a2:0b:35:c6:ca:ab:ae:89:8e:88:a3:
fe:cc:38:e7:2d:57:92:55:2b:11:43:af:54:55:b7:
11:6d:8e:5c:e4:4e:38:24:2d:68:94:09:6c:58:eb:
47:15:f8:5f:87:10:1b:fc:31:19:60:a5:be:84:9d:
f4:f1:d0:c3:1d:4c:d8:e9:51:54:6d:6c:a9:6e:f6:
00:eb:33:c5:94:3e:44:8a:a3:24:10:47:0b:b0:ac:
88:c4:29:e4:04:66:fa:d6:1f:50:91:34:11:67:26:
fe:cc:6c:eb:c3:d9:1f:5f:60:7d:63:3c:f5:26:95:
1e:9e:98:04:da:39:ad:5f:0d:bf:d1:cb:de:04:0e:
b8:42:c2:ef:d0:91:25:93:7a:d1:2a:35:3a:79:6e:
c5:98:da:3d:e2:c5:c4:80:87:5a:48:f4:b1:c4:6e:
22:31:a5:6a:8a:f1:33:93:cc:9f:51:40:56:79:3a:
bc:60:96:5c:90:e1:18:b3:ea:5d:93:c2:ca:61:bc:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:93:D3:4E:9E:4A:F1:50:22:95:6A:CC:4E:74:B6:8E:9E:AD:1E:79
X509v3 Authority Key Identifier:
keyid:77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/xJPTTp5K8VAilWrMTnS2jp6tHnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:b4:36:ab:96:44:13:0b:48:72:df:5d:38:77:75:cf:b8:2a:
3f:68:e1:b5:87:c9:e0:b7:11:9f:99:47:66:0d:e5:5e:c8:c3:
8d:b8:ca:91:ad:7a:cc:5e:21:b6:d9:7f:7d:5b:8e:7f:d3:7a:
76:ed:55:d8:1a:70:e2:72:dd:87:d5:71:92:bd:2a:52:c0:0c:
e8:b9:0c:2c:c8:11:0a:2f:ad:66:bb:93:25:96:a5:d9:58:e3:
e0:6f:b0:dd:bc:e8:88:a9:da:0d:26:18:88:c0:95:43:e8:a6:
6d:83:c1:99:c0:0f:de:9f:75:37:1c:e9:44:08:bd:6b:67:8c:
fb:99:ce:1a:2e:0e:95:52:8c:80:ac:f4:42:ae:0d:b9:d7:b0:
e8:19:95:31:14:5c:bb:38:35:6c:fc:66:17:63:01:64:ce:6e:
5f:1b:fe:b3:ca:88:ce:3d:56:6f:b4:4a:39:32:9b:17:d1:15:
c4:b5:85:dd:40:b3:6c:a2:b3:a9:41:66:cc:a7:c6:40:a1:a2:
ce:97:07:74:e9:19:70:d2:ee:7e:51:89:e7:d7:82:83:8b:05:
0a:a6:97:42:e1:61:19:79:02:ea:64:45:8e:0b:9a:6e:72:27:
1a:00:95:38:9d:f8:70:c5:89:91:4e:d8:d1:2b:3f:62:1c:72:
e7:4c:ab:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQqkl82+PhXNpS5myICjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzgwMDU0ZTEzMzBjYTcxYjQ5MDBkNjE1YzJjZjJjM2Nl
NmNmMDQwHhcNMjYwNzAyMTUxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDkzZDM0ZTllNGFmMTUwMjI5NTZhY2M0ZTc0YjY4ZTllYWQxZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrSsxdp9/wPmifGg8sPvgoAIcF4R
Dj02+HY5oZx9sG6rrudx1KB1b3+olxmDGkuRJo43PXMNauawswBJa+Saogs1xsqr
romOiKP+zDjnLVeSVSsRQ69UVbcRbY5c5E44JC1olAlsWOtHFfhfhxAb/DEZYKW+
hJ308dDDHUzY6VFUbWypbvYA6zPFlD5EiqMkEEcLsKyIxCnkBGb61h9QkTQRZyb+
zGzrw9kfX2B9Yzz1JpUenpgE2jmtXw2/0cveBA64QsLv0JElk3rRKjU6eW7FmNo9
4sXEgIdaSPSxxG4iMaVqivEzk8yfUUBWeTq8YJZckOEYs+pdk8LKYbySNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMST006eSvFQIpVqzE50to6erR55MB8GA1UdIwQY
MBaAFHfIAFThMwynG0kA1hXCzyw85s8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhnQVZPRXpES2NiU1FEV0ZjTFBMRHptendRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzct
ZTUyMjlhZDUyMTRlLzEveEpQVFRwNUs4VkFpbFdyTVRuUzJqcDZ0SG5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzctZTUyMjlhZDUyMTRl
LzEvZDhnQVZPRXpES2NiU1FEV0ZjTFBMRHptendRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwu46MA0G
CSqGSIb3DQEBCwUAA4IBAQC1tDarlkQTC0hy3104d3XPuCo/aOG1h8ngtxGfmUdm
DeVeyMONuMqRrXrMXiG22X99W45/03p27VXYGnDict2H1XGSvSpSwAzouQwsyBEK
L61mu5MllqXZWOPgb7DdvOiIqdoNJhiIwJVD6KZtg8GZwA/en3U3HOlECL1rZ4z7
mc4aLg6VUoyArPRCrg2517DoGZUxFFy7ODVs/GYXYwFkzm5fG/6zyojOPVZvtEo5
MpsX0RXEtYXdQLNsorOpQWbMp8ZAoaLOlwd06Rlw0u5+UYnn14KDiwUKppdC4WEZ
eQLqZEWOC5pucicaAJU4nfhwxYmRTtjRKz9iHHLnTKux
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:48 2026 by rpki-client