Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/xm-giN1_4xQkS7oWDMF-PGSR_zs.roa
File: xm-giN1_4xQkS7oWDMF-PGSR_zs.roa (raw, json)
Hash identifier: 0P6Rz44L0zbSop2KodtAJVOn4O7mdpBxYyQArrYs2PE=
Subject key identifier: C6:6F:A0:88:DD:7F:E3:14:24:4B:BA:16:0C:C1:7E:3C:64:91:FF:3B
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 01A13BC02FEEF34AE12C6B506148A90A69DB
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/xm-giN1_4xQkS7oWDMF-PGSR_zs.roa
Signing time: Wed 14 Oct 2026 18:50:13 +0000
ROA not before: Wed 14 Oct 2026 18:50:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197200
IP address blocks: 2a14:16c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c0:2f:ee:f3:4a:e1:2c:6b:50:61:48:a9:0a:69:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Oct 14 18:50:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c66fa088dd7fe314244bba160cc17e3c6491ff3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:b6:0a:b0:56:98:eb:0b:b7:19:6b:8e:e9:
09:46:19:77:2d:b9:ee:2e:a9:09:d8:66:8f:c9:8e:
4a:73:42:1e:6f:9b:69:54:74:a1:ae:d5:1f:63:10:
e8:ae:d2:00:1b:b5:3b:8b:22:e5:60:21:29:51:7b:
5d:bf:a0:14:79:59:9a:1c:74:32:fa:14:9f:68:1d:
2b:f2:e7:ef:1a:a8:e6:a6:a9:9c:2a:5f:f5:d4:7f:
b9:62:80:6b:35:b6:67:5b:8e:61:07:fa:f1:37:5b:
80:7f:17:a3:21:3b:29:48:93:86:c4:11:c6:e6:61:
63:63:cc:88:1f:3b:82:fe:28:94:4e:e5:1a:7a:8f:
78:d9:15:92:fc:b9:d3:e5:a2:da:25:35:c8:98:99:
d0:98:be:39:54:c9:d6:80:af:64:e7:db:9c:ee:c2:
6f:8b:94:b8:1e:35:9e:8c:14:57:a1:28:0c:0b:37:
a6:82:b8:de:68:00:af:fd:15:63:00:91:8b:c5:3d:
a3:44:9f:fc:23:99:ce:c9:a0:00:4b:d0:e9:0f:c8:
1d:29:f4:b0:0a:d5:e9:f4:21:10:86:99:1e:b2:81:
03:8d:46:6b:82:43:ec:a2:fb:20:e4:4e:68:92:04:
9b:ae:b1:23:52:53:31:b8:ca:e3:e6:14:cd:2a:3c:
1f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6F:A0:88:DD:7F:E3:14:24:4B:BA:16:0C:C1:7E:3C:64:91:FF:3B
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/xm-giN1_4xQkS7oWDMF-PGSR_zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:16c0::/29
Signature Algorithm: sha256WithRSAEncryption
30:e4:77:fd:a6:2e:cb:83:88:b2:b0:5e:c6:43:9b:78:df:67:
ff:c8:83:17:78:3b:f5:0f:8d:03:a1:7a:27:a0:32:fc:0f:dd:
dc:2c:fb:3f:64:76:14:84:4d:52:0d:a9:ab:a9:ff:f7:cd:e6:
7d:01:b3:9a:4c:a1:7d:54:93:27:cc:fa:40:d8:a7:27:0c:ce:
bd:53:e4:01:ca:5b:5a:47:f2:74:b9:48:02:e6:28:8e:36:f1:
72:98:df:33:1f:43:8f:3c:47:6d:3f:22:ce:86:bb:c4:29:50:
2d:1c:3a:b1:ad:79:9c:5d:ea:1d:c8:e9:b7:8e:c4:52:9e:06:
28:e8:12:fd:79:46:83:82:13:c2:0a:8b:f4:e9:ba:5d:02:8c:
4a:8a:5e:dc:9a:bc:bc:56:c0:ef:09:44:cb:c1:16:65:b4:3f:
5b:eb:96:43:5f:4f:5d:ad:c0:1b:13:f1:39:ef:73:cf:ca:5f:
14:3e:a8:c6:61:0d:86:04:a9:3e:9d:af:68:b4:83:66:ab:84:
86:90:65:30:00:34:da:a1:ea:45:41:4a:4c:a1:b0:b5:5e:2a:
13:54:55:f4:43:40:9d:d5:ab:33:91:a2:12:ee:6f:23:63:ea:
c9:ed:4c:d1:9f:a1:fe:cf:12:a2:75:5c:70:c5:38:70:ac:f2:
58:06:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:18:49 2026 by rpki-client