Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/xGSYQsOgdXCLMTFQ0PdCx28C9Vc.roa
File: xGSYQsOgdXCLMTFQ0PdCx28C9Vc.roa (raw, json)
Hash identifier: i7k8S6hZADJ8g+uzpQ67QkQKYamhs/HoCpc73alf52g=
Subject key identifier: C4:64:98:42:C3:A0:75:70:8B:31:31:50:D0:F7:42:C7:6F:02:F5:57
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A1716F1F0984C768DCDF2D002E5A939652
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/xGSYQsOgdXCLMTFQ0PdCx28C9Vc.roa
Signing time: Sun 25 Oct 2026 05:01:10 +0000
ROA not before: Sun 25 Oct 2026 05:01:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216061
IP address blocks: 94.184.0.0/24 maxlen: 24
94.184.1.0/24 maxlen: 24
94.184.2.0/24 maxlen: 24
94.184.3.0/24 maxlen: 24
94.184.5.0/24 maxlen: 24
94.184.7.0/24 maxlen: 24
94.184.8.0/24 maxlen: 24
94.184.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:6f:1f:09:84:c7:68:dc:df:2d:00:2e:5a:93:96:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Oct 25 05:01:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4649842c3a075708b313150d0f742c76f02f557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ac:b2:7b:1e:53:32:8f:f7:83:84:60:fa:95:
14:4b:b5:d6:a0:98:ed:a7:8e:67:b5:5a:89:ed:99:
c7:82:36:32:a5:45:2b:00:ea:08:82:18:d1:2a:d9:
ff:d9:e3:20:4d:cc:98:7b:4b:cb:0a:70:94:55:18:
64:31:46:02:30:1f:85:23:7c:0e:a4:45:ae:06:1e:
77:eb:2a:1d:5b:7a:d3:f8:a1:63:bd:02:ef:30:98:
cc:e0:b3:f7:6c:cd:23:55:ec:78:dc:d8:41:90:d7:
ed:88:a7:12:f2:cb:f9:7a:86:64:4d:99:ac:7d:4c:
8f:64:dc:15:5b:65:2e:37:8f:4f:9e:78:98:96:29:
35:bc:c3:d1:8a:a4:12:a0:9b:58:8a:a0:bc:66:86:
70:a1:79:2d:f2:3a:a5:fa:30:f0:81:97:88:64:87:
1c:f8:3d:15:9f:89:42:01:25:f5:b1:e3:50:41:6c:
98:07:70:40:01:be:f2:26:19:00:03:98:9e:84:cf:
b3:aa:e0:71:26:83:3b:81:ed:42:13:4b:3b:fb:80:
83:47:9d:c5:99:29:72:ab:13:ed:a1:51:55:a7:e5:
7f:38:cc:58:d6:e0:45:05:84:b0:e6:bc:14:4f:b6:
8e:0e:65:f4:a3:8b:35:f3:0c:9f:3d:09:f0:d0:3a:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:64:98:42:C3:A0:75:70:8B:31:31:50:D0:F7:42:C7:6F:02:F5:57
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/xGSYQsOgdXCLMTFQ0PdCx28C9Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.0.0/22
94.184.5.0/24
94.184.7.0-94.184.8.255
94.184.25.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a1:ff:f6:0d:47:f2:9f:7e:d3:e8:f4:f8:d0:23:5c:c9:1d:
55:37:d2:e4:94:99:b9:57:cd:fd:93:5c:19:8e:b7:fe:77:2c:
aa:af:8a:f0:45:ca:d5:77:cf:2b:40:09:3c:e2:0f:d7:e4:3e:
3b:8a:15:88:7e:eb:59:d8:18:80:d2:77:00:30:35:f1:f2:ff:
c1:b1:96:43:99:66:8c:f6:74:46:3a:9d:a1:05:5f:ca:5b:ee:
e0:36:ab:bc:58:4b:f4:f2:37:a6:9f:98:a3:aa:a3:d7:24:3a:
f8:66:29:ca:95:7c:4c:2b:a4:8e:e0:f0:ed:16:74:8a:90:6a:
47:70:db:b1:c3:ee:55:70:d2:6b:a8:aa:0a:8e:bc:48:d4:3b:
d8:66:fa:f6:33:8e:4f:df:31:5e:3d:0a:c1:5c:2e:b8:91:ab:
19:8d:5a:8d:1c:cb:1f:2d:84:c7:1b:23:0e:8e:0e:06:68:48:
3e:40:68:ea:9c:8c:4e:7c:0a:27:7e:6d:fc:68:04:4f:51:88:
9b:4a:1e:0f:85:51:f0:71:e5:49:bd:4a:b6:33:fc:9e:90:1d:
7c:d9:8c:1b:a5:50:4c:3c:f9:38:0a:22:80:d4:d0:1a:86:a0:
6c:3c:7c:41:f0:da:1a:4f:88:1b:74:e0:61:d2:1d:01:65:e4:
44:c7:c6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:37:50 2026 by rpki-client