Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xLWqcCQ59qN_iGCQBdMNXibgnl4.roa
File: xLWqcCQ59qN_iGCQBdMNXibgnl4.roa (raw, json)
Hash identifier: BIoL244l4qqto3duJrusCCDNfrgHgvWrmFmxo9o43wE=
Subject key identifier: C4:B5:AA:70:24:39:F6:A3:7F:88:60:90:05:D3:0D:5E:26:E0:9E:5E
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368EA3BA6A854DB7DC3D51D57602894
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xLWqcCQ59qN_iGCQBdMNXibgnl4.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208226
IP address blocks: 109.176.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ea:3b:a6:a8:54:db:7d:c3:d5:1d:57:60:28:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4b5aa702439f6a37f88609005d30d5e26e09e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:da:b0:df:04:68:2c:e5:b1:e8:1d:ee:18:
9d:e5:85:b9:40:4d:3d:c3:47:7c:26:aa:05:e6:6c:
f6:81:15:01:cd:3c:30:38:48:21:04:f4:9d:2d:cc:
f4:87:c2:71:dc:9c:98:94:d5:d4:3b:5a:8d:1c:0b:
7d:7f:28:80:8a:3d:d6:f7:83:d2:54:fd:6d:32:9a:
e5:f3:35:07:4f:c7:e8:90:88:17:0c:b3:c3:cd:bf:
5c:84:83:f4:db:b6:0d:15:d6:ad:b7:cf:de:43:5b:
13:93:43:45:0c:c3:0c:c1:d9:cf:0a:d8:55:d5:4b:
68:93:e8:3b:9f:27:8e:7f:2f:50:61:b3:67:78:9c:
9e:00:0f:f7:ef:6b:7c:96:1a:ad:39:28:35:c6:80:
54:c0:09:fd:a5:19:ac:a1:df:05:92:8e:a3:61:48:
c7:66:09:a7:3f:9d:d6:ed:d1:08:8d:58:25:f3:05:
e0:29:1a:a2:2e:99:5d:f5:2c:4c:67:8f:88:3f:e4:
21:91:80:21:b3:9a:d3:c6:50:46:41:8a:b6:e7:e0:
aa:0f:cf:c4:17:75:d7:d1:56:c7:15:2b:e3:c2:0e:
5e:d2:7f:16:09:63:37:5d:ed:39:08:46:2b:9f:be:
0e:fb:b5:e8:db:a0:42:f6:fb:04:ca:e1:cd:ae:d1:
58:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B5:AA:70:24:39:F6:A3:7F:88:60:90:05:D3:0D:5E:26:E0:9E:5E
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xLWqcCQ59qN_iGCQBdMNXibgnl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.91.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:72:46:9e:dd:7b:6f:f3:d2:76:b9:29:99:31:31:56:1d:d0:
40:24:4c:98:ed:68:15:00:2b:3c:e7:03:29:ba:1b:81:0d:56:
ea:0e:c3:61:6d:86:61:11:76:18:59:59:6a:90:31:6d:13:f2:
c0:e3:c9:49:cf:00:56:ae:5b:21:a4:6f:6b:3e:cb:dc:42:5a:
bb:63:75:5a:63:27:eb:b6:2f:27:05:5b:3b:52:36:09:c1:16:
b1:aa:78:16:ea:c1:0d:3e:5c:27:0b:b3:c4:0f:8e:07:a7:ba:
50:26:85:19:60:44:99:81:a6:37:65:d2:6e:4f:80:a6:a3:80:
4a:7c:f2:1d:c1:2c:eb:69:16:ed:cf:a8:e7:5f:51:73:cd:7f:
cf:73:37:1f:71:c8:a4:ca:37:74:45:eb:72:1e:f2:05:65:da:
0c:b3:9b:9f:97:e1:37:13:0b:fb:01:46:3a:f4:e4:17:5b:1c:
c2:0d:60:64:8f:a5:14:cd:57:93:44:96:04:0b:33:45:96:65:
ae:3d:dc:d6:c3:d5:5d:8d:35:7b:ea:46:1d:75:50:35:56:f1:
bd:b3:4a:e8:31:23:03:68:7f:72:8e:4a:9f:8d:15:e4:4b:31:
5a:bb:a3:8f:92:ae:e4:f6:2f:7e:c0:b0:fe:b3:08:58:c7:ee:
fa:ba:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:28 2026 by rpki-client