Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xQJQJaarNllqwB3lf4Y-5vtzsu8.roa
File: xQJQJaarNllqwB3lf4Y-5vtzsu8.roa (raw, json)
Hash identifier: fF1jjfGfYEd+oLxcdsymV3sjmUTSNhahI/pxnlNjlqY=
Subject key identifier: C5:02:50:25:A6:AB:36:59:6A:C0:1D:E5:7F:86:3E:E6:FB:73:B2:EF
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23690B3005B4DF1EBB4D77493D1D116A
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xQJQJaarNllqwB3lf4Y-5vtzsu8.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214661
IP address blocks: 213.218.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0b:30:05:b4:df:1e:bb:4d:77:49:3d:1d:11:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5025025a6ab36596ac01de57f863ee6fb73b2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:76:94:d3:4d:f8:e7:b1:4c:37:72:76:ac:
94:2a:09:db:17:73:70:b6:3e:d1:95:fc:97:32:5d:
b6:41:d4:ef:7c:ad:32:25:25:7f:c3:e2:ce:4b:10:
98:fa:c0:92:ba:fb:e0:35:c6:64:1f:1e:0f:0f:75:
a6:e0:af:f4:92:36:9d:0c:45:31:cf:b5:fa:c1:3f:
41:a2:3f:69:9d:43:c7:70:3d:35:ba:3d:b0:d6:a4:
65:70:a9:09:78:52:d1:69:ed:fa:34:05:0c:11:05:
2d:84:af:19:a7:a1:35:88:bc:39:a4:0a:f2:f4:49:
99:29:8f:dc:86:fb:f8:3e:cd:cc:47:5a:e8:d9:4e:
18:38:4d:f5:04:6c:b4:b3:5a:76:11:22:3d:9e:90:
09:8d:fb:4f:bb:22:22:cf:af:fa:a7:e0:20:2d:2b:
02:15:fc:29:e7:00:0e:07:b3:9b:10:5e:d4:f7:68:
6e:34:ba:8a:40:35:2f:93:0f:34:24:6f:0a:2c:92:
98:c2:59:de:5f:a5:09:39:f1:e8:9f:68:7d:8b:66:
62:7a:0f:ab:21:eb:ee:cf:71:59:e8:80:cc:06:73:
d7:18:57:70:91:3e:6d:0e:d6:e7:2d:0b:ae:4e:54:
f3:2f:64:8d:62:a6:2d:82:b3:0a:e4:c9:82:92:7f:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:02:50:25:A6:AB:36:59:6A:C0:1D:E5:7F:86:3E:E6:FB:73:B2:EF
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xQJQJaarNllqwB3lf4Y-5vtzsu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.254.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f4:29:ba:24:63:04:23:d0:30:1f:37:33:1a:46:09:b9:19:
5d:7a:0d:5d:48:ab:d8:9b:88:14:27:d4:53:5e:da:40:0e:7f:
5e:0a:e3:8c:74:11:2b:45:d5:19:ab:fb:ce:d7:1e:d1:2c:3b:
ad:f1:e9:a2:b5:22:f6:37:43:1b:cb:fe:53:db:98:f0:6b:5c:
32:a0:ce:11:f3:9f:14:8a:ef:a7:4b:ba:ee:94:4d:af:84:38:
01:e2:eb:89:cf:1b:7d:59:1b:fc:e4:02:13:19:53:ca:4b:11:
a6:9d:87:b8:11:39:50:f2:5d:d4:42:36:1c:22:0c:d0:cd:0b:
61:2c:0a:21:c2:14:da:e1:ce:c9:9b:e1:b4:dc:1a:f2:5b:39:
f1:36:03:48:ae:75:7f:e5:e8:c1:6d:49:ba:aa:7c:fe:72:97:
51:57:b2:38:44:2a:c4:05:25:c5:ba:1d:91:9c:91:f1:27:f6:
84:8d:d5:d7:11:10:1a:5c:d5:9f:61:a9:bf:5b:ea:ab:c9:7a:
b5:9a:24:fd:a6:ae:bc:39:e0:3b:00:c1:4b:2d:62:11:43:40:
b0:f0:3d:57:92:60:c6:2e:7d:8b:1f:e3:08:a0:fa:9d:47:3b:
5b:71:9f:53:de:c3:68:fc:83:b3:9d:31:5e:f7:3f:9f:91:14:
2a:0b:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:20:08 2026 by rpki-client