Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/X4qIeKOmedgXDTRPLgWy7v2oZnM.roa
File: X4qIeKOmedgXDTRPLgWy7v2oZnM.roa (raw, json)
Hash identifier: gFuzlAklLL1Pp+mMdGf/kZQhX+l0jF3y62YatnT60pI=
Subject key identifier: 5F:8A:88:78:A3:A6:79:D8:17:0D:34:4F:2E:05:B2:EE:FD:A8:66:73
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01A0755466FA79939A2E0047B8A27139F3CE
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/X4qIeKOmedgXDTRPLgWy7v2oZnM.roa
Signing time: Sun 06 Sep 2026 06:07:40 +0000
ROA not before: Sun 06 Sep 2026 06:07:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135330
IP address blocks: 2.56.8.0/24 maxlen: 24
147.189.132.0/24 maxlen: 24
2a0b:ae40:9::/48 maxlen: 48
2a0e:c80:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:54:66:fa:79:93:9a:2e:00:47:b8:a2:71:39:f3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Sep 6 06:07:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f8a8878a3a679d8170d344f2e05b2eefda86673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:83:2a:ae:82:aa:6f:18:18:da:54:e3:76:
7d:b4:e5:af:24:eb:47:0c:04:49:79:91:8d:69:f0:
05:a3:f0:d1:9b:f3:c1:be:2c:46:49:74:46:0e:db:
a6:57:bc:dc:ee:6f:d3:2f:a0:12:c5:55:6e:24:08:
c4:ff:fe:3d:a4:ef:91:5b:90:2e:38:e9:6e:6a:a5:
45:3c:0a:39:07:fb:e3:29:55:1a:bf:23:99:a2:66:
21:ba:6e:45:9c:9d:24:6b:38:4c:20:da:f1:3e:96:
78:73:af:5c:4f:c6:68:58:06:5d:64:a1:cf:b4:7c:
e3:24:25:36:c4:be:c9:18:c6:ca:a8:6c:91:24:ed:
84:3e:f0:8f:61:1e:1b:66:ef:83:91:9e:b2:92:97:
47:fc:63:fc:0b:be:cb:26:d4:f5:9b:7e:d0:35:34:
16:96:9b:0c:47:e8:f8:9e:2a:1b:7f:d8:82:46:14:
76:06:3e:9b:17:0b:76:60:5d:de:f3:2a:be:42:da:
92:37:35:df:45:5b:ab:44:c9:e6:fc:1c:95:4f:28:
b0:74:a5:37:5d:7e:c2:dc:d7:e4:3b:c9:88:94:d6:
5a:b0:f3:3f:75:d2:ce:60:1f:a9:97:be:3f:65:de:
13:41:5c:d3:5e:1f:99:46:7b:c9:c0:94:b3:17:05:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8A:88:78:A3:A6:79:D8:17:0D:34:4F:2E:05:B2:EE:FD:A8:66:73
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/X4qIeKOmedgXDTRPLgWy7v2oZnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.8.0/24
147.189.132.0/24
IPv6:
2a0b:ae40:9::/48
2a0e:c80:5::/48
Signature Algorithm: sha256WithRSAEncryption
5b:ff:1b:21:44:9c:d3:e7:77:0b:74:a7:fb:31:94:36:1f:35:
cc:d0:11:04:53:c8:39:bd:02:da:a9:2c:5c:85:d1:83:64:88:
bf:2d:89:fa:69:8e:8c:4f:45:06:47:24:98:04:58:e4:7c:ac:
9c:de:e3:02:7d:9c:15:6f:44:dd:e7:49:81:83:7a:a7:75:72:
26:d6:e4:88:b5:0d:19:67:39:d7:96:2c:1d:be:81:25:53:3b:
ee:61:6c:ea:c0:f8:ab:e9:92:4f:ac:fd:fe:ee:8a:8b:49:93:
7c:ed:8a:94:65:76:2d:39:34:e7:46:b6:35:1b:88:b7:b5:1d:
b1:79:93:fb:ac:a6:08:0c:eb:81:69:ba:e6:15:81:c6:97:4c:
ac:30:c8:2a:87:fc:b1:22:04:fb:7e:99:71:13:de:20:58:9b:
39:0b:ef:b4:62:4f:47:ab:76:ab:02:7e:f4:86:f4:12:2b:5f:
cf:ed:45:f1:fe:e0:fc:91:f7:b4:85:4d:c0:1e:aa:8f:2d:a7:
0f:d6:d4:5f:c4:99:5f:61:68:5a:33:04:e1:f3:82:eb:f9:53:
c7:a3:4d:0f:e9:71:c0:96:69:73:49:34:1b:68:f1:45:b5:7d:
17:42:11:fa:e3:e3:ec:06:cc:1c:51:13:7e:a8:73:0c:ff:77:
52:de:4e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:28:13 2026 by rpki-client