Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Xt6zWGQgJ7OZ5m019bhnxofUJnU.roa
File: Xt6zWGQgJ7OZ5m019bhnxofUJnU.roa (raw, json)
Hash identifier: 4nQ6eOkRIm9+m+ARz/C/jnfX9vVdmTgRULBpQgKiGQk=
Subject key identifier: 5E:DE:B3:58:64:20:27:B3:99:E6:6D:35:F5:B8:67:C6:87:D4:26:75
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019FCC43FEA2A091A6EF8EB73AF45A0C1636
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Xt6zWGQgJ7OZ5m019bhnxofUJnU.roa
Signing time: Tue 04 Aug 2026 10:13:55 +0000
ROA not before: Tue 04 Aug 2026 10:13:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207791
IP address blocks: 130.0.71.0/24 maxlen: 24
2a01:190:151e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:43:fe:a2:a0:91:a6:ef:8e:b7:3a:f4:5a:0c:16:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Aug 4 10:13:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5edeb358642027b399e66d35f5b867c687d42675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:f0:0d:98:1a:92:e7:7e:ea:ea:49:1b:99:
7c:d5:dd:83:e9:7d:1d:be:53:3e:01:d6:08:cf:31:
d6:bf:e1:11:fa:2d:f3:90:9b:71:90:42:b1:f2:8f:
11:db:15:1f:8f:73:fc:96:b5:13:6e:0a:8d:c5:5c:
c0:bf:c4:c0:1c:ab:b5:34:55:91:d8:32:88:e1:bd:
8f:f3:5a:7f:01:d0:e8:5f:5e:e6:ea:09:b5:c2:aa:
e4:98:c1:b5:48:4c:92:29:df:c1:f2:51:13:27:b0:
8c:35:1c:03:09:e9:fe:b3:3d:49:e1:85:60:19:54:
00:56:d5:83:a9:b7:09:fa:f4:f6:9a:71:5d:a1:0f:
f0:39:e1:da:6f:0f:e3:b1:e4:29:ab:9f:d0:01:c6:
f3:2e:11:ec:b4:bb:e9:df:2a:d5:af:62:f9:65:9e:
66:e7:8b:e4:75:6a:bc:fc:2e:da:10:3a:d4:96:d9:
8e:39:66:ce:b6:16:a8:4d:b9:72:00:0f:81:d9:99:
67:94:e4:86:12:c9:22:0c:ba:35:40:0e:33:33:c8:
bf:1d:16:14:e1:6e:cb:c5:40:5c:70:b9:21:87:dd:
8d:40:44:ff:08:9b:8c:e2:4f:88:e7:fd:e6:7c:f4:
47:95:cd:67:82:57:e6:2c:01:f1:d3:f9:05:ac:e6:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DE:B3:58:64:20:27:B3:99:E6:6D:35:F5:B8:67:C6:87:D4:26:75
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Xt6zWGQgJ7OZ5m019bhnxofUJnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.71.0/24
IPv6:
2a01:190:151e::/48
Signature Algorithm: sha256WithRSAEncryption
2b:d6:dc:a1:cc:9f:15:43:3a:48:e5:f1:fc:60:81:01:a8:c7:
33:8f:46:55:ed:8a:9a:f2:35:e1:bb:86:3a:b3:db:06:c1:50:
1b:0f:7d:27:4b:c7:d7:20:54:77:72:bc:b6:8b:f3:4c:33:2b:
f3:4e:e7:d9:7a:5e:0f:47:3a:e4:88:8b:1d:24:aa:6b:2a:1a:
41:6a:25:d0:1e:08:1c:40:af:8d:22:34:82:de:a5:b1:bc:85:
db:f8:14:7a:53:1d:3c:8c:dd:c0:0b:14:26:be:85:41:ee:b1:
57:51:e5:96:b6:1a:48:cb:05:b8:2d:6b:be:9a:cb:14:99:8c:
33:ad:4a:44:e1:b8:77:90:09:48:99:1c:e7:08:c8:ef:7e:ff:
bc:c6:ba:2b:fd:d9:43:55:49:19:22:3a:22:e0:d9:0c:5f:e7:
d0:fe:ee:59:5f:a0:34:a2:13:21:6f:a0:22:ad:45:74:47:bf:
02:eb:15:21:66:85:7f:d6:5d:b7:d0:be:66:f7:5d:f6:27:73:
b1:11:21:c7:a5:9c:b7:a2:02:ee:ee:e2:26:c9:0c:ee:06:0e:
f8:58:88:9d:a8:57:4e:8f:29:30:3b:28:cf:be:8a:db:57:0c:
c2:13:7a:1f:93:a9:31:10:e3:61:f7:ae:80:9c:b2:53:58:f0:
be:ed:c7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:30:02 2026 by rpki-client