Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/XPnc98u3CUN5obEHzxurP6rkBVw.roa
File: XPnc98u3CUN5obEHzxurP6rkBVw.roa (raw, json)
Hash identifier: 4m3ABUbVfJN36M772cp8y6/T3l68sMul8PuOrR8yh5I=
Subject key identifier: 5C:F9:DC:F7:CB:B7:09:43:79:A1:B1:07:CF:1B:AB:3F:AA:E4:05:5C
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019EDF50B2DDF077724B2DDB0D4331B4E552
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/XPnc98u3CUN5obEHzxurP6rkBVw.roa
Signing time: Fri 19 Jun 2026 09:57:48 +0000
ROA not before: Fri 19 Jun 2026 09:57:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 77.246.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:50:b2:dd:f0:77:72:4b:2d:db:0d:43:31:b4:e5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jun 19 09:57:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cf9dcf7cbb7094379a1b107cf1bab3faae4055c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:e9:59:57:d6:56:bf:db:11:21:52:2a:9d:
2e:5b:c0:a4:62:a9:ad:4e:2e:a0:89:1f:09:cd:81:
da:35:58:a1:c2:ae:25:2e:4a:f5:94:5d:a1:39:ad:
62:13:3e:43:fd:ab:ce:f7:89:9a:50:15:b2:84:bf:
3f:cf:e6:6e:35:f0:0f:d4:5a:24:f5:cb:b1:f8:29:
43:b4:4c:0f:0c:95:7d:c1:1c:12:d7:33:9f:86:49:
ef:6f:2d:33:12:1b:e0:dc:1c:78:d3:6a:30:03:74:
a3:63:b2:a3:b1:59:8e:6b:24:8b:33:45:b0:b1:84:
80:8e:75:03:cf:b4:8a:9b:74:84:b6:c2:a8:78:2f:
74:35:26:1c:00:20:6c:5a:0a:41:c4:de:d3:24:0a:
f2:4f:87:76:a2:c1:45:18:ec:5b:0d:bd:f0:6b:60:
91:6e:bc:0d:25:08:a3:33:22:84:11:4e:e8:fe:25:
29:b5:a9:2d:25:c7:4e:56:12:04:6f:50:0c:d0:16:
2d:fe:f7:7d:1a:e0:c6:53:e3:83:a7:08:25:34:1c:
82:5d:03:2a:36:eb:eb:36:25:af:56:5a:3f:df:95:
34:b8:65:6c:35:c9:76:b3:60:97:98:0b:84:4c:69:
a4:03:f1:6d:bc:7e:e5:2a:86:bc:fd:0b:da:92:83:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F9:DC:F7:CB:B7:09:43:79:A1:B1:07:CF:1B:AB:3F:AA:E4:05:5C
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/XPnc98u3CUN5obEHzxurP6rkBVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e6:18:95:64:43:cd:96:5b:33:1f:c7:31:d4:28:f4:dc:3e:
0a:2d:dd:b1:1e:87:fa:41:60:84:51:d8:65:30:6b:ef:af:74:
72:a8:83:ee:1b:be:43:ec:11:8d:98:0d:4b:45:f9:a2:6f:5e:
1d:9a:d1:72:32:32:73:07:e3:a1:6a:32:c6:7b:65:a8:18:6a:
c7:61:ed:19:5b:ab:f0:04:09:9a:c7:aa:29:24:b1:5a:fa:cd:
b0:71:fa:87:d8:1a:38:bd:92:cc:ae:25:b2:8b:ef:ba:ee:d4:
dc:aa:ae:45:82:05:20:3a:f2:7c:c0:b6:d9:a2:13:55:dc:df:
35:7b:40:9b:49:32:a1:e6:d3:d0:ae:99:14:15:a7:74:59:4a:
d3:f1:1e:2d:e9:74:db:62:99:9b:b4:d7:b5:f7:79:58:ae:a2:
ed:f2:32:d5:88:f0:ad:da:06:e7:45:b1:fe:78:ed:26:b9:01:
d6:2d:ef:8f:b5:1c:d3:9e:34:e4:1f:35:2a:ee:d7:84:ea:0f:
57:ae:bd:63:a7:a4:8f:cf:53:11:f2:8f:dd:1c:ab:ed:f0:1d:
f7:69:64:ba:dc:d2:0c:18:35:15:6d:d1:95:ff:cc:18:31:75:
52:4a:f2:75:1f:9d:ec:f0:5a:0f:08:e4:34:32:b0:d5:ec:dc:
6b:8f:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:46 2026 by rpki-client