Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/XsO2HaqGs-17M3S_0Vkj-FO0Hco.roa
File: XsO2HaqGs-17M3S_0Vkj-FO0Hco.roa (raw, json)
Hash identifier: hE1KJAdLZvP7FX5UT1YKHBqj5sFEzuymXQsrErEPbpw=
Subject key identifier: 5E:C3:B6:1D:AA:86:B3:ED:7B:33:74:BF:D1:59:23:F8:53:B4:1D:CA
Certificate issuer: /CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
Certificate serial: 019F2368BE3F094B76016624404ACB5E0E1E
Authority key identifier: 79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/XsO2HaqGs-17M3S_0Vkj-FO0Hco.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 185.192.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:be:3f:09:4b:76:01:66:24:40:4a:cb:5e:0e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ec3b61daa86b3ed7b3374bfd15923f853b41dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:20:b0:17:08:86:ec:7f:7d:58:5a:44:f6:
a9:55:7f:46:9e:48:c5:76:3d:25:95:9c:57:51:03:
86:25:18:98:11:43:81:98:d8:60:81:1b:f0:90:fa:
96:3f:08:15:1b:b5:1d:66:9f:3c:a1:03:38:d4:75:
6e:32:90:d4:77:e5:e2:bd:d7:29:f7:a0:87:e7:d0:
20:e5:c6:51:04:fe:06:78:99:29:f8:53:07:2c:3d:
20:7a:f0:4f:af:f5:b8:93:57:8a:c1:e9:75:9a:71:
9f:8b:2f:70:48:fb:e2:b0:40:af:b9:06:c3:9c:fa:
27:1e:3f:e8:17:d7:86:e6:65:c0:6c:1b:e7:0c:ae:
6e:7e:c7:45:f1:8d:d5:78:fe:40:a9:eb:d3:62:0e:
b6:7a:e2:80:d6:8a:c4:75:03:d9:e1:78:5c:23:21:
7c:62:e0:8d:6b:c3:f0:bf:58:e5:d1:ea:67:ff:aa:
da:d6:47:da:94:5b:dc:61:c0:58:52:92:f2:5b:68:
5d:34:7e:1e:1c:18:43:f4:59:29:57:a5:d3:2f:f2:
09:8c:e1:f9:65:8e:5e:8a:29:6e:b8:3e:9b:bf:89:
30:03:8f:ff:05:c6:19:ac:f6:1b:7b:6d:07:33:3d:
c5:c0:b6:7e:b9:f7:d7:d9:91:d8:ed:d8:e5:c7:33:
ae:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C3:B6:1D:AA:86:B3:ED:7B:33:74:BF:D1:59:23:F8:53:B4:1D:CA
X509v3 Authority Key Identifier:
keyid:79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/XsO2HaqGs-17M3S_0Vkj-FO0Hco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.58.0/23
Signature Algorithm: sha256WithRSAEncryption
60:44:2b:80:f4:f7:dc:3a:82:a0:c6:79:0f:39:b5:b6:af:20:
a3:ce:b5:b7:54:5b:65:e6:c4:9d:8d:86:79:60:58:3c:51:1a:
7b:b1:74:4d:86:97:69:77:3f:99:7f:52:c1:ad:ba:60:84:6d:
11:b3:99:70:7a:1b:22:6e:ac:26:07:a1:5e:14:26:0c:36:16:
24:b0:bf:e8:3a:e6:3d:50:5e:c3:a6:c8:09:7c:1d:a0:42:2f:
3c:eb:4e:78:02:b4:92:8d:87:52:32:26:4e:d4:97:c0:fe:7f:
28:cb:f9:c8:61:d4:04:fd:27:68:aa:8b:61:71:eb:7a:96:62:
49:71:e5:78:87:82:4b:af:5f:a8:bc:56:c8:1c:76:e3:ae:aa:
fc:39:53:f4:81:fc:8b:0f:6a:8b:7c:61:34:fe:dd:92:8c:68:
bb:7a:15:eb:a6:94:0d:8b:9a:87:6c:25:76:42:dd:c6:fd:c9:
a5:29:87:a9:ba:77:09:e1:20:74:ba:14:c5:05:c0:0f:38:0d:
63:67:94:f7:1c:5c:67:a9:8f:20:99:e9:b6:28:26:72:3d:1e:
30:4c:12:b6:d5:ce:01:d3:5f:93:f2:de:1e:2c:6a:89:a2:02:
a0:9f:b8:8f:bc:0b:45:7a:35:58:10:ec:8f:c2:a1:89:68:76:
89:0d:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:33:39 2026 by rpki-client