Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/X8yH0PJoNnaAMJ1puPSLVAVUHS0.roa
File: X8yH0PJoNnaAMJ1puPSLVAVUHS0.roa (raw, json)
Hash identifier: 2QiqjAhUCJqkU/KX0l2HbV2b7uQqJGlLOfDPS3TPuB0=
Subject key identifier: 5F:CC:87:D0:F2:68:36:76:80:30:9D:69:B8:F4:8B:54:05:54:1D:2D
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019F3D57AC6BEC14BFBB0ACA32EBE320AF53
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/X8yH0PJoNnaAMJ1puPSLVAVUHS0.roa
Signing time: Tue 07 Jul 2026 16:09:43 +0000
ROA not before: Tue 07 Jul 2026 16:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20860
IP address blocks: 107.181.136.0/24 maxlen: 24
162.220.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:57:ac:6b:ec:14:bf:bb:0a:ca:32:eb:e3:20:af:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jul 7 16:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fcc87d0f268367680309d69b8f48b5405541d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:ee:41:8f:26:7e:33:34:5c:46:53:a0:8b:
98:61:58:6f:b3:b0:39:97:fb:51:a6:92:76:13:11:
fe:7a:51:2b:dc:2d:f7:2c:49:13:61:2b:ba:84:5e:
8f:22:c2:64:58:ee:68:70:24:80:03:0f:21:17:69:
d4:fe:d4:6a:f3:c8:3e:6f:47:0f:4a:59:0d:a3:9d:
0c:83:c8:b5:4c:5c:56:b4:fe:62:db:bc:f5:ee:7d:
1f:fe:cb:42:71:31:92:b9:c4:e5:2d:aa:21:05:c7:
9f:ed:7c:7c:70:c8:ea:81:3c:4e:d8:d6:31:83:8f:
a9:51:3f:2c:dc:cd:cd:83:15:5a:cb:d3:93:2c:be:
58:32:d0:f0:98:93:8e:14:62:cf:3a:82:c0:24:16:
6d:08:11:22:95:06:55:ba:0c:96:31:4a:f2:b7:23:
59:ec:a1:ec:66:4c:ff:b7:91:67:3d:37:97:36:65:
b4:f4:39:10:44:71:bd:be:d6:f6:3b:3d:a6:bf:8c:
1e:61:31:bf:a3:c7:49:ff:59:93:1c:03:3b:3a:42:
a2:ed:83:79:63:49:e4:6e:66:b4:5f:65:72:d5:25:
70:3a:71:6f:c4:f8:0b:cd:62:ce:c7:7c:5e:83:e4:
b8:8e:86:86:f5:69:5e:38:ec:52:58:80:43:3d:22:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CC:87:D0:F2:68:36:76:80:30:9D:69:B8:F4:8B:54:05:54:1D:2D
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/X8yH0PJoNnaAMJ1puPSLVAVUHS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.136.0/24
162.220.245.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ca:01:18:ca:00:3c:01:19:25:d3:8c:31:d3:60:dc:53:8f:
de:ee:fc:d3:73:53:4a:79:bc:79:bb:b2:8a:56:20:31:bd:e1:
e8:72:a9:bc:36:24:93:ae:d5:c1:7d:a2:9c:5a:11:60:13:cb:
66:d3:7f:b0:ed:63:aa:22:69:1b:1a:b8:e1:6a:01:82:44:15:
9e:d9:93:0e:a7:57:50:73:ea:95:b7:3f:49:ea:60:20:a1:49:
24:f9:c9:1a:01:08:3f:e3:10:b3:f7:be:35:88:7b:47:df:a6:
2c:1d:34:64:ad:e1:f5:eb:d8:54:57:51:28:a8:e6:1d:d2:f2:
d3:29:52:06:09:f6:80:8e:30:70:93:a3:62:93:cc:a7:95:cc:
4d:da:bc:68:37:2f:83:25:2c:4f:c6:d7:bc:3a:1c:89:ce:46:
39:88:67:b2:31:29:df:87:3f:51:24:af:4f:ed:d3:46:a9:f5:
1f:80:e5:3c:3f:5f:27:32:06:e7:97:53:41:9d:e7:01:8e:83:
d8:80:d0:fa:f1:88:54:6e:36:45:dd:cf:df:cd:a0:2c:0b:f7:
cc:62:49:33:d5:dd:bf:fe:18:bd:cd:d5:6d:c3:e0:31:b2:5a:
4b:ec:44:d0:2f:c8:da:d1:d7:57:16:79:40:45:93:51:49:0d:
1c:1c:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:32 2026 by rpki-client