Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/ddded3-5491-4964-8c37-ec9d72b35c29/1/rxx610TEM9K7g4k8uEuD_x3BY2g.roa
File: rxx610TEM9K7g4k8uEuD_x3BY2g.roa (raw, json)
Hash identifier: hWWk8EwyqjcDzUE/xZKAlOyEjA5gxVP+zqApjAKcJHI=
Subject key identifier: AF:1C:7A:D7:44:C4:33:D2:BB:83:89:3C:B8:4B:83:FF:1D:C1:63:68
Certificate issuer: /CN=00be0d9e3142e80f3c8f947b0005fbca7a069cbd
Certificate serial: 019FEB0749245124D1B60230A9E13D7565E0
Authority key identifier: 00:BE:0D:9E:31:42:E8:0F:3C:8F:94:7B:00:05:FB:CA:7A:06:9C:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL4NnjFC6A88j5R7AAX7ynoGnL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ddded3-5491-4964-8c37-ec9d72b35c29/1/rxx610TEM9K7g4k8uEuD_x3BY2g.roa
Signing time: Mon 10 Aug 2026 09:35:51 +0000
ROA not before: Mon 10 Aug 2026 09:35:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215204
IP address blocks: 176.102.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ddded3-5491-4964-8c37-ec9d72b35c29/1/AL4NnjFC6A88j5R7AAX7ynoGnL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ddded3-5491-4964-8c37-ec9d72b35c29/1/AL4NnjFC6A88j5R7AAX7ynoGnL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL4NnjFC6A88j5R7AAX7ynoGnL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:07:49:24:51:24:d1:b6:02:30:a9:e1:3d:75:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00be0d9e3142e80f3c8f947b0005fbca7a069cbd
Validity
Not Before: Aug 10 09:35:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af1c7ad744c433d2bb83893cb84b83ff1dc16368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:d5:db:72:12:ea:98:3c:2b:7d:2d:0e:7e:
32:bc:f5:11:4e:fc:32:12:05:a3:42:d0:ba:bb:6b:
e7:06:26:7b:19:db:2e:65:32:f2:01:d1:50:98:6b:
ee:ed:4d:f8:60:0e:2e:c4:75:d4:f8:e4:46:23:7c:
de:8e:fc:36:41:c5:9f:da:33:36:bf:e6:9e:a8:1d:
f2:66:7e:ce:39:0f:e1:c1:a8:5c:47:97:8d:e8:e7:
4a:6e:83:23:ba:72:d5:63:f2:d6:fa:41:ec:a0:11:
05:eb:b9:5f:6f:f9:02:d2:a8:d0:04:0a:de:e4:b6:
19:27:8c:d9:0d:83:45:cb:0a:c9:5d:98:dd:dc:84:
9d:2a:0f:4b:73:a4:92:a9:76:32:df:2c:9c:12:0a:
16:e0:c2:3b:db:8d:e2:f3:74:0d:7f:55:f6:f5:09:
36:3d:29:fc:63:da:30:31:2d:ce:4f:f0:b7:db:88:
3a:a1:df:f5:58:00:e9:c6:c0:1d:05:51:92:1c:12:
fc:48:5d:df:5c:cf:47:15:65:60:78:94:de:68:c6:
7f:77:ad:7a:fc:90:b9:c5:32:82:35:80:ec:45:b2:
26:ee:35:2f:cd:76:18:f3:34:a1:23:48:08:6f:dc:
5b:e3:0a:51:db:74:99:38:74:1f:20:36:fb:e5:cc:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1C:7A:D7:44:C4:33:D2:BB:83:89:3C:B8:4B:83:FF:1D:C1:63:68
X509v3 Authority Key Identifier:
keyid:00:BE:0D:9E:31:42:E8:0F:3C:8F:94:7B:00:05:FB:CA:7A:06:9C:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL4NnjFC6A88j5R7AAX7ynoGnL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ddded3-5491-4964-8c37-ec9d72b35c29/1/rxx610TEM9K7g4k8uEuD_x3BY2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ddded3-5491-4964-8c37-ec9d72b35c29/1/AL4NnjFC6A88j5R7AAX7ynoGnL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.189.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e4:0f:15:a6:23:ad:95:5f:78:af:6d:e0:6f:ef:f1:7e:ff:
74:1c:da:07:d1:5d:04:d8:2a:25:4b:c9:ef:b4:1d:0d:be:e7:
7d:82:25:86:10:25:ba:97:e3:7e:4e:9e:3d:34:a7:bf:05:08:
9c:2d:06:9f:c9:02:50:85:7f:b0:40:49:e4:0a:66:23:a1:84:
d2:33:be:9d:fb:48:b3:af:48:44:3f:ef:e9:b9:e0:24:14:88:
6a:f2:52:54:59:90:a4:e1:b5:79:8b:6f:6d:a5:f3:40:71:a4:
04:f4:cc:4a:02:31:f5:8d:22:84:70:c5:19:13:d3:08:bc:ef:
28:b2:61:44:79:e4:7f:35:97:e8:57:ef:d3:14:6d:77:92:23:
ec:bc:4d:cb:41:01:72:b4:a1:62:3e:b2:ad:ac:d1:3b:6c:e0:
58:c0:f0:a8:c9:82:7c:bf:ba:7e:16:69:ab:ab:5d:b2:da:c5:
78:f1:7e:0a:57:19:d5:c6:ab:98:d8:00:a4:57:fb:cb:d9:aa:
e1:03:43:0e:30:88:7f:8e:1f:2e:2e:db:99:f5:8a:29:64:7e:
4d:f4:f5:d1:d4:02:1d:5f:c1:6e:dd:cc:bd:27:78:80:cc:c8:
04:a7:27:95:0e:20:07:3a:a0:7d:9f:c1:0e:20:1d:ff:20:ee:
1c:86:da:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:45 2026 by rpki-client