Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/xNCffOjDpgYu18GPK2NDcOgiELA.roa
File: xNCffOjDpgYu18GPK2NDcOgiELA.roa (raw, json)
Hash identifier: fzGsF3eRfGxp0+8ldtwDE45DuXXkb7TE5rh669GrYQ4=
Subject key identifier: C4:D0:9F:7C:E8:C3:A6:06:2E:D7:C1:8F:2B:63:43:70:E8:22:10:B0
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 01A110E4176B27B85F65A091929E5C31EF24
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/xNCffOjDpgYu18GPK2NDcOgiELA.roa
Signing time: Tue 06 Oct 2026 11:05:45 +0000
ROA not before: Tue 06 Oct 2026 11:05:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 95.128.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:e4:17:6b:27:b8:5f:65:a0:91:92:9e:5c:31:ef:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Oct 6 11:05:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4d09f7ce8c3a6062ed7c18f2b634370e82210b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:ec:c0:4e:a1:50:7b:9b:be:db:2b:da:22:
ef:b8:11:07:85:75:eb:ee:d2:03:68:f5:81:2e:fb:
bd:2e:50:dd:f1:02:08:d5:71:bb:75:2d:bf:e1:fd:
d8:e5:74:ac:35:a5:78:e5:b7:cd:da:ab:60:f7:1a:
d0:6a:8b:32:49:79:51:17:cd:44:d4:13:06:1e:c6:
95:af:44:b0:ad:0b:49:cb:34:f4:8e:70:43:d1:4d:
a5:c9:44:82:47:ec:0c:fb:47:ca:c4:15:d6:83:f3:
a1:5f:40:c2:3b:6a:3b:25:cd:53:d4:9b:ef:25:f9:
01:d5:1f:0c:15:a7:4d:73:5a:ec:ae:7c:c3:0c:d1:
a5:1e:dc:88:e2:55:ff:32:e8:e9:e7:dc:d8:6c:c2:
ea:b7:19:08:8e:1f:46:79:6b:57:0d:2d:34:ca:11:
f4:ae:3a:93:f9:9f:e3:40:8e:60:07:6d:e4:b1:54:
c5:93:34:64:7b:4d:5d:b9:50:44:dd:fc:4d:86:25:
e8:40:70:32:2c:e0:1b:56:58:5e:17:73:50:dd:23:
27:0d:65:25:f7:11:02:39:96:7d:61:b0:89:20:98:
67:10:2e:c1:74:fe:46:c4:7b:d4:1f:34:2b:4a:66:
af:46:8d:a3:3c:2e:a7:55:0a:33:ad:47:ed:fe:16:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D0:9F:7C:E8:C3:A6:06:2E:D7:C1:8F:2B:63:43:70:E8:22:10:B0
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/xNCffOjDpgYu18GPK2NDcOgiELA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.195.0/24
Signature Algorithm: sha256WithRSAEncryption
89:74:46:71:20:93:2c:03:e3:c5:d8:06:05:a5:ce:cc:eb:ad:
d0:0f:d1:47:67:eb:85:da:99:71:cc:81:02:32:b5:73:d7:d4:
58:9e:8e:03:69:6d:ca:fe:1a:4c:40:d6:fc:54:15:95:ef:2b:
f7:21:56:ee:73:d4:4b:0b:72:83:8f:21:16:56:af:f5:8b:ac:
30:8e:00:84:cf:76:1e:4d:f7:dc:71:d1:79:e1:49:d3:de:c7:
72:ac:23:22:31:54:b3:00:a5:bd:1a:dd:c9:9f:4c:e1:42:bb:
05:8a:67:f1:74:60:22:16:9c:e2:3d:ef:5a:91:77:53:b1:64:
c0:df:b6:19:94:10:8b:51:55:cc:bd:62:27:c7:08:59:2a:3d:
f5:85:cd:8b:b2:8e:ef:d1:22:67:8c:1e:6b:a3:26:f1:f7:ee:
2c:e8:37:81:0b:e0:a8:20:e1:5a:fb:d1:19:dd:a5:88:56:49:
56:09:5c:a8:3d:65:cb:da:b3:73:f2:c2:2d:98:43:63:a8:14:
bc:44:f9:3f:99:6c:47:b2:ee:30:78:74:2d:3f:84:09:22:81:
b9:5f:b5:cc:7e:09:78:02:2e:d6:2d:da:e7:cd:89:8b:e8:1a:
de:11:f6:25:c3:64:c3:27:ac:77:56:a1:2c:39:39:6d:b2:19:
b9:9d:5f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 15:19:41 2026 by rpki-client