Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/xEyAi3SjwvGfzGwJumrRBhFlIMg.roa
File: xEyAi3SjwvGfzGwJumrRBhFlIMg.roa (raw, json)
Hash identifier: RnllkRsBF2Jf+lnWH4lFOC21D8DgvcE1VgArskA/XZk=
Subject key identifier: C4:4C:80:8B:74:A3:C2:F1:9F:CC:6C:09:BA:6A:D1:06:11:65:20:C8
Certificate issuer: /CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Certificate serial: 01A19C65CD8EA4D2BCF27D32C69E653AA039
Authority key identifier: 8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/xEyAi3SjwvGfzGwJumrRBhFlIMg.roa
Signing time: Mon 02 Nov 2026 13:14:39 +0000
ROA not before: Mon 02 Nov 2026 13:14:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200570
IP address blocks: 91.198.142.0/24 maxlen: 24
195.138.41.0/24 maxlen: 24
195.253.228.0/22 maxlen: 22
2a0e:45c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:65:cd:8e:a4:d2:bc:f2:7d:32:c6:9e:65:3a:a0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Validity
Not Before: Nov 2 13:14:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c44c808b74a3c2f19fcc6c09ba6ad106116520c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:5a:6d:5e:c1:98:75:62:e2:82:ec:ea:b7:
c1:3f:c1:18:b6:4f:15:90:f0:0b:ee:08:c9:51:e1:
02:d5:4d:35:c1:d8:7e:8c:20:5a:be:d3:8d:07:b2:
c2:cd:32:88:e3:e6:20:63:5b:1c:37:a1:be:bc:4e:
d1:24:19:5d:13:df:be:b6:24:90:3b:72:7c:5e:07:
30:da:4b:ce:82:c9:81:e1:23:be:e2:7a:b2:6f:95:
91:d3:ee:5a:46:27:bd:61:1f:e4:37:1c:2a:61:d4:
60:d8:20:7a:02:7e:58:76:1a:66:a7:7c:16:8a:b9:
69:f5:f8:79:08:8d:f6:88:08:46:06:8b:2e:5c:96:
cf:5c:69:c8:85:cd:66:40:bb:f5:ee:73:cd:e8:f5:
3a:73:6a:13:d5:08:2c:4d:23:5e:10:f0:19:53:b1:
75:c3:96:a5:9b:ce:28:f8:f2:5c:dc:52:5a:27:0e:
5d:c9:42:d5:d7:c7:d2:2b:bc:82:36:5f:20:fe:a9:
3a:b9:8f:a0:ce:4b:0e:7b:93:5a:38:e6:d7:dd:51:
5a:0d:1e:43:69:85:eb:e7:b4:ed:20:4e:e9:ec:8f:
1d:fe:fe:bf:95:89:88:08:2d:43:df:d2:3f:6b:ad:
78:41:32:b3:3f:1d:9e:ad:61:26:1d:5b:08:3f:38:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4C:80:8B:74:A3:C2:F1:9F:CC:6C:09:BA:6A:D1:06:11:65:20:C8
X509v3 Authority Key Identifier:
keyid:8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/xEyAi3SjwvGfzGwJumrRBhFlIMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.142.0/24
195.138.41.0/24
195.253.228.0/22
IPv6:
2a0e:45c0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:ae:f9:c9:e0:87:5e:99:4e:74:44:9e:e7:53:ea:b9:87:df:
23:a2:4f:ba:4f:f8:5d:3c:fb:f8:84:20:f1:72:8c:fa:94:04:
86:42:ce:44:04:4d:e0:85:cf:2a:01:66:3a:b7:2d:3c:f3:bf:
b2:57:54:20:90:3e:32:59:cb:cc:56:ec:73:d8:e5:18:0a:97:
66:60:c7:bd:aa:ce:c6:be:7f:70:41:bd:79:9d:cb:4e:5f:00:
da:6c:23:e2:f2:ba:36:c7:91:76:ee:98:68:a8:7c:32:99:ef:
58:42:83:c8:10:7b:10:bc:5e:62:20:c5:1a:a9:61:52:25:82:
86:fa:0c:d1:c9:d7:6d:a8:63:e9:5f:97:f5:cf:fa:c7:b7:2a:
10:76:55:0a:38:37:59:50:e7:d5:18:19:09:07:eb:05:3f:05:
81:23:d6:96:7d:c3:3f:e1:8d:68:26:d2:ab:8d:0c:eb:9b:3d:
b0:3d:61:99:c9:07:a2:88:96:53:08:ed:8f:20:e2:1e:87:8d:
39:f5:33:30:09:25:30:94:63:0c:d4:9e:29:84:8e:86:93:80:
d6:32:c4:98:31:4f:25:60:ac:fa:ee:56:1e:40:1c:a6:fe:12:
3b:3e:2d:a2:15:90:44:75:98:40:65:65:d0:ab:ce:73:a0:cc:
23:3c:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:14:39 2026 by rpki-client