Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/XCdVMh8AKADdJDPu6KFSe_oQz38.roa
File: XCdVMh8AKADdJDPu6KFSe_oQz38.roa (raw, json)
Hash identifier: nLSSyY1/QncLqqHV2lGPsT2caZ8SwcYowKfgfgbtkOk=
Subject key identifier: 5C:27:55:32:1F:00:28:00:DD:24:33:EE:E8:A1:52:7B:FA:10:CF:7F
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019F5C28420CF1C746CFCB34272F93B03ACC
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/XCdVMh8AKADdJDPu6KFSe_oQz38.roa
Signing time: Mon 13 Jul 2026 15:46:09 +0000
ROA not before: Mon 13 Jul 2026 15:46:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216215
IP address blocks: 2a0b:a4c0::/29 maxlen: 29
2a13:dd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:28:42:0c:f1:c7:46:cf:cb:34:27:2f:93:b0:3a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jul 13 15:46:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c2755321f002800dd2433eee8a1527bfa10cf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:d1:a7:52:27:ea:98:b7:17:ce:09:35:45:
47:50:6a:fb:2f:45:8a:a1:39:bf:5a:04:1f:ea:0e:
bc:c5:fd:c4:4f:d6:45:7f:d2:2f:af:1e:21:dd:92:
80:ce:b9:9e:05:a4:14:99:17:e0:58:24:f9:15:43:
54:fe:9e:ce:d1:bb:d2:b4:a7:85:58:3d:30:d6:17:
2d:c0:c6:dc:66:d5:82:9d:bb:a2:6f:50:79:4a:d4:
2b:d3:fc:c1:be:c3:a1:09:a0:93:7b:c1:9d:e1:6c:
65:7a:57:d6:4f:a2:8a:9e:57:d4:8f:40:00:7d:bd:
38:18:82:af:e7:b4:40:95:92:64:90:5a:a6:b0:53:
7d:5b:27:bb:25:ec:80:ea:32:f1:28:55:62:43:78:
88:a9:e8:81:90:1e:20:33:71:a6:9a:63:74:28:83:
22:18:a1:03:2b:99:27:ee:da:18:e1:a8:a9:35:2e:
9b:6d:77:e2:c0:a7:b1:99:82:63:56:31:75:2b:ee:
ba:98:97:0b:6a:f1:de:1f:30:d5:6f:f2:94:fa:f8:
0a:86:0f:40:31:3e:a2:df:23:c8:b4:c7:46:70:b4:
59:e8:93:09:3d:ac:2b:da:1d:10:cc:6f:be:c8:46:
16:30:1b:9b:03:6b:55:0b:64:30:ac:74:76:cc:8f:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:27:55:32:1F:00:28:00:DD:24:33:EE:E8:A1:52:7B:FA:10:CF:7F
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/XCdVMh8AKADdJDPu6KFSe_oQz38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a4c0::/29
2a13:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
65:28:0e:3c:eb:97:bb:71:cb:2d:9d:34:8d:48:06:59:6a:11:
af:ea:33:63:96:d9:12:5a:cc:37:e1:d4:a8:79:c9:e4:03:2b:
31:13:7d:59:b7:09:9f:cf:af:2d:4f:e9:79:f3:24:7e:f6:6c:
c5:b8:77:4e:f2:a5:af:0f:a1:87:2d:d2:1a:02:ff:a3:a9:61:
9c:d9:a4:9d:92:2a:e4:1a:7f:93:2b:13:90:9c:6d:86:19:f9:
92:f4:e3:50:84:cb:cc:c9:66:62:09:52:79:23:e6:41:bb:5d:
3d:87:9f:ca:96:4f:2b:41:70:40:23:f1:a6:e3:d5:93:e0:73:
0e:33:69:79:6c:38:1e:24:05:35:84:1b:62:85:89:34:5d:00:
8e:1c:18:96:0c:12:f6:38:3c:46:7f:c2:ab:0c:f8:8e:24:d6:
da:ef:52:c6:bb:a9:3d:04:69:d9:c8:cf:96:13:9b:3a:ea:ee:
ff:8d:0a:f3:5b:09:c2:02:c8:1f:73:93:cb:97:ff:b9:b1:ea:
ab:ca:6b:c9:62:a3:83:03:40:61:92:d2:f5:9c:60:08:1f:18:
6f:98:df:2d:fa:ba:80:2a:29:b5:99:9a:ac:56:41:4d:28:6d:
b6:80:9d:c5:10:0c:80:74:e0:6f:95:8d:31:c1:ba:6e:1c:cf:
e5:88:5b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:18 2026 by rpki-client