Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Xog_nd8dAVnkFLkORPr91SpKk84.roa
File: Xog_nd8dAVnkFLkORPr91SpKk84.roa (raw, json)
Hash identifier: E1il2NCjdcizKXlWOtMZ+o5Jg5MM9OWro1CACOBanxE=
Subject key identifier: 5E:88:3F:9D:DF:1D:01:59:E4:14:B9:0E:44:FA:FD:D5:2A:4A:93:CE
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019F57E92043CE0E1DB96F710F34D1123661
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Xog_nd8dAVnkFLkORPr91SpKk84.roa
Signing time: Sun 12 Jul 2026 19:58:43 +0000
ROA not before: Sun 12 Jul 2026 19:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2a13:d0c0::/32 maxlen: 32
2a13:d0c5::/32 maxlen: 32
2a13:d0c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:57:e9:20:43:ce:0e:1d:b9:6f:71:0f:34:d1:12:36:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jul 12 19:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e883f9ddf1d0159e414b90e44fafdd52a4a93ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:a8:e0:7b:a5:89:dd:ce:71:0f:6d:45:89:
05:af:ab:b8:4b:9c:6b:ec:8e:cb:5e:f0:d3:28:49:
d9:87:48:63:75:2d:f1:d0:44:ba:0e:53:af:a2:4f:
e8:08:4e:d8:92:55:1e:59:ed:85:fc:ee:ed:56:2e:
2f:93:be:19:ae:a5:c6:c4:56:5e:4a:ee:35:29:e5:
ba:e2:97:3b:81:13:18:2a:dd:b7:70:d2:44:22:3e:
8b:03:66:9b:6f:ba:55:14:90:a9:ff:f5:c1:3b:26:
d9:f4:3d:41:a3:19:71:0f:61:32:53:92:94:85:36:
90:49:f0:d5:a2:b1:42:d4:c2:ca:50:87:3a:6e:44:
32:5d:a3:30:15:f9:0f:d1:58:78:6b:00:fa:1a:36:
ae:67:d5:8e:a3:62:ed:82:bf:cd:a6:1b:40:7a:59:
cf:84:93:8e:ac:c4:c4:75:79:b5:df:47:2f:e1:64:
1d:67:ad:12:5a:07:f2:54:42:90:b6:f6:d8:d3:02:
60:e2:78:be:81:9c:02:9c:d7:85:a8:e2:b7:ee:09:
92:2a:5e:bd:a8:b6:7b:7e:fd:0d:55:55:bb:08:d3:
4a:84:af:ee:41:29:8a:b3:c2:3b:28:8b:8d:77:6f:
8b:0f:93:72:54:70:60:dd:6b:06:1c:3b:fd:80:65:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:88:3F:9D:DF:1D:01:59:E4:14:B9:0E:44:FA:FD:D5:2A:4A:93:CE
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Xog_nd8dAVnkFLkORPr91SpKk84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d0c0::/32
2a13:d0c5::/32
2a13:d0c7::/32
Signature Algorithm: sha256WithRSAEncryption
8e:18:54:5b:ea:68:d7:50:12:92:86:eb:d8:65:cf:af:43:e7:
31:88:a3:36:88:1a:be:36:6b:ee:f6:fb:ed:77:0b:50:25:30:
29:27:ea:be:9e:b4:a6:2a:1c:87:87:99:6c:ad:55:12:fc:fe:
6e:84:bf:a8:fa:25:ce:d1:b6:2e:50:5b:ed:89:8d:8c:a8:fb:
cb:84:ad:d0:d0:95:ee:c2:7b:87:aa:4e:82:86:7d:f2:b7:64:
f0:a6:8f:3a:32:0d:48:e7:fc:b0:b5:a2:98:32:64:e0:8f:57:
19:92:5a:7b:76:12:59:ce:66:8b:a7:a4:58:3f:33:2c:99:d8:
18:b9:7b:d6:78:7b:58:8c:8e:93:e4:bf:ef:12:73:e4:37:30:
dd:87:b4:29:36:7a:c8:11:5a:a9:63:6e:9e:3a:04:2b:84:26:
11:72:1b:0a:6b:8c:17:3b:ce:03:18:49:bc:12:5e:2b:ed:77:
31:62:8a:b3:c7:80:0a:13:c2:b0:42:8e:e3:4a:18:ba:18:b1:
99:93:05:a0:f0:66:4c:97:78:37:97:be:5c:6c:f5:0b:ad:f4:
86:b0:99:62:25:93:7d:d8:52:1b:9a:60:e3:fd:0a:17:40:f2:
40:3e:42:f6:21:ee:f3:5a:f5:99:93:11:84:5e:22:f6:2e:22:
f5:ce:7c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:28 2026 by rpki-client