Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mXewRIHxcsGwPSNYAB9zCpo5zUw.roa
File: mXewRIHxcsGwPSNYAB9zCpo5zUw.roa (raw, json)
Hash identifier: veKz6tbRMvhYeA3qsbpL57QqCA9c6QjR5lh8SMeFr84=
Subject key identifier: 99:77:B0:44:81:F1:72:C1:B0:3D:23:58:00:1F:73:0A:9A:39:CD:4C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A05E48BF734B50C68B7961E72A2D07B02F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mXewRIHxcsGwPSNYAB9zCpo5zUw.roa
Signing time: Tue 01 Sep 2026 18:43:40 +0000
ROA not before: Tue 01 Sep 2026 18:43:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 84.21.188.0/24 maxlen: 24
176.96.140.0/24 maxlen: 24
176.96.141.0/24 maxlen: 24
193.254.234.0/24 maxlen: 24
193.254.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:48:bf:73:4b:50:c6:8b:79:61:e7:2a:2d:07:b0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 1 18:43:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9977b04481f172c1b03d2358001f730a9a39cd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:bc:6c:7d:bf:55:df:ec:f2:57:4a:23:1d:
09:19:36:17:41:c3:62:3a:1e:f4:a2:68:ba:be:40:
48:7d:a4:64:23:80:33:1e:4f:f8:42:e2:58:36:58:
b9:e4:5e:19:91:3d:e5:22:91:f3:88:90:5b:7f:2e:
47:f3:b6:5a:a4:5a:c0:8b:73:e0:bd:07:1d:31:22:
c5:25:5b:90:b6:07:bb:e8:1d:f1:41:83:0e:6c:6d:
e9:91:c6:28:0e:83:8d:87:0b:4f:95:21:86:97:4e:
51:8a:65:d1:86:65:ef:25:fe:b9:d1:53:87:f8:29:
c7:0e:1c:9c:84:70:00:da:5e:46:78:22:d3:6c:12:
2e:91:14:e7:00:c4:b1:01:dc:4b:ec:e3:59:99:01:
68:21:14:d8:42:28:0d:3a:6a:8a:92:9e:25:49:8b:
6b:44:3d:48:27:8a:e1:1c:1f:20:38:d9:21:98:7a:
c8:96:b3:55:2f:2b:1e:64:e2:93:3c:99:07:e6:c4:
da:d2:49:8b:92:70:d9:bc:cc:ac:00:52:36:78:91:
67:e6:f0:57:cc:0a:fc:48:2a:de:a3:82:fb:70:fe:
9b:24:fe:a1:aa:8d:94:61:5b:8f:63:a5:c6:3a:0b:
7d:92:00:1d:77:ba:c0:22:f4:68:77:24:7d:b9:82:
01:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:77:B0:44:81:F1:72:C1:B0:3D:23:58:00:1F:73:0A:9A:39:CD:4C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mXewRIHxcsGwPSNYAB9zCpo5zUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.188.0/24
176.96.140.0/23
193.254.234.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:bd:05:42:75:84:34:24:3a:d1:f5:c6:ab:8a:8a:0a:17:2f:
06:b8:72:e6:bf:c6:06:98:14:b5:f0:19:a8:cd:a7:57:15:7e:
78:62:c0:54:a4:95:57:ed:08:08:3e:b2:99:b7:d9:eb:b4:5a:
4c:d2:9e:7e:6b:d4:8f:e6:a0:21:8f:52:ba:73:dc:c1:28:7d:
03:2e:68:ae:5b:f5:72:c5:50:ff:37:3d:a9:f2:44:55:55:fb:
1d:23:59:4e:74:1c:75:90:ba:42:b8:29:dd:58:9a:68:5d:78:
24:55:61:81:cc:c1:03:86:ba:b8:7c:a0:53:38:1e:b4:e7:5e:
ae:14:cd:5c:b0:65:47:5d:1a:38:d4:c2:f5:be:2d:9f:44:f3:
88:c2:2b:a1:71:88:b8:6c:11:7c:8e:10:af:ac:18:3a:63:b7:
b0:b7:83:d7:10:49:6c:8b:d6:3b:3e:fd:18:0b:a4:2b:e5:da:
27:1b:8a:44:35:7f:fa:ab:c0:df:c6:15:d9:13:1f:b9:6c:90:
ff:59:c1:2d:b7:e7:ff:1b:6e:4d:cf:34:0c:92:76:98:56:b3:
47:5a:27:64:95:9f:a0:08:68:dd:ef:99:29:c1:ae:0a:47:77:
04:02:bb:93:7d:4f:eb:bf:5c:07:09:94:b8:82:2d:5a:23:74:
c2:04:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:15 2026 by rpki-client